Everything to check before you trust a domain, in one call.

Who registered it and when, whether it really receives mail, how well its email is protected, where it's hosted and what it runs on, plus risk flags and a one-line summary. Built for fraud, sales and security agents.

What you get back

• DNS: A, AAAA, MX, NS, TXT, CAA and www
• Email: provider, SPF, DMARC, DKIM, MTA-STS, BIMI and a security grade from A to F
• Registration from RDAP: registrar, created, expires, age in days, nameservers, DNSSEC
• Web probe: status, server, HSTS, security headers, title, tech fingerprints
• Flags such as registered-recently, expires-soon, parked, no-dmarc, spf-plus-all

Call it over HTTP

No account and no API key. The first response is 402 Payment Required with the price; an x402-capable client pays in USDC on Base and retries. You're only charged when the call succeeds.

curl -i -X POST https://api.exepal.com/v1/domain \
  -H "content-type: application/json" \
  -d '{"domain":"stripe.com"}'
# → 402 Payment Required (price, network: base, pay-to address)
# An x402 client pays in USDC and retries → 200 with the JSON answer

Use it from Claude, Cursor or any MCP client

Add https://api.exepal.com/mcp as a remote MCP server. The tool is domain, at the same price.

{
  "mcpServers": {
    "exepal": { "type": "http", "url": "https://api.exepal.com/mcp" }
  }
}

Questions

Is this WHOIS?

It uses RDAP, the registries' JSON successor to WHOIS. Some country domains (for example .np) publish no RDAP; registration is then null with a note.

How fresh is it?

Answers are cached for six hours. DNS comes from a public DNS-over-HTTPS resolver and the web probe hits the site itself.

Can I pass an email address or URL?

Yes. It is reduced to its domain first.

Related tools