Skip to content
clusters: prooflayer · edgemarket · edgefinance · synthforge · mediakit · wordmint · webprobe · locale · comppoint
$ man whois-lookup

/whois-lookup(1)

agentutility / web-probe / whois-lookup
PRICE / CALL
$0.02
USDC · base mainnet · scheme: exact
METHOD
POST
CLUSTER
webprobe
CATEGORY
utilities
STATUS
live
NAME
whois-lookup whois / rdap domain lookup
SYNOPSIS
POST https://x402.org/v1/whois-lookup
     Content-Type: application/json
     X-PAYMENT:    <signed-transferWithAuthorization>

     { ... }
↳ first call → 402 Payment Required. Sign USDCtransferWithAuthorization, retry with theX-PAYMENT header.
DESCRIPTION

WHOIS / RDAP domain lookup. Registration date, age, expiration, registrar, contacts, nameservers, DNSSEC, status flags, transfer history. Optional certificate-transparency summary.

INPUTrequest schema
propertytypedescriptionreq?
domainstringApex domain to look up (e.g. 'example.com'). Subdomains are stripped to the registrable domain before query.required
include_certificatesbooleanIf true, fetch a crt.sh certificate-transparency summary (issuer counts, first/last seen, total certs). Default false.optional
OUTPUTresponse shape
fieldtypedescription
domainstringQueried domain name in canonical lowercase form.
rdap_serverstringRDAP server URL that answered the lookup for this TLD.
registered_datestringDomain creation timestamp in ISO 8601 format.
expiration_datestringCurrent registration expiration timestamp in ISO 8601 format.
age_daysnumberDays elapsed since the domain was first registered.
days_until_expirynumberDays remaining until the current registration expires; negative if already expired.
registrarobjectRegistrar record with name, IANA ID, and abuse contact email and phone.
contactsobjectRegistrant, admin, and tech contact roles with any unredacted name, org, email, and country.
nameserversarrayAuthoritative nameserver hostnames listed on the domain record.
dnssec_signedbooleanTrue if the domain has a signed DNSSEC delegation at the TLD.
statusesarrayEPP status codes on the domain such as clientTransferProhibited or pendingDelete.
flagsarrayDerived risk flags like newly-registered, expiring-soon, redacted-whois, or pending-transfer.
cert_summaryobjectCertificate-transparency summary with first-seen date, recent issuers, and active cert count.
EXAMPLEStwo ways to call
EXAMPLE 1 · curl
curl -X POST https://x402.org/v1/whois-lookup \
  -H 'Content-Type: application/json' \
  -d '{ }'
first response = 402 Payment Required with payment requirements; sign + retry with X-PAYMENT.
EXAMPLE 2 · mcp
# install once
claude mcp add x402 --command "npx x402-deployer-mcp"

# then ask Claude Code:
# "use the whois-lookup tool to ..."
MCP server handles payment automatically — your coding agent just calls the tool by name.
METADATA
tags
whoisrdapdomaindnssecurity
methods
POST
cluster
webprobe
price
$0.02 USDC per call
ADJACENTother endpoints in webprobe
endpointdescriptionprice
archive-snapshotWayback Machine API / archive.org wrapper.$0.02
dmarc-checkDMARC / SPF / DKIM checker.$0.02
dns-lookupDNS lookup / DNS resolver / DoH proxy.$0.02
expand-urlURL expander / redirect chain tracer / link-shortener resolver.$0.02
password-strengthPassword strength meter + breach checker.$0.02
whoisDomain WHOIS / RDAP lookup.$0.02
arxiv-searcharXiv full-text search.$0.03
ssl-certSSL certificate inspector / TLS cert checker / certificate transparency lookup / ssl expiry.$0.03
SEE ALSO
agentutility(7) · webprobe(7) · x402(7) · mcp(7) · llms.txt · registry.json · bazaar.x402.org