Skip to content
clusters: prooflayer · edgemarket · edgefinance · synthforge · mediakit · wordmint · webprobe · locale · comppoint
$ man whois

/whois(1)

PRICE / CALL
$0.02
USDC · base mainnet · scheme: exact
METHOD
POST
CLUSTER
webprobe
CATEGORY
utilities
STATUS
live
NAME
whois domain whois / rdap lookup
SYNOPSIS
POST https://x402.org/v1/whois
     Content-Type: application/json
     X-PAYMENT:    <signed-transferWithAuthorization>

     { ... }
↳ first call → 402 Payment Required. Sign USDCtransferWithAuthorization, retry with theX-PAYMENT header.
DESCRIPTION

Domain WHOIS / RDAP lookup. Registration, age, expiration, registrar, contacts, nameservers, DNSSEC, status flags.

INPUTrequest schema
propertytypedescriptionreq?
domainstringApex domain to look up (e.g. 'example.com'). Subdomains are stripped to the registrable domain.required
include_certificatesbooleanIf true, attaches a crt.sh certificate-transparency summary. Default false.optional
OUTPUTresponse shape
fieldtypedescription
domainstringQueried domain name in canonical form (lowercased, punycode for IDNs).
rdap_serverstringRDAP service URL that answered the query, or the WHOIS host if RDAP was unavailable.
registered_datestringDomain creation date in ISO 8601 (UTC) as reported by the registry.
expiration_datestringDomain expiration date in ISO 8601 (UTC) as reported by the registry.
age_daysnumberDays elapsed since the registered_date, rounded down.
days_until_expirynumberDays remaining until expiration_date; negative if already expired.
registrarobjectRegistrar record with name, IANA ID, abuse contact email, and URL.
contactsobjectRegistrant, admin, and tech contact handles with any fields the registry exposes (often redacted).
nameserversarrayAuthoritative nameserver hostnames listed at the registry for the domain.
dnssec_signedbooleanTrue if the registry reports a signed delegation (DS records present) for the domain.
statusesarrayEPP status codes from the registry (clientTransferProhibited, serverHold, pendingDelete, etc.).
flagsarrayDerived risk flags such as newly_registered, expiring_soon, redacted_contacts, or locked.
cert_summaryobjectTLS certificate snapshot for the apex: issuer, notBefore, notAfter, SANs count, days_to_expiry.
EXAMPLEStwo ways to call
EXAMPLE 1 · curl
curl -X POST https://x402.org/v1/whois \
  -H 'Content-Type: application/json' \
  -d '{ }'
first response = 402 Payment Required with payment requirements; sign + retry with X-PAYMENT.
EXAMPLE 2 · mcp
# install once
claude mcp add x402 --command "npx x402-deployer-mcp"

# then ask Claude Code:
# "use the whois tool to ..."
MCP server handles payment automatically — your coding agent just calls the tool by name.
METADATA
tags
whoisrdapdomaindnssecurity
methods
POST
cluster
webprobe
price
$0.02 USDC per call
ADJACENTother endpoints in webprobe
endpointdescriptionprice
archive-snapshotWayback Machine API / archive.org wrapper.$0.02
dmarc-checkDMARC / SPF / DKIM checker.$0.02
dns-lookupDNS lookup / DNS resolver / DoH proxy.$0.02
expand-urlURL expander / redirect chain tracer / link-shortener resolver.$0.02
password-strengthPassword strength meter + breach checker.$0.02
whois-lookupWHOIS / RDAP domain lookup.$0.02
arxiv-searcharXiv full-text search.$0.03
ssl-certSSL certificate inspector / TLS cert checker / certificate transparency lookup / ssl expiry.$0.03
SEE ALSO
agentutility(7) · webprobe(7) · x402(7) · mcp(7) · llms.txt · registry.json · bazaar.x402.org