$ man whois
/whois(1)
PRICE / CALL
$0.02
USDC · base mainnet · scheme: exact
METHOD
POST
CLUSTER
webprobeCATEGORY
utilities
STATUS
● live
NAME
whois — domain whois / rdap lookup
SYNOPSIS
POST https://x402.org/v1/whois
Content-Type: application/json
X-PAYMENT: <signed-transferWithAuthorization>
{ ... }↳ first call →
402 Payment Required. Sign USDCtransferWithAuthorization, retry with theX-PAYMENT header.DESCRIPTION
Domain WHOIS / RDAP lookup. Registration, age, expiration, registrar, contacts, nameservers, DNSSEC, status flags.
INPUT — request schema
| property | type | description | req? |
|---|---|---|---|
| domain | string | Apex domain to look up (e.g. 'example.com'). Subdomains are stripped to the registrable domain. | required |
| include_certificates | boolean | If true, attaches a crt.sh certificate-transparency summary. Default false. | optional |
OUTPUT — response shape
| field | type | description |
|---|---|---|
| domain | string | Queried domain name in canonical form (lowercased, punycode for IDNs). |
| rdap_server | string | RDAP service URL that answered the query, or the WHOIS host if RDAP was unavailable. |
| registered_date | string | Domain creation date in ISO 8601 (UTC) as reported by the registry. |
| expiration_date | string | Domain expiration date in ISO 8601 (UTC) as reported by the registry. |
| age_days | number | Days elapsed since the registered_date, rounded down. |
| days_until_expiry | number | Days remaining until expiration_date; negative if already expired. |
| registrar | object | Registrar record with name, IANA ID, abuse contact email, and URL. |
| contacts | object | Registrant, admin, and tech contact handles with any fields the registry exposes (often redacted). |
| nameservers | array | Authoritative nameserver hostnames listed at the registry for the domain. |
| dnssec_signed | boolean | True if the registry reports a signed delegation (DS records present) for the domain. |
| statuses | array | EPP status codes from the registry (clientTransferProhibited, serverHold, pendingDelete, etc.). |
| flags | array | Derived risk flags such as newly_registered, expiring_soon, redacted_contacts, or locked. |
| cert_summary | object | TLS certificate snapshot for the apex: issuer, notBefore, notAfter, SANs count, days_to_expiry. |
EXAMPLES — two ways to call
EXAMPLE 1 · curl
curl -X POST https://x402.org/v1/whois \
-H 'Content-Type: application/json' \
-d '{ }'first response =
402 Payment Required with payment requirements; sign + retry with X-PAYMENT.EXAMPLE 2 · mcp
# install once claude mcp add x402 --command "npx x402-deployer-mcp" # then ask Claude Code: # "use the whois tool to ..."
MCP server handles payment automatically — your coding agent just calls the tool by name.
METADATA
- tags
- whoisrdapdomaindnssecurity
- methods
- POST
- cluster
- webprobe
- price
- $0.02 USDC per call
ADJACENT — other endpoints in webprobe
| endpoint | description | price |
|---|---|---|
| archive-snapshot | Wayback Machine API / archive.org wrapper. | $0.02 |
| dmarc-check | DMARC / SPF / DKIM checker. | $0.02 |
| dns-lookup | DNS lookup / DNS resolver / DoH proxy. | $0.02 |
| expand-url | URL expander / redirect chain tracer / link-shortener resolver. | $0.02 |
| password-strength | Password strength meter + breach checker. | $0.02 |
| whois-lookup | WHOIS / RDAP domain lookup. | $0.02 |
| arxiv-search | arXiv full-text search. | $0.03 |
| ssl-cert | SSL certificate inspector / TLS cert checker / certificate transparency lookup / ssl expiry. | $0.03 |
SEE ALSO