Domain Monitor MCP Server

MCP (Model Context Protocol) server for domain monitoring. Check WHOIS registration expiry via RDAP and SSL/TLS certificate expiry via crt.sh Certificate Transparency logs —zero API keys, zero signup required.

SSL certificates expire silently and take down production services. WHOIS registration expiry can lose your domain. This MCP server lets AI assistants (Claude Desktop, Claude Code, Cursor, Windsurf) proactively check domain health before it becomes an incident — no external monitoring dashboard needed, just ask your AI.

Check WHOIS registration expiry and SSL/TLS certificate expiry for one domain. Fetches WHOIS data via RDAP (free, no auth) and SSL data from crt.sh Certificate Transparency logs (free, no auth). URLs with protocols are auto-normalized (e.g.,https://www.example.com/path→example.com).

- domain(string): Normalized domain name
- whoisExpiry(string | null): WHOIS registration expiration date (ISO 8601)
- whoisDaysLeft(number | null): Days until expiry (negative = expired)
- sslExpiry(string | null): SSL/TLS certificate expiration date (ISO 8601)
- sslDaysLeft(number | null): Days until SSL expiry (negative = expired)
- sslIssuer(string | null): Certificate issuer organization name

LLM prompting hints: Use when the user asks a targeted question about one domain — "is example.com expired?", "check github.com SSL", "when does my domain expire?". Preferdomain_checkoverdomain_check_batchwhen checking ≤3 domains for readability.

domain_check_batch— Check Multiple Domains

Check multiple domains in parallel (up to 50) with configurable warning thresholds. Each domain returns a severity classification. Returns a summary with counts by status plus per-domain details.

Returns: JSON object withtotal,ok,warning,critical,expired,errorcounts plusresultsarray (each withdomain,status,whoisExpiry,whoisDaysLeft,sslExpiry,sslDaysLeft,sslIssuer,error).

LLM prompting hints: Use for portfolio-wide health checks — "check all our domains", "find any domains expiring soon", "audit SSL certs across the company". AdjustwhoisWarnDaysandsslWarnDaysbased on user's renewal workflow (e.g., usesslWarnDays=30for enterprises with slow certificate renewal processes).

## Usage ### Claude Code 

- Domain Expiry GitHub Action— Automated domain expiry monitoring as a CI workflow. Runs on schedule, checks domains, opens GitHub Issues on warnings. Zero config, zero API keys.
- Domain Monitor Client— Web dashboard for domain monitoring. Visual overview of all your domains' health status. Export to CSV.

Provides a unified interface to AWS services for security investigations and incident response.