developer-toolsapi_key

Whoisfreaks

Best Source For Domain WHOIS Database and API.

Verdict

Whoisfreaks exposes 18 domain intelligence tools inside Switchy — WHOIS lookups, DNS queries, ASN data, IP geolocation, and bulk availability checks. @mention it to verify domain ownership, trace network infrastructure, geolocate IPs, or batch-check hundreds of domains at once. Engineers use it for threat intel and infra audits; product teams use it to scout domain names; support teams use it to validate customer networks. Setup requires an API key from Whoisfreaks (free tier covers light usage; bulk operations need a paid plan). Rate limits apply to bulk endpoints.

Common use cases

  • Verify domain ownership before outreach
  • Geolocate suspicious IPs in security logs
  • Batch-check domain availability for rebrand
  • Trace ASN ownership for network diagnostics
  • Pull DNS records during incident response

Integration

Vendor
Whoisfreaks
Category
developer-tools
Auth
API_KEY
Tools
18
Composio slug
whoisfreaks

Tools

  • ASN WHOIS Lookup

    Tool to retrieve comprehensive ASN WHOIS information including ownership, network infrastructure, and IP address ranges. Use when you need to identify ASN ownership, organization details, or associated IP blocks for network administration o

  • Bulk DNS Lookup

    Tool to process multiple domains or IPs simultaneously, returning all DNS records in a single request (max 100). Use when you need to retrieve DNS records for multiple domains at once for efficient batch processing.

  • Bulk Domain Availability Check

    Tool to check availability of multiple domains in one request (max 100 domains). Use when you need to verify if domain names are available for registration. Response time ranges from 16 seconds to 1 minute for 100 domains.

  • Bulk WHOIS Lookup

    Tool to query WHOIS information for up to 100 domains in a single request. Use when you need comprehensive registration details, contact information, name servers, and domain status for multiple domains. Response includes normalized and par

  • Check Domain Availability

    Tool to check if a domain is available for registration with optional suggestions. Use when you need to verify domain availability or get alternative domain suggestions.

  • DNS Live Lookup

    Tool to perform real-time DNS record resolution for network diagnostics and configuration verification. Use when you need to retrieve current DNS records for a domain or perform reverse DNS lookup for an IP address.

  • Get Domain Files Status

    Tool to check availability and update status of domain data files including newly registered, expired, and dropped domains. Use when you need to verify that domain data files are prepared and ready for download before accessing file downloa

  • IP Geolocation Lookup

    Tool to retrieve geographic location information for an IP address including country, city, coordinates, ISP, and security details. Use when you need to identify the physical location of an IP, detect VPN/proxy usage, or gather network inte

  • IP WHOIS Lookup

    Tool to retrieve comprehensive WHOIS information for an IP address including organization, ISP, and network details. Use when you need to identify IP ownership, allocation status, or contact information for network administration or securit

  • Security Threat Lookup

    Tool to check if an IP address is associated with malicious activity, security threats, or appears on blocklists. Use when you need to assess IP reputation, detect VPN/proxy/Tor usage, identify bots or spam sources, or evaluate security ris

  • SSL Certificate Lookup

    Tool to fetch live SSL certificate with full secure cert chain, validity dates, and issuer information. Use when you need to retrieve SSL certificate details for a domain, including certificate validation dates, issuer details, public key i

  • Subdomain Lookup

    Tool to discover all subdomains associated with a domain name. Use when you need to enumerate subdomains for security assessment, asset discovery, or domain reconnaissance. Supports filtering by active/inactive status and date ranges.

  • WHOIS Historical Lookup

    Tool to access historical domain records from comprehensive database with up to 100 records per page. Use when you need to retrieve historical WHOIS data for a domain dating back to 1986. Database is updated monthly with one-month data late

  • WHOIS Live Lookup

    Tool to fetch real-time WHOIS domain registration data directly from authoritative WHOIS servers. Use when you need current domain ownership, registration dates, contact information, or nameserver details. Note that some fields may show 'RE

  • WHOIS Live Lookup V2

    Tool to fetch real-time WHOIS domain data using v2.0 endpoint. Use when you need current domain ownership, registration dates, contact information, or nameserver details via the updated v2.0 API. Note that some fields may show 'REDACTED FOR

  • WHOIS Reverse Lookup By Company

    Tool to search for domains registered by a specific company or organization using reverse WHOIS lookup. Use when you need to find all domains associated with a particular company name. Performs full-text phrase matching with pagination supp

  • WHOIS Reverse Lookup by Email

    Tool to search for domains registered with a specific email address. Use when you need to find all domains associated with an email in WHOIS records. Supports exact or regex email matching. Returns paginated results with domain registration

  • WHOIS Reverse Lookup By Owner

    Tool to search for domains registered by a specific owner name using reverse WHOIS lookup. Use when you need to find all domains associated with a particular registrant or owner name. Performs pattern-based full-text search with pagination

Setup

Setup guide

  1. 11. Sign up at whoisfreaks.com and generate an API key from your dashboard. 2. In Switchy, open your workspace settings and navigate to Integrations. 3. Find Whoisfreaks under Developer Tools and click Connect. 4. Paste your API key when prompted and click Authorize. 5. Switchy confirms the connection and lists available tools. 6. Open any Space and type '@Whoisfreaks check if example.com is available' to test — the MCP returns availability status and optional suggestions. 7. For bulk operations, format your request as '@Whoisfreaks run bulk WHOIS lookup for domain1.com, domain2.com, domain3.com' (up to 100 domains). 8. Check your Whoisfreaks account dashboard to monitor API usage and rate limits.

What teammates see: by default, memories from Whoisfreaks are scoped to the Space (PROJECT visibility) - you can mark any memory PRIVATE or share it ORG-wide.

Works well with

Top models

Compatibility data appears once enough Spaces have used this MCP together with a given model.

How Switchy teams use it

Not enough Spaces yet to publish anonymised usage stats (we require ≥ 50 Spaces per week).

Starter prompts

Check Domain Availability

@Whoisfreaks check if acme-widgets.com is available for registration and suggest 5 alternatives if it's taken
Open in a Space →

Bulk WHOIS Lookup

@Whoisfreaks run bulk WHOIS lookup for competitor1.com, competitor2.com, competitor3.com and summarize registrant info and expiration dates
Open in a Space →

Geolocate IP Address

@Whoisfreaks geolocate IP 203.0.113.45 and tell me the country, city, ISP, and any security flags
Open in a Space →

ASN Ownership Lookup

@Whoisfreaks retrieve ASN WHOIS information for AS15169 including organization name and IP address ranges
Open in a Space →

DNS Record Retrieval

@Whoisfreaks perform live DNS lookup for example.com and show me A, MX, and TXT records
Open in a Space →

Example outputs

Illustrative - representative of the model's voice and quality, not literal recordings.

Prompt

@whoisfreaks check if 'mycompany-app.com', 'mycompany-app.io', and 'mycompany-app.dev' are available for registration

Output

Bulk availability check complete for 3 domains: • mycompany-app.com — **Taken** (registered 2019-03-14, expires 2025-03-14) • mycompany-app.io — **Available** for registration • mycompany-app.dev — **Available** for registration Both .io and .dev TLDs are open. The .com variant is held by a domain parking service with privacy protection enabled. If you need alternative suggestions for the .com, I can run a separate availability check with recommendations.

Notes

This example shows the bulk domain availability tool handling multiple TLDs at once. Response times range from 16 seconds to 1 minute depending on registrar API latency. The tool returns registration status and expiration dates for taken domains, but does not provide transfer or purchase links—you'll need to complete registration through your preferred registrar.

Prompt

@whoisfreaks run a bulk WHOIS lookup on the top 5 domains from our competitor analysis spreadsheet and summarize their registration patterns

Output

WHOIS data retrieved for 5 competitor domains. Registration pattern summary: **Corporate registrations (3):** All use corporate privacy services (Domains By Proxy, WhoisGuard). Registered 2015–2018, consistently renewed through 2026. Name servers point to Cloudflare enterprise accounts. **Individual registrations (2):** One domain shows founder's personal email in historical records (now privacy-protected). Both registered 2020–2021, shorter renewal cycles (1-year vs. 3-year for corporate domains). All five domains share AWS Route 53 DNS infrastructure. No domains are flagged for transfer locks or disputes.

Notes

This example pairs the bulk WHOIS tool (max 100 domains per request) with AI synthesis to extract competitive intelligence. The tool returns raw registration data—contact info, name servers, status codes—which the AI then patterns into strategic insights. Note that privacy protection services often mask current contact details; historical WHOIS data requires a separate API call.

Prompt

@whoisfreaks look up the ASN for IP 104.26.10.78 and tell me if it's part of a known CDN or hosting provider

Output

ASN lookup for 104.26.10.78: **ASN:** AS13335 **Organization:** Cloudflare, Inc. **Network range:** 104.16.0.0/12 (1,048,576 IP addresses) **Type:** Content Delivery Network (CDN) This IP is part of Cloudflare's global Anycast network, used for DDoS protection, caching, and edge delivery. The ASN owns 2,500+ IPv4 prefixes across 310+ cities. If you're seeing traffic from this IP, it's likely proxied through Cloudflare—the origin server's real IP is masked. Use the DNS Live Lookup tool if you need to trace the domain's actual hosting provider behind the CDN.

Notes

This example demonstrates the ASN WHOIS tool's ability to identify network ownership and infrastructure context. Useful for security investigations, traffic analysis, or vendor due diligence. The tool provides network ranges and organization details but does not include real-time abuse reports or blocklist status—pair with IP Geolocation Lookup if you need security flags or geographic routing data.

Use-case deep-dives

Security team threat intel triage

When Whoisfreaks wins for incident response domain lookups

A 6-person security team investigating phishing campaigns needs to pivot from a suspicious domain to its registrant, hosting provider, and related infrastructure in under 60 seconds. Whoisfreaks is the right call here because the bulk WHOIS and ASN lookup tools let you query 20-30 domains in a single Switchy thread without switching contexts. The IP geolocation tool adds ISP and abuse contact data that speeds up takedown requests. The threshold: if your team runs more than 50 domain lookups per day, you'll hit API rate limits on the free tier and need to budget for paid access. If you're triaging fewer than 10 incidents per week, the MCP overhead isn't worth it—just use a browser tab. For teams in the middle, Whoisfreaks turns a 15-minute manual lookup into a 2-minute AI-assisted workflow.

Startup brand protection monitoring

When this MCP handles domain squatting checks at launch scale

A 3-person marketing team launching a rebrand needs to check if 80 domain variants are registered by squatters before filing trademarks. Whoisfreaks' bulk domain availability tool processes the entire list in under 2 minutes, returning registration status and suggesting alternatives for taken names. The WHOIS lookup adds registrant details so you can assess whether a domain is parked or actively used by a competitor. This works well for one-time audits or quarterly checks. The boundary: if you need real-time monitoring (daily scans for new registrations matching your brand), Whoisfreaks doesn't offer alerting—you'd need a dedicated brand protection service. For launch-phase due diligence or M&A domain audits, this MCP gives you the data without paying for enterprise monitoring you don't need yet.

DevOps DNS config troubleshooting

When live DNS lookup beats your terminal for multi-region debugging

A 5-person platform team debugging a CDN failover issue needs to verify DNS propagation across 12 subdomains and 4 geographic regions in real time. Whoisfreaks' DNS live lookup tool runs queries from multiple vantage points and surfaces TTL mismatches or stale records that explain why traffic isn't routing correctly. The bulk DNS lookup handles the full subdomain list in one request, which is faster than running dig commands in a loop. The trade-off: if your DNS stack is already instrumented with observability tooling (Datadog, Grafana), you probably don't need this MCP—your dashboards show the same data. This wins when you're troubleshooting a one-off incident or onboarding a junior engineer who doesn't have dig muscle memory yet. For ad-hoc DNS debugging in Switchy, it's faster than context-switching to a terminal.

Frequently asked

What does the Whoisfreaks MCP do in Switchy?

It lets your team query domain registration data, DNS records, IP geolocation, and ASN ownership directly from chat. You can check if domains are available, pull WHOIS details for up to 100 domains at once, or trace an IP address to its physical location and ISP. Useful for security research, competitive analysis, or validating infrastructure before a launch.

Do I need a Whoisfreaks API key to connect this MCP?

Yes. You'll paste your Whoisfreaks API key into Switchy's connection form. The key authenticates every lookup request the MCP makes. If you don't have one, sign up at Whoisfreaks and generate a key from their dashboard. Free-tier keys work, but bulk operations may require a paid plan depending on your query volume.

Can the Whoisfreaks MCP register domains for me?

No. It only checks availability and retrieves registration data. If you want to actually buy a domain, you'll need to visit a registrar like Namecheap or GoDaddy. The MCP tells you whether a name is taken and suggests alternatives, but it doesn't handle transactions or DNS configuration changes.

How is this different from running whois commands in my terminal?

The MCP wraps Whoisfreaks' API, which aggregates data from hundreds of registries and returns structured JSON instead of raw text. You get bulk lookups, historical records, and geolocation in one call. Terminal whois hits a single registry and often omits privacy-protected contacts. The trade-off: you're rate-limited by your Whoisfreaks plan, not your network.

Who on my team should connect the Whoisfreaks MCP?

Anyone doing security audits, domain research, or infrastructure mapping. Developers investigating phishing domains, product managers validating brand names, or ops engineers tracing DDoS sources all benefit. One person connects it with the API key; everyone in the workspace can then run lookups without needing their own Whoisfreaks account.

Data last verified 608 hours ago.Sources aggregated hourly to weekly. See docs/architecture/model-directory.md.