Whoisfreaks
Best Source For Domain WHOIS Database and API.
Verdict
Common use cases
- Verify domain ownership before outreach
- Geolocate suspicious IPs in security logs
- Batch-check domain availability for rebrand
- Trace ASN ownership for network diagnostics
- Pull DNS records during incident response
Integration
- Vendor
- Whoisfreaks
- Category
- developer-tools
- Auth
- API_KEY
- Tools
- 18
- Composio slug
whoisfreaks
Tools
- ASN WHOIS Lookup
Tool to retrieve comprehensive ASN WHOIS information including ownership, network infrastructure, and IP address ranges. Use when you need to identify ASN ownership, organization details, or associated IP blocks for network administration o
- Bulk DNS Lookup
Tool to process multiple domains or IPs simultaneously, returning all DNS records in a single request (max 100). Use when you need to retrieve DNS records for multiple domains at once for efficient batch processing.
- Bulk Domain Availability Check
Tool to check availability of multiple domains in one request (max 100 domains). Use when you need to verify if domain names are available for registration. Response time ranges from 16 seconds to 1 minute for 100 domains.
- Bulk WHOIS Lookup
Tool to query WHOIS information for up to 100 domains in a single request. Use when you need comprehensive registration details, contact information, name servers, and domain status for multiple domains. Response includes normalized and par
- Check Domain Availability
Tool to check if a domain is available for registration with optional suggestions. Use when you need to verify domain availability or get alternative domain suggestions.
- DNS Live Lookup
Tool to perform real-time DNS record resolution for network diagnostics and configuration verification. Use when you need to retrieve current DNS records for a domain or perform reverse DNS lookup for an IP address.
- Get Domain Files Status
Tool to check availability and update status of domain data files including newly registered, expired, and dropped domains. Use when you need to verify that domain data files are prepared and ready for download before accessing file downloa
- IP Geolocation Lookup
Tool to retrieve geographic location information for an IP address including country, city, coordinates, ISP, and security details. Use when you need to identify the physical location of an IP, detect VPN/proxy usage, or gather network inte
- IP WHOIS Lookup
Tool to retrieve comprehensive WHOIS information for an IP address including organization, ISP, and network details. Use when you need to identify IP ownership, allocation status, or contact information for network administration or securit
- Security Threat Lookup
Tool to check if an IP address is associated with malicious activity, security threats, or appears on blocklists. Use when you need to assess IP reputation, detect VPN/proxy/Tor usage, identify bots or spam sources, or evaluate security ris
- SSL Certificate Lookup
Tool to fetch live SSL certificate with full secure cert chain, validity dates, and issuer information. Use when you need to retrieve SSL certificate details for a domain, including certificate validation dates, issuer details, public key i
- Subdomain Lookup
Tool to discover all subdomains associated with a domain name. Use when you need to enumerate subdomains for security assessment, asset discovery, or domain reconnaissance. Supports filtering by active/inactive status and date ranges.
- WHOIS Historical Lookup
Tool to access historical domain records from comprehensive database with up to 100 records per page. Use when you need to retrieve historical WHOIS data for a domain dating back to 1986. Database is updated monthly with one-month data late
- WHOIS Live Lookup
Tool to fetch real-time WHOIS domain registration data directly from authoritative WHOIS servers. Use when you need current domain ownership, registration dates, contact information, or nameserver details. Note that some fields may show 'RE
- WHOIS Live Lookup V2
Tool to fetch real-time WHOIS domain data using v2.0 endpoint. Use when you need current domain ownership, registration dates, contact information, or nameserver details via the updated v2.0 API. Note that some fields may show 'REDACTED FOR
- WHOIS Reverse Lookup By Company
Tool to search for domains registered by a specific company or organization using reverse WHOIS lookup. Use when you need to find all domains associated with a particular company name. Performs full-text phrase matching with pagination supp
- WHOIS Reverse Lookup by Email
Tool to search for domains registered with a specific email address. Use when you need to find all domains associated with an email in WHOIS records. Supports exact or regex email matching. Returns paginated results with domain registration
- WHOIS Reverse Lookup By Owner
Tool to search for domains registered by a specific owner name using reverse WHOIS lookup. Use when you need to find all domains associated with a particular registrant or owner name. Performs pattern-based full-text search with pagination
Setup
Setup guide
- 11. Sign up at whoisfreaks.com and generate an API key from your dashboard. 2. In Switchy, open your workspace settings and navigate to Integrations. 3. Find Whoisfreaks under Developer Tools and click Connect. 4. Paste your API key when prompted and click Authorize. 5. Switchy confirms the connection and lists available tools. 6. Open any Space and type '@Whoisfreaks check if example.com is available' to test — the MCP returns availability status and optional suggestions. 7. For bulk operations, format your request as '@Whoisfreaks run bulk WHOIS lookup for domain1.com, domain2.com, domain3.com' (up to 100 domains). 8. Check your Whoisfreaks account dashboard to monitor API usage and rate limits.
What teammates see: by default, memories from Whoisfreaks are scoped to the Space (PROJECT visibility) - you can mark any memory PRIVATE or share it ORG-wide.
Works well with
Top models
Compatibility data appears once enough Spaces have used this MCP together with a given model.
How Switchy teams use it
Starter prompts
Check Domain Availability
@Whoisfreaks check if acme-widgets.com is available for registration and suggest 5 alternatives if it's takenOpen in a Space →
Bulk WHOIS Lookup
@Whoisfreaks run bulk WHOIS lookup for competitor1.com, competitor2.com, competitor3.com and summarize registrant info and expiration datesOpen in a Space →
Geolocate IP Address
@Whoisfreaks geolocate IP 203.0.113.45 and tell me the country, city, ISP, and any security flagsOpen in a Space →
ASN Ownership Lookup
@Whoisfreaks retrieve ASN WHOIS information for AS15169 including organization name and IP address rangesOpen in a Space →
DNS Record Retrieval
@Whoisfreaks perform live DNS lookup for example.com and show me A, MX, and TXT recordsOpen in a Space →
Example outputs
Illustrative - representative of the model's voice and quality, not literal recordings.
@whoisfreaks check if 'mycompany-app.com', 'mycompany-app.io', and 'mycompany-app.dev' are available for registration
Bulk availability check complete for 3 domains: • mycompany-app.com — **Taken** (registered 2019-03-14, expires 2025-03-14) • mycompany-app.io — **Available** for registration • mycompany-app.dev — **Available** for registration Both .io and .dev TLDs are open. The .com variant is held by a domain parking service with privacy protection enabled. If you need alternative suggestions for the .com, I can run a separate availability check with recommendations.
This example shows the bulk domain availability tool handling multiple TLDs at once. Response times range from 16 seconds to 1 minute depending on registrar API latency. The tool returns registration status and expiration dates for taken domains, but does not provide transfer or purchase links—you'll need to complete registration through your preferred registrar.
@whoisfreaks run a bulk WHOIS lookup on the top 5 domains from our competitor analysis spreadsheet and summarize their registration patterns
WHOIS data retrieved for 5 competitor domains. Registration pattern summary: **Corporate registrations (3):** All use corporate privacy services (Domains By Proxy, WhoisGuard). Registered 2015–2018, consistently renewed through 2026. Name servers point to Cloudflare enterprise accounts. **Individual registrations (2):** One domain shows founder's personal email in historical records (now privacy-protected). Both registered 2020–2021, shorter renewal cycles (1-year vs. 3-year for corporate domains). All five domains share AWS Route 53 DNS infrastructure. No domains are flagged for transfer locks or disputes.
This example pairs the bulk WHOIS tool (max 100 domains per request) with AI synthesis to extract competitive intelligence. The tool returns raw registration data—contact info, name servers, status codes—which the AI then patterns into strategic insights. Note that privacy protection services often mask current contact details; historical WHOIS data requires a separate API call.
@whoisfreaks look up the ASN for IP 104.26.10.78 and tell me if it's part of a known CDN or hosting provider
ASN lookup for 104.26.10.78: **ASN:** AS13335 **Organization:** Cloudflare, Inc. **Network range:** 104.16.0.0/12 (1,048,576 IP addresses) **Type:** Content Delivery Network (CDN) This IP is part of Cloudflare's global Anycast network, used for DDoS protection, caching, and edge delivery. The ASN owns 2,500+ IPv4 prefixes across 310+ cities. If you're seeing traffic from this IP, it's likely proxied through Cloudflare—the origin server's real IP is masked. Use the DNS Live Lookup tool if you need to trace the domain's actual hosting provider behind the CDN.
This example demonstrates the ASN WHOIS tool's ability to identify network ownership and infrastructure context. Useful for security investigations, traffic analysis, or vendor due diligence. The tool provides network ranges and organization details but does not include real-time abuse reports or blocklist status—pair with IP Geolocation Lookup if you need security flags or geographic routing data.
Use-case deep-dives
When Whoisfreaks wins for incident response domain lookups
A 6-person security team investigating phishing campaigns needs to pivot from a suspicious domain to its registrant, hosting provider, and related infrastructure in under 60 seconds. Whoisfreaks is the right call here because the bulk WHOIS and ASN lookup tools let you query 20-30 domains in a single Switchy thread without switching contexts. The IP geolocation tool adds ISP and abuse contact data that speeds up takedown requests. The threshold: if your team runs more than 50 domain lookups per day, you'll hit API rate limits on the free tier and need to budget for paid access. If you're triaging fewer than 10 incidents per week, the MCP overhead isn't worth it—just use a browser tab. For teams in the middle, Whoisfreaks turns a 15-minute manual lookup into a 2-minute AI-assisted workflow.
When this MCP handles domain squatting checks at launch scale
A 3-person marketing team launching a rebrand needs to check if 80 domain variants are registered by squatters before filing trademarks. Whoisfreaks' bulk domain availability tool processes the entire list in under 2 minutes, returning registration status and suggesting alternatives for taken names. The WHOIS lookup adds registrant details so you can assess whether a domain is parked or actively used by a competitor. This works well for one-time audits or quarterly checks. The boundary: if you need real-time monitoring (daily scans for new registrations matching your brand), Whoisfreaks doesn't offer alerting—you'd need a dedicated brand protection service. For launch-phase due diligence or M&A domain audits, this MCP gives you the data without paying for enterprise monitoring you don't need yet.
When live DNS lookup beats your terminal for multi-region debugging
A 5-person platform team debugging a CDN failover issue needs to verify DNS propagation across 12 subdomains and 4 geographic regions in real time. Whoisfreaks' DNS live lookup tool runs queries from multiple vantage points and surfaces TTL mismatches or stale records that explain why traffic isn't routing correctly. The bulk DNS lookup handles the full subdomain list in one request, which is faster than running dig commands in a loop. The trade-off: if your DNS stack is already instrumented with observability tooling (Datadog, Grafana), you probably don't need this MCP—your dashboards show the same data. This wins when you're troubleshooting a one-off incident or onboarding a junior engineer who doesn't have dig muscle memory yet. For ad-hoc DNS debugging in Switchy, it's faster than context-switching to a terminal.
Frequently asked
What does the Whoisfreaks MCP do in Switchy?
It lets your team query domain registration data, DNS records, IP geolocation, and ASN ownership directly from chat. You can check if domains are available, pull WHOIS details for up to 100 domains at once, or trace an IP address to its physical location and ISP. Useful for security research, competitive analysis, or validating infrastructure before a launch.
Do I need a Whoisfreaks API key to connect this MCP?
Yes. You'll paste your Whoisfreaks API key into Switchy's connection form. The key authenticates every lookup request the MCP makes. If you don't have one, sign up at Whoisfreaks and generate a key from their dashboard. Free-tier keys work, but bulk operations may require a paid plan depending on your query volume.
Can the Whoisfreaks MCP register domains for me?
No. It only checks availability and retrieves registration data. If you want to actually buy a domain, you'll need to visit a registrar like Namecheap or GoDaddy. The MCP tells you whether a name is taken and suggests alternatives, but it doesn't handle transactions or DNS configuration changes.
How is this different from running whois commands in my terminal?
The MCP wraps Whoisfreaks' API, which aggregates data from hundreds of registries and returns structured JSON instead of raw text. You get bulk lookups, historical records, and geolocation in one call. Terminal whois hits a single registry and often omits privacy-protected contacts. The trade-off: you're rate-limited by your Whoisfreaks plan, not your network.
Who on my team should connect the Whoisfreaks MCP?
Anyone doing security audits, domain research, or infrastructure mapping. Developers investigating phishing domains, product managers validating brand names, or ops engineers tracing DDoS sources all benefit. One person connects it with the API key; everyone in the workspace can then run lookups without needing their own Whoisfreaks account.