Next free-source huntWe check for new free data every weekday.
OSINTMCP serverFirst audited Nov 13, 2026

io.domaindrift/domaindrift

Signed internet telemetry, read-only: DNS, TLS, WHOIS, reachability. Every record Ed25519-signed.The vendor's description, from its MCP Registry listing.

Passed public checksAudited Nov 13, 2026

Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 695 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
No, read-onlyAll 10 tools say they only read.
Endpointhttps://domaindrift.io/mcp

Website Streamable HTTP · protocol 2025-06-18 · server version 1.230.1

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 10 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Note: Protocol version 2025-06-18.

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (10)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • lookup_domainThe latest signed observation of one domain: who runs its nameservers, mail, and CDN; certificate issuer and expiry; HTTPS reachability; per-record-type counts; and the Ed25519 receipt pointer. Keyle…Read-only
  • whois_lookupRegistration data for any registrable domain, tracked or not: registrar and IANA id, created, updated and expiry dates, name servers, statuses, DNSSEC, registrant organization, name and country, and…Read-only
  • whois_historyThe registration readings DomainDrift holds for a domain, one entry per change, newest first, each dated with the receipt that signed it. Needs a DomainDrift API key; an empty list is not charged.Read-only
  • domain_availabilityregistered, available or unknown, from the registry RDAP and a DNS delegation check. A read that failed answers unknown, and unknown is not charged. Needs a DomainDrift API key.Read-only
  • ip_whoisWho holds an IP address block, from the Regional Internet Registry: the block, holder, country, abuse contact and dates. Needs a DomainDrift API key.Read-only
  • asn_whoisWho holds an autonomous system number, from the Regional Internet Registry: holder, country, abuse contact and dates. Needs a DomainDrift API key.Read-only
  • whats_changed_todayThe daily "what changed on the internet" digest: a ranked top-20 of the most significant DNS, TLS, WHOIS, and infrastructure changes observed across the tracked catalog in the last 24 hours. Public a…Read-only
  • resolve_receiptResolve any DomainDrift provenance receipt by id: the public Ed25519 commitment (output hash, signing key, timestamp, chain link) for one observation. Public and keyless. Verify the signing key again…Read-only
  • internet_tapeThe rolling 24-hour aggregate rollup: how many domains changed DNS provider, switched certificate authority, moved mail, went unreachable, and the other tape legs, each with a live count. Public and…Read-only
  • signing_keysThe Ed25519 public keys that sign every DomainDrift observation, with derivation paths and validity windows. Public and keyless. Use these to verify receipts and signed records offline.Read-only

Audit history

  1. Nov 13Passed

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200695 ms
initializedHTTP 20264 ms
tools/listHTTP 200456 ms
resources/listHTTP 20064 ms
unknown-methodHTTP 20050 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.