dnstwister-mcp 1.0.0

package/README.md

@@ -0,0 +1,21 @@
+# Dnstwister MCP
+
+DNS twister domain threat intelligence: fuzz domains for typosquatting, check whois. No key required.
+
+This file is self contained. It reads public data only and never writes to the machine. All output is bounded and honest about what could not be fetched.
+
+## Tools
+
+
+* `fuzz`  Fuzz a domain for lookalike domains.
+* `whois`  Get whois data for a domain.
+
+## Usage
+
+```bash
+npm install
+npm run build
+node dist/index.js
+```
+
+Data comes from the public Dnstwister API.

package/dist/api.js

@@ -0,0 +1,41 @@
+const UA = 'mrfentmen-dnstwister-mcp/1.0';
+const BASE = 'https://dnstwister.report/api';
+function hexEncode(s) {
+    let out = '';
+    for (const c of s)
+        out += c.charCodeAt(0).toString(16).padStart(2, '0');
+    return out;
+}
+export async function fuzz(args) {
+    const domain = String(args.domain).trim().toLowerCase();
+    if (!domain)
+        throw new Error('Provide a domain.');
+    const res = await fetch(`${BASE}/fuzz/${hexEncode(domain)}`, {
+        headers: { 'User-Agent': UA, Accept: 'application/json' },
+        signal: AbortSignal.timeout(25000),
+    });
+    if (!res.ok)
+        throw new Error(`DNS Twister returned ${res.status}`);
+    const d = (await res.json());
+    const fuzzies = d.fuzzy_domains ?? [];
+    if (!fuzzies.length)
+        return `No fuzzy domains for ${domain}.`;
+    const flagged = fuzzies.filter((f) => f.has_mx_url || f.resolve_ip_url);
+    return `Lookalike domains for ${domain} (${fuzzies.length} total, ${flagged.length} with DNS records):\n` +
+        fuzzies.slice(0, 20).map((f) => `* ${f.domain ?? '?'} ${f.has_mx_url || f.resolve_ip_url ? '- has DNS records' : '- no DNS'}`).join('\n');
+}
+export async function whois(args) {
+    const domain = String(args.domain).trim().toLowerCase();
+    if (!domain)
+        throw new Error('Provide a domain.');
+    const res = await fetch(`${BASE}/whois/${hexEncode(domain)}`, {
+        headers: { 'User-Agent': UA, Accept: 'application/json' },
+        signal: AbortSignal.timeout(25000),
+    });
+    if (!res.ok)
+        throw new Error(`DNS Twister returned ${res.status}`);
+    const d = (await res.json());
+    if (d.domain == null)
+        throw new Error('No whois returned.');
+    return `Whois for ${d.domain ?? domain} (retrieved ${d.retrieved ?? '?'}):\n${(d.response ?? 'No whois data').slice(0, 800)}`;
+}

package/dist/index.js

@@ -0,0 +1,4 @@
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { createServer } from "./server.js";
+const main = async () => { const server = createServer(); await server.connect(new StdioServerTransport()); };
+main().catch((error) => { console.error("Fatal error:", error); process.exit(1); });

package/dist/server.js

@@ -0,0 +1,38 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import { fuzz } from "./api.js";
+import { whois } from "./api.js";
+const text = (value) => ({ content: [{ type: "text", text: value }] });
+const textError = (t) => ({ content: [{ type: "text", text: t }], isError: true });
+const READ_ONLY = { readOnlyHint: true, openWorldHint: true };
+const error = (e) => `Error: ${e instanceof Error ? e.message : String(e)}`;
+export function createServer() {
+    const server = new McpServer({ name: "dnstwister-mcp", version: "1.0.0" });
+    server.registerTool("fuzz", {
+        title: "Fuzz",
+        description: "Fuzz a domain for lookalike domains.",
+        inputSchema: z.object({ domain: z.string().describe("Domain to fuzz.") }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        try {
+            return text(await fuzz(args));
+        }
+        catch (e) {
+            return textError(error(e));
+        }
+    });
+    server.registerTool("whois", {
+        title: "Whois",
+        description: "Get whois data for a domain.",
+        inputSchema: z.object({ domain: z.string().describe("Domain.") }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        try {
+            return text(await whois(args));
+        }
+        catch (e) {
+            return textError(error(e));
+        }
+    });
+    return server;
+}

package/package.json

@@ -0,0 +1,44 @@
+{
+  "version": "1.0.0",
+  "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/mrfentmen/dnstwister-mcp.git"
+  },
+  "bin": {
+    "dnstwister-mcp": "./dist/index.js"
+  },
+  "main": "./dist/index.js",
+  "files": [
+    "dist",
+    "server.json",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "start": "node dist/index.js",
+    "dev": "npm run build && node dist/index.js"
+  },
+  "license": "MIT",
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.4",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "typescript": "^5.6.0"
+  },
+  "name": "dnstwister-mcp",
+  "description": "DNS twister domain threat intelligence: fuzz domains for typosquatting, check whois.",
+  "keywords": [
+    "mcp",
+    "dnstwister",
+    "dns",
+    "typosquatting",
+    "domain"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "mcpName": "io.github.mrfentmen/dnstwister-mcp"
+}

package/server.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "io.github.mrfentmen/dnstwister-mcp",
+  "description": "DNS twister domain threat intelligence: fuzz domains for typosquatting, check whois.",
+  "repository": {
+    "url": "https://github.com/mrfentmen/dnstwister-mcp",
+    "source": "github"
+  },
+  "version": "1.0.0",
+  "packages": [
+    {
+      "registryType": "npm",
+      "identifier": "dnstwister-mcp",
+      "version": "1.0.0",
+      "transport": {
+        "type": "stdio"
+      }
+    }
+  ]
+}