Security & Testing

how.is

Provides domain intelligence and security diagnostics including DNS, WHOIS, TLS, DNSSEC, email authentication, blacklist status, and IP intelligence.

1 endpoint16 known toolsFirst detected October 11, 2026Last detected October 20, 2026

ENDPOINT 1

https://how.is/mcp

No auth detected

MCP server metadata

Name: how.is
Version: 1.0.0

Capabilities

tools

Server instructions

Domain and IP intelligence, priced per call. Every tool has a free sample input (example.com, 1.1.1.1 or https://example.com) that works with no key. Other inputs need a prepaid key sent as 'Authorization: Bearer <key>' on this connection; without one the tool returns payment terms. Prefer domain_profile when you need several facts about one domain: it is cheaper than the separate calls. Reference: https://how.is/llms.txt

Known tools 16

domain_profile

Everything about a domain in one call: DNS, WHOIS, TLS, DNSSEC, email auth, security score, blacklist status, plus IP intelligence for its A record.

Potential side effects

domain_trust

Should an agent click, sign in to, or pay this domain?

Potential side effects

domain_dns

A, AAAA, MX, NS, TXT and other records for a domain, with resolve timing.

Inferred read-only

domain_whois

Registrar, creation and expiry dates, nameservers and status codes for a domain.

Inferred read-only

domain_age

How old a domain is: registration date, age in days and years, and whether it was registered in the last 30 days (a common phishing signal).

Inferred read-only

domain_available

Is this domain name registered?

Inferred read-only

domain_tls

Certificate validity, issuer, protocol and days until expiry for a domain.

Inferred read-only

domain_dnssec

Whether DNSSEC is signed and validates for a domain.

Inferred read-only

domain_email_auth

SPF, DKIM and DMARC records and posture for a domain.

Inferred read-only

domain_security_score

A letter grade and point score for a domain security posture, with the scored items behind it.

Inferred read-only

domain_blacklist

Whether the addresses behind a domain appear on spam and abuse blocklists.

Inferred read-only

ip_lookup

Network owner (ASN), company, geolocation, privacy flags and abuse contact for an IP address.

Inferred read-only

site_status

Live check of one or more URLs: HTTP status, latency, DNS resolve time, resolved IP, TTL, nameservers, TLS days remaining.

Inferred read-only

site_screenshot

See a web page: a 1280-wide JPEG of any public URL, viewport or full page (capped at 6000 px), with its final URL, HTTP status and title.

Inferred read-only

page_watch

Has this page changed since your last call, and how much?

Inferred read-only

bot_observatory

Partner tier of the dns.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.how-is]
url = "https://how.is/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "how-is": {
      "type": "http",
      "url": "https://how.is/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: how-is
Remote MCP URL: https://how.is/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "how-is": {
      "url": "https://how.is/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "how-is": {
      "type": "http",
      "url": "https://how.is/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "how-is",
  "transport": "streamable-http",
  "url": "https://how.is/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Loading Trust v2 evidence…

Checking the associated registrable domain. The BuiltWith key remains server-side.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.