Domain Monitor Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Domain Monitor Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An unofficial MCP (Model Context Protocol) server for domain-monitor.io, enabling AI assistants like Claude to query your domain expiration data directly — no browser required.
Note: This is a community project, not officially supported by domain-monitor.io. It uses the internal API discovered by inspecting browser network traffic. If you're the domain-monitor.io developer and would like to collaborate on an official MCP server or public API, please open an issue — we'd love to work with you!
Once installed, you can ask Claude things like:
No more digging through emails that landed in spam or SMS alerts that got filtered. Just ask.
| Tool | Description |
|---|---|
domain_monitor_get_expiring_soon | Quick check — domains expiring within your alert window |
domain_monitor_list_domains | Full paginated list with optional filter by days-until-expiry |
domain_monitor_check_domain | Look up a specific domain by name |
domain_monitor_get_account_summary | Account stats, subscription status, and active alerts |
domain_monitor_add_domain | Add a new domain to monitoring with configurable alert period and monitoring toggles |
git clone https://github.com/jasoncbraatz/domain-monitor-mcp.git
cd domain-monitor-mcppip install -r requirements.txtOr with uv (faster):
uv pip install -r requirements.txtAdd the following to your Claude Desktop config file:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"domain-monitor": {
"command": "python",
"args": ["/absolute/path/to/domain-monitor-mcp/server.py"],
"env": {
"DOMAIN_MONITOR_EMAIL": "[email protected]",
"DOMAIN_MONITOR_PASSWORD": "yourpassword"
}
}
}
}Replace /absolute/path/to/domain-monitor-mcp/server.py with the actual path where you cloned this repo.After saving the config, fully quit and relaunch Claude Desktop. The domain-monitor tools will appear in Claude's tool list.
This server authenticates using your domain-monitor.io email and password via Laravel Sanctum session auth — the same mechanism the website uses under the hood. Sessions are maintained in memory and automatically refreshed if they expire.
Your credentials are never stored to disk — they live only in the environment variables you configure above, and only in memory while the server is running.
domain-monitor.io is a Nuxt.js SPA backed by a Laravel API. The API lives at https://api.domain-monitor.io/. Authentication follows the standard Laravel Sanctum CSRF + session cookie flow:
GET https://api.domain-monitor.io/sanctum/csrf-cookie → sets XSRF-TOKEN + domain_monitor_session cookiesPOST https://api.domain-monitor.io/login with {email, password} + X-XSRF-TOKEN header → authenticateshttps://api.domain-monitor.io/api/* use the session cookies + refreshed XSRF tokenKey endpoints used:
GET /api/account — account info + user IDGET /api/account-dashboard — summary with expiring domains and alertsGET /api/account/{user_id}/domains — paginated domain list with expiry dataPOST /api/account/{user_id}/domains — add a new domain to monitoringThe POST payload for adding a domain requires these fields:
{
"domain": "example.com",
"alert_period": 30,
"certificate_checks_enabled": true,
"dns_checks_enabled": true,
"blacklist_checks_enabled": false
}The API rate limit is 200 requests per session (observed from x-ratelimit-limit response headers).
PRs welcome! Some ideas for future improvements:
If you're the domain-monitor.io developer and want to add official API token support, this project would love to adopt it — just open an issue!
See OPS.md for detailed troubleshooting, reinstallation steps, and architecture notes.
This project is not affiliated with, endorsed by, or officially supported by domain-monitor.io. It was built by reverse-engineering the browser network traffic. Use at your own risk. The API may change without notice.
MIT - Jason C Braatz
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.