Muumuu Domain Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Muumuu Domain Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
日本語版 README はこちら / Japanese README
The official remote Model Context Protocol (MCP) server for Muumuu Domain — a domain registration service operated by GMO Pepabo, Inc.
Search and register domains, manage owned domains and contracts, and configure DNS records — all through natural language conversations with AI assistants.
First remote MCP server in the Japanese domain registrar industry.
https://mcp.muumuu-domain.com/mcpTransport: Streamable HTTP. Authentication: OAuth 2.1 (handled automatically by supported clients).
Pricing: MCP server access is free. Standard Muumuu Domain registration fees apply when purchasing domains.
Choose your client below.
claude mcp add --transport http muumuu https://mcp.muumuu-domain.com/mcpThen run /mcp inside Claude Code and select Authenticate to complete the OAuth flow.
Settings → Connectors → Add custom connector → enter:
https://mcp.muumuu-domain.com/mcpOAuth is handled automatically by Claude.
Add to .cursor/mcp.json:
{
"mcpServers": {
"muumuu": {
"url": "https://mcp.muumuu-domain.com/mcp"
}
}
}codex mcp add muumuu --url https://mcp.muumuu-domain.com/mcpSee the Gemini CLI MCP server documentation for adding remote MCP servers.
For clients that only support stdio transport, use mcp-remote:
{
"mcpServers": {
"muumuu": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://mcp.muumuu-domain.com/mcp"]
}
}
}For MCP registries (e.g. Glama) that index the tool surface in a headless build environment where an interactive OAuth flow cannot complete, the CLI also supports a stdio-only introspection mode:
node bin/muumuu-mcp.js --introspect-onlyIn this mode the CLI serves the static tool manifest over stdio. It does not make any network calls, does not read the Authorization header, and tools/call always returns isError: true. Do not use this mode for real traffic.
The server exposes 14 tools. Tools marked write change account state; those marked destructive cannot be undone — clients should confirm with the user before calling them.
| Tool | Description |
|---|---|
search-domains | Check availability and pricing of domain candidates across TLDs. Does not reserve anything. |
quote-domain-purchase | Get a signed quote — final price, availability, and a short-lived purchase token — before buying. |
purchase-domain | Execute a purchase with a quote token. write / destructive — charges the registered credit card. |
get-domain-purchase-status | Poll the progress of a purchase started by purchase-domain. |
| Tool | Description |
|---|---|
list-me-domains | List domains owned by the authenticated account, filtered by state or FQDN, paginated. |
get-me-domain | Fetch one owned domain in full: contract period, auto-renewal status, nameservers. |
update-me-domain | Turn credit-card auto-renewal on or off for an owned domain. write |
| Tool | Description |
|---|---|
list-me-dns-records | List the DNS records of an owned domain, addressed by domain ID. |
list-me-dns-records-by-fqdn | The same listing, addressed by FQDN when the domain ID is unknown. |
create-me-dns-record | Add a record — A, AAAA, CNAME, MX, TXT, NS, ALIAS, SRV, or CAA. write |
update-me-dns-record | Change the value or priority of an existing record. write |
delete-me-dns-record | Remove a record from the zone. write / destructive |
| Tool | Description |
|---|---|
list-me-personal-access-tokens | List the personal access tokens issued for the account. |
delete-me-personal-access-token | Revoke a personal access token. write / destructive |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.