MCP server · Security

DNStwist MCP server

Let your AI check for copycat domains that look like yours and could be used for phishing.

Security For it and development Security

This is a helper for your AI that checks for fake versions of a website address. You give it a domain you own, like yourcompany.com, and it looks for sneaky lookalikes such as yourcornpany.com or yourcompany.net. It is handy for anyone who worries about phishing or brand copycats, even if you are not a security expert.

What is an MCP server? The 30-second version

On its own, your AI can only chat with you using what it already knows. An MCP server is a small helper program that gives your AI a new skill or a connection to another tool. This one connects your AI to dnstwist, a tool that hunts for lookalike domain names. Once it is set up, you just ask in plain words and the AI does the checking for you.

What this MCP server does

You ask your AI something like "check for copycat domains of mycompany.com". The AI passes your request to this helper, which runs the dnstwist tool behind the scenes. That tool builds lots of small variations of your domain name, then checks which of those variations are actually registered and live on the internet. It also peeks at things like mail records and web page info. The AI then hands you back a tidy list of the suspicious ones it found.

Flow diagram: you ask your AI “Check for copycat domains of mycompany.com”, the DNStwist MCP server connects it to Your domain name, and you get back list of suspicious domains.

Click to zoom

What you can do with it

Find lookalike domains that could be used to trick your customers
Check which of those lookalike domains are actually registered
See mail records (MX) that hint a domain could send email
Grab basic web page info from suspicious domains
Look up who registered a domain and when
Compare web page fingerprints to spot copycat sites
Run the check against your own choice of DNS servers

Try asking your AI

“Check for typosquatting domains of mycompany.com”
“Find registered lookalikes of example.com and show me the mail records”
“Which copycat domains of mybrand.com have web pages up right now”
“Run a domain fuzzing check on mysite.org and list only the registered ones”

What it gives back to you

You get a list of domain names that look like yours, usually only the ones that are actually registered. For each one you may see details like its mail records, web page title, and who registered it. In the chat it shows up as a readable list or table you can scan. You can also ask for it as a simple list, a spreadsheet-style file, or raw data.

Before you start

What you need

Docker installed and running on your computer (a free tool that runs small programs in a box)
Node.js version 18 or newer
The Claude desktop app (or another app that supports MCP servers)

Good to know

Only check domains you own or have permission to test, and be gentle with how many checks you run so you do not overload DNS servers.

Install it with your AI

Add DNStwist MCP server to your AI, no technical skills needed

You don't install anything by hand. You copy one prompt, paste it into an AI that can work on your computer, and it checks, installs and connects the server for you, asking you when it needs something.

Sign in to get the install prompt

Members get a ready-made prompt that lets the Claude desktop app check DNStwist MCP server, install it and connect it for them, step by step. You don't need any technical skills: you copy, paste and answer a few questions. Your connected AI can also find and install any of the 4,066 MCP servers here for you.