# DomainTools

**Canonical:** https://apis.io/providers/domaintools/  
**Website:** https://docs.domaintools.com/  
**APIs profiled:** 12

DomainTools is a domain and DNS intelligence company whose APIs power threat investigation, hunting, and monitoring for security teams. Its product surface spans Iris Investigate (pivot-based domain investigation), Iris Enrich (bulk domain enrichment), and Iris Detect (brand-infringement monitoring); the Farsight DNSDB passive DNS history API (300+ billion records); Lookups & Monitors (WHOIS, RDAP, hosting history, reverse IP/WHOIS, reputation, risk score, and change monitors); Threat Feeds (predictive risk and discovery feeds with RPZ integration); and Farsight SIE real-time DNS event streaming. DomainTools publishes OpenAPI specifications, an official Python SDK with a bundled CLI, and a remotely hosted MCP server for AI agents. A Battery Ventures portfolio company, enriched into the API Evangelist network.

## Kin Score — 51.3 / 100 (developing)

Scored 2026-08-17 under rubric 0.11.0. Trend: flat (+0.0 from 51.3).

| Facet | Score |
|---|---|
| Discoverability | 81.5 |
| Contract Quality | 55.9 |
| Governance | 11.5 |
| Operational Transparency | 44.7 |
| Developer Ergonomics | 75.5 |
| Commercial Clarity | 34.2 |

## Agent readiness — 52.5 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| MCP Server | yes |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | partial |
| Rate Limit Signal | verified |
| Event Surface Described | no |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (12)

- **DomainTools Flex search API** — The Flex search API from DomainTools — 2 operation(s) for flex search.
- **DomainTools Information API** — Access the latest information about your account, including service limits.
- **DomainTools Iris Detect API** — Iris Detect is an Internet infrastructure detection, monitoring, and enforcement tool. It rapidly discovers malicious domains that are engaged in brand impersonation, risk-score...
- **DomainTools Iris Enrich API** — Designed to support high query volumes with batch processing and fast response times, the Iris Enrich API provides actionable insights-at-scale with enterprise-scale ingestion o...
- **DomainTools Iris Investigate API** — The Iris Investigate API is ideally suited for investigate and orchestrate use cases at human scale. Identify threats, map adversary infrastructure, and streamline investigations.
- **DomainTools Lookups API** — Endpoints for retrieving detailed information about domains and IPs, and for finding connections between domains and infrastructure.
- **DomainTools Monitors API** — Endpoints for monitoring new domain registrations, changes to IP ranges, and other key infrastructure events based on specific terms.
- **DomainTools Ping API** — The Ping API from DomainTools — 1 operation(s) for ping.
- **DomainTools Rate Limit API** — The Rate Limit API from DomainTools — 1 operation(s) for rate limit.
- **DomainTools rdata Lookups API** — The rdata Lookups API from DomainTools — 4 operation(s) for rdata lookups.
- **DomainTools rrset Lookups API** — The rrset Lookups API from DomainTools — 6 operation(s) for rrset lookups.
- **DomainTools Siebatchd API** — The Siebatchd API from DomainTools — 4 operation(s) for siebatchd.

## MCP servers (1)

- **domaintools-mcp.yml**

## Agentic access (1)

- **Domaintools Agentic Access** — 53 operations · 11 acting · 1 human-in-the-loop

## Security (2)

- **Domaintools Authentication** — apiKey/http · 4 schemes
- **Domaintools Domain Security** — TLSv1.3 · HSTS · DNSSEC

## Tags

Company, Threat Intelligence, Domain Intelligence, DNS, WHOIS, Passive DNS, Cybersecurity, Domain Monitoring, Risk Scoring, Security

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/domaintools/). Scores are computed from the provider's own public artifacts under a published rubric.