DNStwist MCP Server

If you already use DNStwist, the dnstwist mcp server is the piece that lets your assistant work with it directly. MCP server for dnstwist, a powerful DNS fuzzing tool that helps detect typosquatting, phishing, and corporate espionage.

What the server does

This tool is designed for legitimate security research purposes. Please: - Only analyze domains you own or have permission to test - Respect rate limits and DNS server policies - Use responsibly and ethically - Be aware that some DNS servers may rate-limit or block automated queries - Consider the impact on DNS infrastructure when running large scans

• Domain Fuzzing — Generate domain permutations using various algorithms
• Registration Check — Verify if permutated domains are registered
• DNS Analysis — Check A, AAAA, MX, and NS records
• Web Presence — Capture HTTP banner information
• WHOIS Data — Retrieve registration dates and registrar information
• Phishing Detection — Generate fuzzy hashes of web pages

Credentials and setup notes

• Node.js (v18 or later) - Docker - macOS, Linux, or Windows with Docker Desktop installed

Installation

Installation goes through your MCP client rather than a global install: point it at @smithery/cli on npm and it is fetched when the client starts. The copy-paste blocks for Claude Desktop, Claude Code and Cursor are further down this page.

Where it fits

Among the developer tooling options, the useful question is rarely "what can it do" but "what does it cost you to run" — permissions, credentials, and how much of your context its toolset consumes. It is maintained by BurtTheCoder; worth a glance at recent repository activity before you build anything load-bearing on it.

SyncDev reviews every entry in this directory against the project's own documentation before publishing, and revisits them as servers change.

Worth knowing first

• It runs with your machine's permissions. That is convenient and also the reason to think about what you point it at before you approve a tool call.
• Keep per-call confirmation enabled while you learn its behaviour; it is the cheapest safeguard you have.