MCP server wrapper for dnstwist — upstream package @burtthecoder/mcp-dnstwist.
MCP server for dnstwist — DNS fuzzing and typosquatting detection tool. Generate domain permutations to identify potential phishing, brand impersonation, and typosquatting domains.
No API keys required — this server works out of the box.
Summary. dnstwist MCP Server — Dockerized from upstream @burtthecoder/mcp-dnstwist package.
| Tool | Description |
|---|---|
fuzz_domain | Fuzz Domain |
Here are example prompts you can use with Claude (or any MCP client) when this tool is connected:
docker-compose up -d
docker run -i --rm hackerdogs/dnstwist-mcp:latest
docker run -d -p 8636:8636 \
-e MCP_TRANSPORT=streamable-http \
-e MCP_PORT=8636 \
hackerdogs/dnstwist-mcp:latest
Add to your Claude Desktop or Cursor MCP config:
{
"mcpServers": {
"dnstwist-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"MCP_TRANSPORT",
"hackerdogs/dnstwist-mcp:latest"
],
"env": {
"MCP_TRANSPORT": "stdio"
}
}
}
}
First, start the server using Docker Compose or docker run with HTTP mode (see Deploy above), then point your MCP client at the running server:
{
"mcpServers": {
"dnstwist-mcp": {
"url": "http://localhost:8636/mcp"
}
}
}
When to use HTTP mode: HTTP mode is ideal for shared/remote deployments, multi-user setups, and Hackerdogs scheduled prompts. The server runs as a long-lived process and accepts connections from multiple MCP clients concurrently.
| Variable | Default | Description |
|---|---|---|
MCP_TRANSPORT | stdio | Transport mode: stdio or streamable-http |
MCP_PORT | 8636 | HTTP port (only used with streamable-http) |
The fastest way to get started is through Hackerdogs:
Give it a couple of minutes to go live. Then start querying by asking Hackerdogs to use the tool explicitly. If you don't specify, Hackerdogs will automatically choose the best tool for the job.
Want to contribute or chat with the team? Join our Discord.
docker build -t hackerdogs/dnstwist-mcp:latest .
./test.sh
1. Start the server in HTTP mode:
docker run -d --rm --name dnstwist-mcp-test -p 8636:8636 \
-e MCP_TRANSPORT=streamable-http \
hackerdogs/dnstwist-mcp:latest
2. Initialize the MCP session:
SESSION_ID=$(curl -s -D - -X POST http://localhost:8636/mcp \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2024-11-05","capabilities":{},"clientInfo":{"name":"test","version":"0.1"}}}' \
2>&1 | grep -i mcp-session-id | awk '{print $2}' | tr -d '\r\n')
curl -s -X POST http://localhost:8636/mcp \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-H "mcp-session-id: $SESSION_ID" \
-d '{"jsonrpc":"2.0","method":"notifications/initialized"}'
3. List available tools:
curl -s -X POST http://localhost:8636/mcp \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-H "mcp-session-id: $SESSION_ID" \
-d '{"jsonrpc":"2.0","id":2,"method":"tools/list","params":{}}'
4. Clean up:
docker stop dnstwist-mcp-test
Content type
Image
Digest
sha256:c22d80162…
Size
101.3 MB
Last updated
3 months ago
docker pull hackerdogs/dnstwist-mcp