Robtex MCP Server

by robtex Your server? Claim it

answering

Robtex is answering right now. Last checked 12 min ago. It exposes 46 tools.

DNS, IP, AS, domain reputation, and Lightning Network intelligence (44 tools)

Uptime history 47 days of history · worst day 99%

47 days agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

192 ms

Response time

average over 24h

open, no key

Access

streamable-http

Nothing serious here today

Today is the operative word: we check Robtex every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 12 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add mcp --transport http https://mcp.robtex.com/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcp": {
      "url": "https://mcp.robtex.com/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.mcp]
url = "https://mcp.robtex.com/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "mcp": {
      "url": "https://mcp.robtex.com/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "mcp": {
      "url": "https://mcp.robtex.com/mcp"
    }
  }
}

Available tools 46

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

lookup

lookup_as_whois

Lookup WHOIS information for an Autonomous System (AS) number from the RADB routing database. Returns routing policy, network information, and administrative contacts.

lookup_bitcoin_address

Returns address balance, total received/sent, transaction counts, address type (P2PKH, P2SH, P2WPKH, P2TR), first/last seen block, and ransomware/abuse flags. Supports all Bitcoin address formats.

lookup_bitcoin_block

Returns block header (hash, timestamp, version, merkle root, difficulty, nonce), transaction count, and list of transaction IDs. Supports lookup by block height.

lookup_bitcoin_transaction

Returns full transaction details: inputs with addresses and values, outputs with spent status, fee, size/weight, SegWit flag, and Lightning Network channel correlation. Supports both confirmed and mempool transactions.

lookup_dns

Lookup DNS records (A, AAAA, MX, NS, TXT, CNAME, SOA) for a given hostname. Also returns domain reputation info (Majestic, Tranco rankings, blocklist status).

lookup_lightning_channel

Lookup a Lightning channel by channel ID. Supports numeric, block x txn x vout, or block:txn:vout formats.

lookup_lightning_channels_per_node

Lookup all Lightning Network channels for a given node by public key.

lookup_lightning_node

Lookup a Lightning Network node by public key. Returns node alias, peer count, channel count, and centrality ranking.

lookup_mac

Look up the manufacturer/vendor of a network device by its MAC address. Uses the official IEEE OUI (Organizationally Unique Identifier) database with ~30K entries.

domain

domain_blocklist_check

Check a domain against HaGeZi DNS blocklists, Steven Black unified hosts, Blackbook malware list, phishing databases, Roskomnadzor (Russia), and Citizen Lab censorship lists. Returns which lists the domain appears on.

domain_ranking

Get domain popularity rankings from five independent sources: Majestic Million (backlinks), Tranco top 1M (aggregated traffic), Cloudflare Radar (1.1.1.1 DNS query popularity), Cisco Umbrella (OpenDNS query popularity), and Chrome UX Report (real Chrome user traffic).

domain_rdap

Queries the authoritative RDAP registry for a domain. Returns availability status (HTTP 404 = available), and for registered domains: registrar name, registration/expiration dates, nameservers, DNSSEC status, and domain status flags. Uses IANA bootstrap to find the correct RDAP server per TLD. Covers 590+ TLDs.

domain_reputation

Get comprehensive domain reputation: Majestic rank, Tranco rank, HaGeZi blocklist status, Blackbook malware status, phishing database status, HSTS preload status, and disposable email detection.

domain_shared_ip

Find other domains hosted on the same IP address(es) as the target domain. Resolves the domain's A records, then performs reverse IP lookups for each.

domain_shared_mx

Find other domains using the same mail server(s) as the target domain. Resolves the domain's MX records, then performs reverse MX lookups for each.

domain_shared_ns

Find other domains using the same nameserver(s) as the target domain. Resolves the domain's NS records, then performs reverse NS lookups for each.

reverse

reverse_lookup_cname

Find hostnames that have a CNAME record pointing to the specified target. Useful for CDN and load balancer investigations.

reverse_lookup_dns_records

Find hostnames that use a specific DNS record value. Query which hostnames point to an IP address, use a particular nameserver, or reference any DNS value. For example: 'which hostnames point to 1.2.3.4?' or 'which hostnames use chris.ns.cloudflare.com as their nameserver?'

reverse_lookup_ip

Find hostnames that point to a specific IP address (IPv4 or IPv6). Searches both A and AAAA records. For example: which hostnames point to 1.2.3.4?

reverse_lookup_mx

Find hostnames that use a specific mail server. For example: which hostnames use aspmx.l.google.com as their mail server?

reverse_lookup_ns

Find hostnames that use a specific nameserver. For example: which hostnames use chris.ns.cloudflare.com as their nameserver?

historic

historic_reverse_lookup_cname

Find hostnames that previously had a CNAME record pointing to the specified target but no longer do. Tracks CDN and infrastructure migrations.

historic_reverse_lookup_ip

Find hostnames that *previously* pointed to a specific IP address but no longer do. Tracks hosting migrations and past IP relationships. Searches both A and AAAA records.

historic_reverse_lookup_mx

Find hostnames that *previously* used a specific mail server but no longer do. Tracks email provider migrations and past MX relationships.

historic_reverse_lookup_ns

Find hostnames that *previously* used a specific nameserver but no longer do. Tracks infrastructure migrations and past delegation relationships.

bitcoin

bitcoin_address_transactions

Returns a paginated list of transactions involving a Bitcoin address. Filter by direction: received (incoming funds), sent (outgoing funds), or all. Returns up to 100 transactions per call, sorted by block height descending (most recent first).

bitcoin_blockchain_stats

Returns cumulative blockchain metrics over a configurable block range. Available metrics include: txs, fees, segwittx, inputs, outputs, insats, outsats, btcusd, volusd, unspentoutputs, fullyspent, unspentsats, addresses, satoshiblocks, clnopen, clnclose, satlnopen, satlnclose, basereward, blockreward, batched, rbf, version2tx, lowestfee, and more. Returns sampled data points suitable for charting.

bitcoin_transaction_spends

For a given transaction, returns which subsequent transactions consumed its outputs. Useful for UTXO tracking and chain analysis. Shows the spending txid for each output.

asn

ip_to_asn

Lightweight lookup: get just the AS number and netblock for an IP address. Fastest way to map IP to ASN.

blocklist

ip_blocklist_check

Check an IP address against IPsum, FireHOL, Tor exit node lists, C2 indicators, Roskomnadzor (Russia), and other threat intelligence feeds. Returns which lists the IP appears on and threat scores.

dns

dns_differential

Resolve a domain through filtered public DNS resolvers and their unfiltered controls to detect provider threat-feed blocks.

check_email

Verify an email address by connecting to its mail server via SMTP. Checks MX records, tests if the address is accepted (RCPT TO), detects catch-all domains, and reports TLS support. Results are RAM-cached for 1 hour.

geolocation

ip_geolocation

Get geographic location data for an IP address: country, city, region, latitude, longitude, timezone.

info

as_info

Get the name, organization, country, and description for an Autonomous System number. Lightweight version of as_whois.

latest

latest_lightning_channels

Returns the most recently opened Lightning Network channels, sorted by open time descending.

lightning

search_lightning_nodes_by_alias

Search for Lightning Network nodes by partial alias match. Returns nodes whose aliases contain the search term (case-insensitive).

network

ip_network

Get the containing network (BGP route), AS number, AS name, and route description for an IP address.

parse

parse_hostname

Parse a hostname into its constituent parts using the Mozilla Public Suffix List (9700+ entries). Returns eTLD (effective TLD), registered domain, subdomain, labels, and depth. Handles multi-level eTLDs (co.uk, co.jp, com.au) and platform suffixes (github.io, herokuapp.com).

ping

ping

Check if the API is responding. Returns status and server timestamp.

prefixes

as_prefixes

Get all IPv4 and IPv6 network prefixes (netblocks) announced by an Autonomous System. Returns BGP-visible routes.

recommended

get_recommended_lightning_peers

Get recommended Lightning Network peers for a given node. Returns nodes that are NOT currently peered with the specified node but would improve its centrality score if connected.

registered

registered_domain

Extract the registered domain (eTLD+1) from a hostname. For example, www.mail.example.co.uk returns example.co.uk.

reputation

ip_reputation

Check an IP address reputation against 100+ real-time blocklists (DNSBLs). Returns listing status, threat categories, AS info, and blocklist details.

subdomain

is_subdomain

Check whether a hostname is a subdomain (has labels beyond the registered domain). Uses the Mozilla Public Suffix List for accurate eTLD detection.

threat

ip_threat_intel

Combined threat intelligence: DNSBL listings, IPsum score, FireHOL lists, bad ASN flag, Tor exit status. Comprehensive threat assessment for an IP address.

tld

tld_info

Get information about a top-level domain or effective TLD. Returns whether it is in the Public Suffix List, how many sub-suffixes exist, and classification (ccTLD, gTLD, or infrastructure).

Endpoints

URL	Transport	State	Latency	Checked
https://mcp.robtex.com/mcp	streamable-http	answering	209 ms	12 min ago

Alternatives to Robtex

same job, measured the same way

DomScan

by estevecastells

Domain intelligence for DNS, WHOIS/RDAP, TLS, reputation, valuation, and brand protection.

answering

Domainintel MCP

by bishop81

Domain intelligence for agents: WHOIS, DNS, SSL/TLS, security headers, reputation, subdomains.

47 installs/wk local only

dns

by pipeworx-io

DNS MCP — DNS and network lookup tools

34 tools answering

Ololand Dd

by aniebyl

OloLand M&A intelligence — 33 tools for deal analysis, valuation, risk, and cross-deal learning.

54 installs/wk answering

Resemble AI

by resemble-ai

Resemble AI: deepfake detection, media intelligence, and watermarking actions, plus docs tools.

7 tools answering

Robinhood Chain

by madeonsol

Robinhood Chain (id 4663) trading intelligence: KOL trades, DEX tape, deployer reputation.

371 installs/wk local only

LLM Provider Intelligence

by memoryapi

LLM provider intelligence: recommendations, pricing, and status

3 tools answering

PeppolStatus

by peppolstatus

Peppol market intelligence and network monitoring: migrations, provider churn, leads, and uptime.

61 tools answering

Robtex — questions

Answers built from our own checks of this server.

What can Robtex do?

It exposes 46 tools, read directly from the server on our last check. Among them: as_info, as_prefixes, bitcoin_address_transactions, bitcoin_blockchain_stats, bitcoin_transaction_spends, check_email and 40 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

What is Robtex mostly used for?

Its tools cluster around lookup, domain and reverse. That is what this server is built to work with — the grouping comes from the actual tool names, not from a category we assigned.

Is Robtex working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 192 ms. The bar chart above shows every period we have measured.

How do I connect Robtex?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Robtex need an API key?

No. Robtex completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 46 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is Robtex?

It answers our handshake in 192 ms on average, which is faster than 67% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.