VERIFIED

Dnstwist

Safety: 65/100

0.0(0)

DNStwist MCP server analyzes domain permutations to detect typosquatting and phishing risks, integrating with tools like Claude Desktop for security assessments.

MCP ServersFreemium

Boost this tool

Subscribe to listing upgrades or segmented pushes.

Overview

DNStwist MCP server analyzes domain permutations to detect typosquatting and phishing risks, integrating with tools like Claude Desktop for security assessments.

This server is relatively safe for security analysis when used responsibly and ethically. Risks arise from potential misuse of gathered information or abuse of DNS infrastructure. Users should adhere to ethical guidelines and respect rate limits.

Performance depends on network latency, DNS server response times, and the number of threads used. High thread counts may lead to rate limiting.

Cost is primarily related to resource usage (CPU, network) and potential charges from DNS providers if usage is excessive.

JavaScript43 starsMITCI/CD

Connections & Capabilities

Connects To

GitHubDocker

Capabilities

ReadExec

Client Compatibility

Claude Desktop

full

Cursor

untested

Windsurf

untested

VS Code (Copilot)

untested

Quickstart

Install

npx -y @smithery/cli install @burtthecoder/mcp-dnstwist --client claude

Claude Desktop Config

{
  "mcpServers": {
    "dnstwist": {
      "command": "mcp-dnstwist"
    }
  }
}

Tools (1)

moderate

fuzz_domain

Generates and analyzes domain permutations to detect typosquatting and phishing attempts.

Gathers potentially sensitive domain information and probes DNS servers, but does not modify any data.

Security

Auth Method

None

Known Risks

!Potential for DNS server rate limiting or blocking.
!Misuse of gathered domain information for malicious activities.
!Inaccurate or incomplete DNS data from queried servers.
!Dependency on external DNS servers introduces potential points of failure.

Safety Score

moderate risk

Positive

+Requires explicit domain input, limiting scope.
+Primarily read-only operations focused on DNS analysis.
+No direct modification of DNS records or domain registrations.
+Designed for security research with ethical usage guidelines.

Risks

-Potential for network abuse if used irresponsibly.
-Information gathered could be misused for malicious purposes.
-Relies on external DNS servers, subject to their policies.
-Lack of built-in rate limiting could lead to temporary blocks.

Use Cases

Threat Intelligence

-Identifying potential phishing domains targeting a brand.
-Detecting typosquatting campaigns.
-Monitoring domain registrations for brand impersonation.

Security Auditing

-Assessing the security posture of a domain.
-Identifying vulnerabilities related to domain name variations.
-Verifying domain registration information.

Brand Protection

-Monitoring for unauthorized domain registrations.
-Protecting brand reputation from typosquatting attacks.
-Enforcing trademark rights in domain names.

Who Is This For?

Best For

Security analysts
Threat intelligence researchers
Brand protection specialists
Incident response teams
Domain name registrars

Not Ideal For

Automated systems without human oversight.
Environments with strict network restrictions.
Use cases requiring real-time domain monitoring.

Autonomy & Execution

Default ModeRead and Write enabled

Sandboxed

The tool's autonomy is limited by the need for explicit domain input and the absence of destructive operations.

StatelessYes

Retry LogicNot documented

ConcurrencySupported

Production Tip

Monitor DNS server response times and adjust thread count to optimize performance in production environments.

FAQ

What is DNStwist used for?

DNStwist is used to generate and analyze domain name variations to detect typosquatting, phishing, and brand impersonation attempts.

Is DNStwist safe to use?

Yes, DNStwist is safe to use when employed responsibly and ethically for security research purposes. Avoid analyzing domains without permission.

What output formats are supported?

DNStwist supports JSON, CSV, and list output formats.

Can I use my own DNS servers?

Yes, you can specify a comma-separated list of DNS servers to use for analysis.

How can I improve performance?

Adjust the thread count based on your system's capabilities and monitor DNS server response times.

What do I do if I encounter DNS resolution problems?

Verify that your DNS servers are accessible and try alternative DNS servers like 8.8.8.8.

How do I install this server for Claude Desktop?

Use the Smithery CLI or manually configure the `claude_desktop_config.json` file.

Metrics

Discovered2/14/2026

Reviews0

Saved By0 users

Related Tools

Dnstwist - AI Tool Review & Alternatives | Flaex AI