# com.robtex/mcp

> DNS, IP, AS, domain reputation, and Lightning Network intelligence (44 tools)

- name: com.robtex/mcp
- version: 1.0.0
- connection class: R0 (autonomous)
- trust: 69/100 flags: no-repository
- quality: 85/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.robtex%2Fmcp
- tools: https://api.protogrid.dev/v1/servers/com.robtex%2Fmcp/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "robtex": {
      "type": "http",
      "url": "https://mcp.robtex.com/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 100
- freshness: 45
- provenance: 45
- drivers: +dns-namespace +reachable +uptime-100% -stale-244d -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 85/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 86 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 46 of 46 tools declare readOnlyHint or destructiveHint
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: historic_reverse_lookup_cname (idempotentHint); ip_network (idempotentHint); ping (idempotentHint); …
- pass `tools.token_cost`: about 6,607 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: no tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 46, about 6,607 tokens to load them all
- tool set hash: f3e350b0e6087dcf314f6a956d83edb9
- badge: [![protogrid quality](https://protogrid.dev/badge/com.robtex/mcp.svg)](https://protogrid.dev/servers/com.robtex/mcp)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Remotes

- https://mcp.robtex.com/mcp (streamable-http, auth none, reachable true, uptime30d 1)

## Packages

_none_

## Tools (46)

- `as_info`: Get the name, organization, country, and description for an Autonomous System number. Lightweight version of as_whois.
- `as_prefixes`: Get all IPv4 and IPv6 network prefixes (netblocks) announced by an Autonomous System. Returns BGP-visible routes.
- `bitcoin_address_transactions`: Returns a paginated list of transactions involving a Bitcoin address. Filter by direction: received (incoming funds), sent (outgoing funds), or all. Returns up to 100 transactions per call, sorted by block height descending (most recent first).
- `bitcoin_blockchain_stats`: Returns cumulative blockchain metrics over a configurable block range. Available metrics include: txs, fees, segwittx, inputs, outputs, insats, outsats, btcusd, volusd, unspentoutputs, fullyspent, unspentsats, addresses, satoshiblocks, clnopen, clnclose, satlnopen, satlnclose, basereward, blockreward, batched, rbf, version2tx, lowestfee, and more. Returns sampled data points suitable for charting.
- `bitcoin_transaction_spends`: For a given transaction, returns which subsequent transactions consumed its outputs. Useful for UTXO tracking and chain analysis. Shows the spending txid for each output.
- `check_email`: Verify an email address by connecting to its mail server via SMTP. Checks MX records, tests if the address is accepted (RCPT TO), detects catch-all domains, and reports TLS support. Results are RAM-cached for 1 hour.
- `dns_differential`: Resolve a domain through filtered public DNS resolvers and their unfiltered controls to detect provider threat-feed blocks.
- `domain_blocklist_check`: Check a domain against HaGeZi DNS blocklists, Steven Black unified hosts, Blackbook malware list, phishing databases, Roskomnadzor (Russia), and Citizen Lab censorship lists. Returns which lists the domain appears on.
- `domain_ranking`: Get domain popularity rankings from five independent sources: Majestic Million (backlinks), Tranco top 1M (aggregated traffic), Cloudflare Radar (1.1.1.1 DNS query popularity), Cisco Umbrella (OpenDNS query popularity), and Chrome UX Report (real Chrome user traffic).
- `domain_rdap`: Queries the authoritative RDAP registry for a domain. Returns availability status (HTTP 404 = available), and for registered domains: registrar name, registration/expiration dates, nameservers, DNSSEC status, and domain status flags. Uses IANA bootstrap to find the correct RDAP server per TLD. Covers 590+ TLDs.
- `domain_reputation`: Get comprehensive domain reputation: Majestic rank, Tranco rank, HaGeZi blocklist status, Blackbook malware status, phishing database status, HSTS preload status, and disposable email detection.
- `domain_shared_ip`: Find other domains hosted on the same IP address(es) as the target domain. Resolves the domain's A records, then performs reverse IP lookups for each.
- `domain_shared_mx`: Find other domains using the same mail server(s) as the target domain. Resolves the domain's MX records, then performs reverse MX lookups for each.
- `domain_shared_ns`: Find other domains using the same nameserver(s) as the target domain. Resolves the domain's NS records, then performs reverse NS lookups for each.
- `get_recommended_lightning_peers`: Get recommended Lightning Network peers for a given node. Returns nodes that are NOT currently peered with the specified node but would improve its centrality score if connected.
- `historic_reverse_lookup_cname`: Find hostnames that previously had a CNAME record pointing to the specified target but no longer do. Tracks CDN and infrastructure migrations.
- `historic_reverse_lookup_ip`: Find hostnames that *previously* pointed to a specific IP address but no longer do. Tracks hosting migrations and past IP relationships. Searches both A and AAAA records.
- `historic_reverse_lookup_mx`: Find hostnames that *previously* used a specific mail server but no longer do. Tracks email provider migrations and past MX relationships.
- `historic_reverse_lookup_ns`: Find hostnames that *previously* used a specific nameserver but no longer do. Tracks infrastructure migrations and past delegation relationships.
- `ip_blocklist_check`: Check an IP address against IPsum, FireHOL, Tor exit node lists, C2 indicators, Roskomnadzor (Russia), and other threat intelligence feeds. Returns which lists the IP appears on and threat scores.
- `ip_geolocation`: Get geographic location data for an IP address: country, city, region, latitude, longitude, timezone.
- `ip_network`: Get the containing network (BGP route), AS number, AS name, and route description for an IP address.
- `ip_reputation`: Check an IP address reputation against 100+ real-time blocklists (DNSBLs). Returns listing status, threat categories, AS info, and blocklist details.
- `ip_threat_intel`: Combined threat intelligence: DNSBL listings, IPsum score, FireHOL lists, bad ASN flag, Tor exit status. Comprehensive threat assessment for an IP address.
- `ip_to_asn`: Lightweight lookup: get just the AS number and netblock for an IP address. Fastest way to map IP to ASN.
- `is_subdomain`: Check whether a hostname is a subdomain (has labels beyond the registered domain). Uses the Mozilla Public Suffix List for accurate eTLD detection.
- `latest_lightning_channels`: Returns the most recently opened Lightning Network channels, sorted by open time descending.
- `lookup_as_whois`: Lookup WHOIS information for an Autonomous System (AS) number from the RADB routing database. Returns routing policy, network information, and administrative contacts.
- `lookup_bitcoin_address`: Returns address balance, total received/sent, transaction counts, address type (P2PKH, P2SH, P2WPKH, P2TR), first/last seen block, and ransomware/abuse flags. Supports all Bitcoin address formats.
- `lookup_bitcoin_block`: Returns block header (hash, timestamp, version, merkle root, difficulty, nonce), transaction count, and list of transaction IDs. Supports lookup by block height.
- `lookup_bitcoin_transaction`: Returns full transaction details: inputs with addresses and values, outputs with spent status, fee, size/weight, SegWit flag, and Lightning Network channel correlation. Supports both confirmed and mempool transactions.
- `lookup_dns`: Lookup DNS records (A, AAAA, MX, NS, TXT, CNAME, SOA) for a given hostname. Also returns domain reputation info (Majestic, Tranco rankings, blocklist status).
- `lookup_lightning_channel`: Lookup a Lightning channel by channel ID. Supports numeric, block x txn x vout, or block:txn:vout formats.
- `lookup_lightning_channels_per_node`: Lookup all Lightning Network channels for a given node by public key.
- `lookup_lightning_node`: Lookup a Lightning Network node by public key. Returns node alias, peer count, channel count, and centrality ranking.
- `lookup_mac`: Look up the manufacturer/vendor of a network device by its MAC address. Uses the official IEEE OUI (Organizationally Unique Identifier) database with ~30K entries.
- `parse_hostname`: Parse a hostname into its constituent parts using the Mozilla Public Suffix List (9700+ entries). Returns eTLD (effective TLD), registered domain, subdomain, labels, and depth. Handles multi-level eTLDs (co.uk, co.jp, com.au) and platform suffixes (github.io, herokuapp.com).
- `ping`: Check if the API is responding. Returns status and server timestamp.
- `registered_domain`: Extract the registered domain (eTLD+1) from a hostname. For example, www.mail.example.co.uk returns example.co.uk.
- `reverse_lookup_cname`: Find hostnames that have a CNAME record pointing to the specified target. Useful for CDN and load balancer investigations.
- `reverse_lookup_dns_records`: Find hostnames that use a specific DNS record value. Query which hostnames point to an IP address, use a particular nameserver, or reference any DNS value. For example: 'which hostnames point to 1.2.3.4?' or 'which hostnames use chris.ns.cloudflare.com as their nameserver?'
- `reverse_lookup_ip`: Find hostnames that point to a specific IP address (IPv4 or IPv6). Searches both A and AAAA records. For example: which hostnames point to 1.2.3.4?
- `reverse_lookup_mx`: Find hostnames that use a specific mail server. For example: which hostnames use aspmx.l.google.com as their mail server?
- `reverse_lookup_ns`: Find hostnames that use a specific nameserver. For example: which hostnames use chris.ns.cloudflare.com as their nameserver?
- `search_lightning_nodes_by_alias`: Search for Lightning Network nodes by partial alias match. Returns nodes whose aliases contain the search term (case-insensitive).
- `tld_info`: Get information about a top-level domain or effective TLD. Returns whether it is in the Public Suffix List, how many sub-suffixes exist, and classification (ccTLD, gTLD, or infrastructure).