Connecting an AI assistant? Start with setup guides →
WhoisExtractor MCP Documentation
Developer documentation for the WhoisExtractor MCP server.
Authentication
Authenticated tools require Authorization: Bearer {token}. Ownership always comes from the token - never pass user_id or customer_id.
During OAuth, sign-in happens on whoisextractor.com/login (magic link, Google, or GitHub). The consent screen appears on the MCP domain after sign-in.
OAuth scopes
Discovery metadata advertises the mcp:use scope. During consent, you grant fine-grained Passport scopes that control which tools your AI can call:
account:read- View account informationorders:read- View orders and subscriptionsdownloads:read- View downloads and dataset availabilityinvoices:read- View invoicessupport:read- View support ticketssupport:write- Create and reply to support tickets
Write confirmations
Write tools require confirm=false first (preview), then confirm=true with the same idempotency_key.
Discovery endpoints
URLs are generated at runtime from the installed Laravel MCP registrar - do not hardcode paths.
- MCP server endpoint:
https://mcp.whoisextractor.com/mcp - OAuth authorization server metadata:
https://mcp.whoisextractor.com/.well-known/oauth-authorization-server - OAuth protected resource metadata:
https://mcp.whoisextractor.com/.well-known/oauth-protected-resource - OAuth dynamic client registration:
https://mcp.whoisextractor.com/oauth/register - OAuth authorization endpoint: unavailable
- OAuth token endpoint: unavailable