Best MCP Servers for Domains in 2026 (Registrars + DNS)
The best domain MCP for an AI agent is Hostinger when you want registration, DNS and hosting behind one credential, Cloudflare for at-cost domains plus DNS on the same control plane as your edge (its hosted server reaches the Registrar API beta), Vercel when the site already deploys there — its quote-then-confirm purchase is the safest buy flow on this page — Name.com when you want to rehearse a registration in a sandbox first, and Porkbun for low-cost domains with a read-only-by-default write model. Add IntoDNS whatever else you install — it is the only one here that checks whether the change the agent just made actually took effect. Below: ranked picks, a decision tree, a capability matrix that says which servers can spend money, and the gotchas around the most expensive agent mistakes in this category.
Why a domain MCP at all?
Domain ops sit at the intersection of three jobs that usually live in three different tabs: search availability, register the name, and configure DNS to point at the deployed site. Add renewals, transfers, and TXT records for email verification and you have a workflow that is mostly tab-hopping in a registrar dashboard.
A domain MCP collapses that into a single conversation. "Register myapp.dev, point it at the Vercel deploy, add an MX record for support@myapp.dev" becomes one prompt instead of fifteen clicks. The catch is that domain operations move money (registration, renewal) and commit changes that are hard to undo (transfers), so the right MCP also has to surface that risk to the agent.
Setup time
5–10 min per registrar
Risk profile
Reads safe; writes move money or commit transfers
Cost
MCPs are free; domains cost what they cost
Transfers are irreversible for 60 days
transfer call by an agent the most expensive class of mistake in this category — you cannot just "transfer it back." Enable registrar lock on every domain you are not actively moving, scope the API token so transfer operations require human confirmation, and write the system prompt to demand the literal domain name in the confirmation reply.Decision tree — which registrar MCP for which job
Pick by the portfolio you already own first, by the cost model second.
| If you… | Install | Why |
|---|---|---|
| You want at-cost domains and agent-controlled DNS in one place | Cloudflare | Hosted Code Mode server: the Registrar API beta for search and registration, DNS on the same control plane as Workers. OAuth with permission selection, or a scoped token. |
| You deploy on Vercel and want the name, the DNS and the deploy in one connection | Vercel (MCP server) | get_purchase_quote → buy_domain with the quoted price, then add_project_domain and DNS records — the most carefully gated buy flow in this list. |
| You want an official API-first MCP from a real registrar | Name.com | Vendor-published MCP, OpenAPI-derived tools, defaults to the test environment so writes are safe. |
| You want low-cost domains with a safe write default | Porkbun | At-cost pricing; read-only by default, writes need --get-muddy and registration a second flag on top. |
| You want the domain, the DNS and the hosting behind one credential | Hostinger | Official server; registers, writes DNS with snapshots, and deploys the site the records point at — three tools over 403 operations since v2. |
| You need to confirm a DNS, DNSSEC or SPF change actually took effect | IntoDNS | No API key. Checks nine resolvers, walks the DNSSEC chain, and generates the record that fixes what it finds. |
| Your portfolio is at Namecheap and your agent is not ChatGPT | Namecheap API MCP | Community server, 16 verified tools; reads, DNS, nameservers and registrar lock, but no registration. |
| Your portfolio is already at GoDaddy and you use ChatGPT | GoDaddy (ChatGPT App) | OAuth install inside ChatGPT, broad TLD coverage, no API key to rotate. |
| Your portfolio is already at Namecheap and you use ChatGPT | Namecheap (ChatGPT App) | OAuth install, WhoisGuard control, lowest friction for an existing Namecheap account. |
| You are about to let an agent transfer a domain | Do not — yet | Transfers are irreversible for 60 days under ICANN rules. Read the gotchas below first. |
The domain MCPs worth installing
Ordered by surface coverage and agent ergonomics. Most readers will use one — pick the registrar that matches the portfolio.
Hostinger
10 min setupMost of this category is single-purpose: a registrar MCP or a hosting MCP. Hostinger is both, plus the site builder, so an agent can run the entire "from nothing to a live site" chain without switching credentials. The v2 redesign also fixed the one thing that made it hard to use: 396 tool definitions no longer land in the context window — three do, and the agent searches for the rest.
npx -y hostinger-api-mcp@latest
Cloudflare
5 min setupCloudflare runs the DNS for a large share of the web and sells domains at cost, so this is the one server through which an agent can search for a name, register it (Registrar API beta, since 2026-04-15), write the zone, and deploy the Worker the records point at — on one credential. Code Mode is also why it fits in a context window: three tools instead of thousands.
claude mcp add --transport http cloudflare https://mcp.cloudflare.com/mcp
Vercel (MCP server)
5 min setupVercel is the default host for Next.js and much of the modern front end, and this server now covers the whole launch chain from one OAuth connection: register the name, add it to the project, write the DNS, deploy, read the logs. The purchase flow is also the most carefully gated in the directory — a read-only quote returns an idempotency key, and the buy call must echo the quoted price back or it is rejected.
claude mcp add --transport http vercel https://mcp.vercel.com
Name.com
5 min setupName.com is one of the few registrars with a vendor-published MCP server, and the only ranked one whose default target is a test environment: `NAME_API_URL` points at mcp.dev.name.com until you change it. That makes it the safest place to rehearse a full search-register-DNS flow before letting an agent near a real portfolio.
npx -y namecom-mcp@latest
Porkbun
5 min setupIt is the entry in this category built as if an agent would be holding it. Writes are opt-in at the process level rather than trusted to a prompt, destructive scenarios dry-run first, and the composite tools — `dns_upsert`, `dns_batch_apply`, `domain_cutover_web`, `domain_redirect_ensure` — describe a desired end state rather than a sequence of edits, so a retry converges instead of duplicating a record.
npx -y porkbun-mcp@latest
Namecheap API MCP
10 min setupNamecheap is the default registrar for a large share of indie developers, and until now this directory could only point them at a ChatGPT-only integration. This server puts the same portfolio in Claude Code, Cursor, VS Code and any other client.
npx -y namecheap-api-mcp@latest
IntoDNS
2 min setupRegistrar MCPs write records; nothing in them verifies the result, and an agent that re-reads its own change from one resolver five seconds later sees a cached answer and concludes success. This server is the check step — it queries multiple resolvers, walks the DNSSEC chain from root, and counts SPF lookups against the ten-lookup limit that silently breaks mail.
npx -y intodns-mcp@latest
GoDaddy
< 1 min setupGoDaddy holds the broadest TLD coverage and the largest installed base of any registrar. For users with a GoDaddy portfolio, the ChatGPT App is the lowest-friction way to give an agent write access — one OAuth click, no API keys to rotate, no JSON config.
ChatGPT App: https://chatgpt.com/apps/godaddy
Namecheap
< 1 min setupNamecheap is the dominant low-cost registrar for indie developers and freelancers. The ChatGPT App is the OAuth path into that portfolio — one click and the agent can run the operations that used to require the dashboard, without any API key in the loop.
ChatGPT App: https://chatgpt.com/apps/namecheap
Pair a domain MCP with a web-hosting MCP
Capability matrix — what each server lets the agent do
The two columns that decide how much you trust a server are the last two: what it needs from you, and whether it can spend your money. Verified 2026-09-29 by running each local server and reading the vendor documentation for the hosted ones.
| MCP | Search | Register | DNS | Credentials | Can it spend money? |
|---|---|---|---|---|---|
| Hostinger | Yes, plus AI name suggestions | Yes | Yes, with snapshots | OAuth or API token | Yes — purchase operations, no dry run |
| Cloudflare | Yes (Registrar API beta) | Yes, curated TLDs | Yes | OAuth with permission pick, or scoped token | Yes — registrations charge the default payment method |
| Vercel (MCP server) | Yes, with per-TLD price | Yes | Yes, on Vercel-managed domains | OAuth, per team | Yes — only after a quote, at the quoted price |
| Name.com | Yes | Yes | Yes, plus DNSSEC | Username + token | Only in production; sandbox by default |
| Porkbun | Yes, bulk | Yes, behind two flags | Yes, idempotent helpers | API key + secret | Only with --enable-domain-create |
| Namecheap API MCP | Yes, 50 per call | No | Yes (full replace) | API key + allow-listed IP | No |
| IntoDNS | No | No | Verify only | None | No |
| GoDaddy (ChatGPT App) | Yes | Yes | Yes | OAuth inside ChatGPT | Yes |
| Namecheap (ChatGPT App) | Yes | Yes | Yes | OAuth inside ChatGPT | Yes |
Common gotchas
Name-server propagation is slow; agent verification is fast
Changing a name-server or A record propagates over minutes to hours, not seconds. An agent that runs an "edit DNS → verify" loop will see stale data on the verify step and try to fix what is not broken. Add a delay (or skip the verify call entirely and trust the registrar API response) to avoid the loop.
Full-account API tokens are overkill for one-domain workflows
Cloudflare lets you scope a token to a single zone with DNS-edit-only permissions, and its OAuth consent screen lets you tick the same scopes. Use them. A full-account credential hands the agent the keys to every domain in the account; a zone-scoped one caps the blast radius to the one domain you are working on. Vercel's equivalent is approving one team, not all of them.
Auto-renewal is a feature, not a bug
Disabling auto-renewal "to save money" is the most common path to losing a domain. Most registrars charge no premium for auto-renewal — leave it on for any domain you actually want to keep, and have the agent verify auto-renewal status rather than disabling it.
A full-zone-replace tool with a partial list deletes the rest
Namecheap's set_dns_hosts and Hostinger's overwrite mode both replace the entire zone with what you send. An agent that sets one record without reading the existing set first silently wipes everything else on the domain — including the MX records nobody notices are gone until mail stops. Read first, send the merged set, or use a server with idempotent helpers (Porkbun's dns_upsert and dns_batch_apply were designed for exactly this).
Transfer locks are off by default at some registrars
Newly registered domains at some registrars ship with the registrar lock disabled. An agent with write access to your account could initiate an outbound transfer without any extra step. Check the lock status after any new registration and enable it.
Frequently asked questions
Which domain MCP should I install first?
Install the one for the portfolio you already own — that decision is made for you. If you are starting fresh and want the whole chain from one credential, Hostinger is the only server here that registers the name, writes the DNS, and hosts what the records point at. If DNS is the job and the zones are already on Cloudflare, install Cloudflare. If you want to practise before spending anything, install Name.com: its server defaults to a test environment.
How does an agent verify a DNS change actually worked?
Not by re-reading the record, which is what it will do by default. One resolver's cached answer is not propagation, so the agent sees the old value, concludes the change failed, and starts flip-flopping. Install IntoDNS alongside the registrar server: check_dns_propagation queries nine resolvers and shows where they disagree, validate_dnssec walks the chain from root, and check_spf counts the ten-lookup budget that silently breaks mail. It needs no API key.
What is the difference between Cloudflare Registrar and the Cloudflare MCP?
Cloudflare Registrar is the at-cost registration product. The Cloudflare MCP is the hosted server at mcp.cloudflare.com/mcp that reaches the whole Cloudflare API through three Code Mode tools (search, execute, docs) — DNS records, Workers, R2, edge policies, and since the Registrar API beta of 2026-04-15, domain-search, domain-check and registrations on the account. One connection covers both jobs if your domains are at Cloudflare. The npm package with a similar name is an older Workers-only server and cannot do either.
Can an AI agent buy a domain?
Yes — with the right server and a credential that is allowed to spend. Cloudflare registers through the Registrar API beta, Hostinger through domains_portfolio_purchase, Name.com through ManageDomains with operation create (sandbox by default), Porkbun through domains_create once two flags are set, Vercel through get_purchase_quote followed by buy_domain with the quoted price, and the GoDaddy and Namecheap ChatGPT Apps inside ChatGPT. Every one charges a payment method already on the account. Pair the capability with two safeguards: a confirmation step before the purchase call, and a payment method or spend limit that caps what a runaway loop can do.
How do I prevent an agent from accidentally transferring a domain?
Domain transfers are typically irreversible for 60 days under ICANN rules, so this is the most expensive class of agent mistake. Three layers: (1) enable the registrar lock on every domain you do not actively plan to transfer; (2) scope the API token / OAuth grant to read-only for transfer operations; (3) write the system prompt to require explicit confirmation containing the literal domain name before any transfer call.
Can I reach GoDaddy or Namecheap from Claude or Cursor?
Namecheap, yes — a community server (namecheap-api-mcp) wraps the Namecheap API with 16 verified tools and runs in any MCP client. It covers portfolio reads, DNS host records, nameservers, forwarding and registrar lock, but not registration. GoDaddy is still ChatGPT-only in practice: it publishes no MCP server, and the community wrappers on npm are single-digit-download and unmaintained, which is the wrong place for a credential that can move a domain.
Do any of these servers cost money to run?
No — every server here is free software or a free hosted endpoint; the domain costs whatever the registrar charges, and that is a registrar decision this page does not rank. What the servers differ on is whether the agent can spend at all: Vercel and Name.com quote the price before a purchase, Porkbun refuses to register until you set two flags, and Namecheap's community server and IntoDNS cannot spend anything.
Can I use a domain MCP with Claude Code, Cursor, and Windsurf?
Yes for all seven ranked servers. Name.com, Porkbun, Hostinger and the Namecheap API server run locally over stdio; Cloudflare and Vercel are hosted servers you add by URL (Claude Code: claude mcp add --transport http …; Claude Desktop: a custom connector or the mcp-remote bridge); IntoDNS offers both. GoDaddy is the one that stays ChatGPT-only.
How do I scope an API token for a domain MCP?
Use the smallest scope the workflow needs. Cloudflare: over OAuth, tick only DNS edit on one zone, and add Registrar write only for the session that buys; a bearer token works the same way. Vercel: approve one team on the consent screen, not every team. Name.com: leave NAME_API_URL on the test environment until the flow is proven. Porkbun: leave write mode off until you need it. Always start read-only and graduate to write only after the workflow is verified.
More for domains
See the full Domains category for every ranked MCP, read what an agent can and cannot buy, or follow the DNS guide when the job is records rather than registration.
Related guides
Strategy
Can an AI Agent Buy a Domain? What the MCP Servers Actually Allow (2026)
8 min read
Ranked Guide
Best MCPs for DNS Management in 2026 (Records, Propagation, DNSSEC)
9 min read
Tutorial
How to Buy a Domain From Claude (Cloudflare MCP, Step by Step)
6 min read
Tutorial
How to Search for Domains With an AI Agent (Cross-Registrar Workflow)
7 min read
Tutorial
How to Connect a Custom Domain to Your Site With an AI Agent (MCP Workflow)
7 min read
Comparison
Namecheap vs GoDaddy vs Cloudflare MCP (2026)
7 min read