Can an AI Agent Buy a Domain? What the MCP Servers Actually Allow
Yes. Through a registrar MCP an AI agent can search availability, quote the price and complete a registration — Vercel with a quote-then-confirm purchase, Cloudflare through the Registrar API beta, Hostinger, Name.com, Porkbun once two flags are set, and the GoDaddy and Namecheap apps inside ChatGPT. Every one of them charges a payment method a human already put on the account. What no server lets the agent do: add that payment method, invent the registrant, obtain a transfer code, or undo a completed purchase. This page is the capability map — which server charges how, what gate each one ships with, and the four gates worth adding yourself.
The answer per server
Verified 2026-09-29 by running each local server and reading the vendor documentation for the hosted ones. "Gate" is what stands between a prompt and a charge on a default install.
| Server | Registers? | What it charges | Gate on a default install | Free rehearsal |
|---|---|---|---|---|
| Vercel (MCP server) | Yes | The team's payment method, at the quoted price | get_purchase_quote first; buy_domain must echo the quoted price and confirm: true, and is rejected if the live price moved | The quote itself — read-only, never charges |
| Cloudflare | Yes (Registrar API beta, curated TLDs) | The account's default payment method, non-refundable once complete | None in the server — your client's confirmation prompt and a Registrar-write-only credential | domain-search and domain-check are read-only |
| Hostinger | Yes | The account's default payment method | None — domains_portfolio_purchase and billing_orders_create-purchase have no dry run | domains_availability_check is read-only; search flags every operation readOnly or not |
| Name.com | Yes | The connected account, once NAME_API_URL points at production | The server's own operation text says to confirm contact details with the user before ManageDomains create | The default: the test environment at mcp.dev.name.com |
| Porkbun | Yes, behind two flags | The account, immediately, once --get-muddy and --enable-domain-create are set | Structural — a stock install cannot register at all | Read-only mode, which is the default |
| GoDaddy / Namecheap (ChatGPT Apps) | Yes, inside ChatGPT | The connected account | The app's own in-chat confirmation | Availability search |
| Namecheap API MCP | No | — | — | check_domains, up to 50 names per call |
| IntoDNS | No | — | — | whois_lookup shows whether a name is registered |
Three shapes of purchase
The call that bills
Cloudflare, Hostinger, Name.com in production and Porkbun with its flags on all work the same way: one write call registers and charges. Fast, and entirely dependent on the gate you put in the prompt and the client.
Quote, then confirm
Vercel splits the purchase in two. get_purchase_quote is read-only and returns the live price plus a signed idempotency key; buy_domain must send that key, the same parameters and the quoted price with confirm: true. A moved price or a reused key is rejected, and a missing payment method returns a billing URL instead of a charge. This is the shape to ask every registrar for.
Search in chat, buy in the browser
Some registrar tools stop at a checkout link: the agent searches and quotes, and a human completes the purchase on the web, so no agent ever holds a payment instrument. None of the ranked servers on this page works that way today, but it is the shape to expect from registrars that decide an agent should never be able to spend.
What stays human, whatever server you use
Putting a payment method on the account
No server here accepts a card number. Vercel returns a billing URL instead of a charge when none is on file; Cloudflare and Hostinger bill whatever default method the account holds. The agent spends what a human already authorized the account to spend.
The registrant's identity
Registration needs a real name, address, email and phone for the WHOIS contact. Vercel's buy_domain takes them as parameters; Name.com's server tells the agent not to invent them. Give the agent the contact details, or make it ask — never let it fill them in.
Transfer authorization codes
Moving a domain in from another registrar needs the losing registrar's auth (EPP) code, which only the owner can obtain by signing in there. Name.com's ManageTransfers create and Hostinger's domains_transfer_claim-free both take the code as input; neither can fetch it. Cloudflare's Registrar API beta has no transfer endpoint yet.
Undoing it
A completed registration is yours. Cloudflare states its registrations are non-refundable, Vercel's purchases are immediate and non-refundable, and ICANN locks a transferred domain against re-transfer for 60 days. The confirmation step is the undo.
The confirmation is the undo
The four gates worth adding
A confirmation on the purchase call itself
Not on the search, not on the plan — on the call that bills. Make the agent restate the exact domain, term and price and wait for a literal "yes". Most clients also prompt before a write tool call; leave that on.
A credential that can spend only what you intend
Cloudflare: Registrar write on a separate token used only when buying. Vercel: approve one team, and let the quote carry the price. Hostinger: a scoped bin without billing for everything except the purchase session. Porkbun: leave the two flags off until you mean it.
A rehearsal that cannot charge
Name.com defaults to its test environment, Porkbun starts read-only, Vercel's quote is read-only by design, and every server's availability check is free. Prove the whole conversation on a throwaway name before the credential can spend.
The registrar lock, and auto-renew, left alone
An agent that "saves money" by disabling auto-renew can lose the domain; one with transfer permission can move it. Keep both settings with a human, and check the lock after every registration.
Frequently asked questions
Can an AI agent buy a domain?
Yes. Connected to a registrar MCP, an agent can search availability, quote the price and complete the registration: Vercel (get_purchase_quote, then buy_domain at the quoted price), Cloudflare (the Registrar API beta through its hosted server), Hostinger (domains_portfolio_purchase), Name.com (ManageDomains with operation create) and Porkbun (domains_create, once two flags are set) all charge a payment method already on the account. Inside ChatGPT the GoDaddy and Namecheap apps do the same. What the agent cannot do is add the payment method, invent the registrant, obtain a transfer code, or undo a completed purchase.
Can ChatGPT buy a domain?
Yes, three ways. The GoDaddy and Namecheap ChatGPT Apps register on a connected account with an in-chat confirmation. Vercel's MCP is a reviewed ChatGPT connector with the quote-then-confirm flow. Cloudflare's hosted server can be added as a custom connector in Developer mode and reaches the Registrar API beta. Name.com, Porkbun and Hostinger run locally over stdio, so they need Claude Desktop, Claude Code, Cursor or another local client instead.
Can Claude buy a domain?
Yes — every server on this page except the two ChatGPT Apps works in Claude Desktop and Claude Code. The step-by-step for Cloudflare is in the buy-a-domain tutorial linked below; the same conversation pattern (search, restate, confirm, register, DNS) works with Name.com, Porkbun, Hostinger and Vercel.
Is it safe to let an AI agent register domains?
With the four gates above, yes: a confirmation on the purchase call, a credential that can only spend what you intend, a rehearsal that cannot charge, and the lock and auto-renew left with a human. The servers differ in how much of that they give you for free. Vercel rejects a purchase whose price moved since the quote and never charges the same quote twice; Porkbun cannot register on a stock install; Name.com cannot charge until you point it at production. Cloudflare and Hostinger bill on the first call, so the gate is yours to build.
Can an AI agent transfer a domain between registrars?
It can start one, given the auth code: Name.com's ManageTransfers create takes the code and the purchase price, and Hostinger's domains_transfer_claim-free consumes a free transfer the account already holds. It cannot get the code — that comes from the owner's login at the losing registrar — and Cloudflare's Registrar API beta lists transfers as not available yet. Treat any transfer as confirm-first: ICANN's 60-day lock makes a mistaken transfer the most expensive error in this category.
Can it renew a domain?
Name.com exposes renew as a ManageDomains operation, Vercel's buy_domain takes an autoRenew flag that defaults to true, and Hostinger's billing operations manage subscriptions and auto-renewal. Cloudflare's Registrar API beta lists renewals as not available yet. The safer default is to leave auto-renew on and have the agent read the setting rather than change it.
What happens if the price changes between the search and the purchase?
On Vercel the order is rejected: buy_domain must echo the expectedPrice from the quote, quotes expire after five minutes, and a mismatched or reused idempotency key is refused. On Cloudflare, Hostinger and Porkbun the registration call charges the live price, so the confirmation in your prompt should carry the price the agent last quoted, and the agent should re-check before it buys.
Which server should a cautious first-timer use?
Name.com, because the default target is a sandbox — the agent can run the entire search, confirm and register conversation and nothing is charged until you set NAME_API_URL to production. Porkbun is the runner-up: its server refuses to register until you pass two flags, so the mistake you can make on day one is an inert call, not a purchase.
Do it
The step-by-step for Cloudflare, the cross-registrar search workflow, and the ranked list of every server above.
Related guides
Tutorial
How to Buy a Domain From Claude (Cloudflare MCP, Step by Step)
6 min read
Setup Guide
Best MCP Servers for Domains in 2026 (Registrars + DNS)
10 min read
Tutorial
How to Search for Domains With an AI Agent (Cross-Registrar Workflow)
7 min read
Tutorial
How to Connect a Custom Domain to Your Site With an AI Agent (MCP Workflow)
7 min read
Ranked Guide
Best MCPs for DNS Management in 2026 (Records, Propagation, DNSSEC)
9 min read
Security
Least-Privilege Scoping for MCPs: How to Grant the Smallest Useful Permission
7 min read