/ 100

20 days ago

glama

hasna/domains

MCP server for domain portfolio management, registrar operations, marketplace, and DNS management via CLI or AI agents.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 8 credentials: AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN, BRANDSIGHT_API_KEY, GODADDY_API_KEY, GODADDY_API_SECRET, NAMECHEAP_API_KEY, ROUTE53_SECRET_ACCESS_KEY, ROUTE53_SESSION_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAWS_ACCESS_KEY_ID— , AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN AWS credential fallback

configAWS_PROFILE— route53 registrar + DNS yes yes no nameservers + Route 53 hosted zones Primary self-serve registration path. Use or AWS keys.

configAWS_REGION

🔐 secretAWS_SECRET_ACCESS_KEY— AWS_ACCESS_KEY_ID, , AWS_SESSION_TOKEN AWS credential fallback

🔐 secretAWS_SESSION_TOKEN— AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS credential fallback

configBRANDSIGHT_ALLOW_STUBS— BRANDSIGHT_DEMO_STUBS, Set either to 1 to allow demo stub responses when the Brandsight API is unreachable

🔐 secretBRANDSIGHT_API_KEY— , BRANDSIGHT_API_SECRET, BRANDSIGHT_CUSTOMER_ID Brandsight / GoDaddy Corporate Domains credentials

configBRANDSIGHT_DEMO_STUBS— , BRANDSIGHT_ALLOW_STUBS Set either to 1 to allow demo stub responses when the Brandsight API is unreachable

configDOMAINS_CONFIG_DIR— Override config directory

configDOMAINS_CONFIG_PATH— Override config file path

configDOMAINS_DATABASE_URL— export ="postgres://..."

configDOMAINS_DB_PATH— Override database file path

configDOMAINS_DIR— Override database directory fallback

configDOMAINS_MCP_SAFE_MODE— MCP safe mode — expose read-only tools only with =1

configDOMAINS_PURCHASE_AWS_PROFILE— Purchase profile fallback when config has no purchase_aws_profile

configDOMAINS_STORAGE_MODE— Storage mode: local, remote, or hybrid

🔐 secretGODADDY_API_KEY— , GODADDY_API_SECRET GoDaddy API credentials

🔐 secretGODADDY_API_SECRET— GODADDY_API_KEY, GoDaddy API credentials

configHASNA_DOMAINS_DATABASE_URL— Legacy remote storage PostgreSQL database URL fallback

configHASNA_DOMAINS_DB_PATH— Override database file path

configHASNA_DOMAINS_DIR— Override database directory

configMCP_HTTP— 1 MCP_HTTP_PORT=8814 domains-mcp

configMCP_HTTP_PORT— MCP_HTTP=1 =8814 domains-mcp

configMCP_STDIO

🔐 secretNAMECHEAP_API_KEY— Namecheap API key

configNAMECHEAP_CLIENT_IP— Namecheap whitelisted IP

configNAMECHEAP_SANDBOX— Use Namecheap sandbox API

configNAMECHEAP_USERNAME— Namecheap account username

configROUTE53_ACCESS_KEY_ID

configROUTE53_AWS_PROFILE

configROUTE53_AWS_REGION

configROUTE53_REGION

🔐 secretROUTE53_SECRET_ACCESS_KEY

🔐 secretROUTE53_SESSION_TOKEN

configXDG_CONFIG_HOME

configXDG_DATA_HOME

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/hasna-domains-ku957k)](https://m8ven.ai/mcp/hasna-domains-ku957k)

commit: 637d5bddb54068367d3a6c14740491b5b2b28dc8

code hash: 8a75f08c8c0a8bcfa9b83211757cd0880fe3b97e4aeb923d0068f3f8ddac4a28

verified: 6/22/2026, 12:14:55 PM

view raw JSON →