Osiris Technical Institute MCP server

• Registry namecom.oti-labs/domain-intelligenceverified in the MCP registry

The registry name sits under oti-labs.com. The registry only lets a publisher use that namespace after proving control of the domain through DNS or HTTP.

• Stateanswerschecked 2026-10-25
• Tools6
• Server calls itselfdomain-intelligence
• Server version1.2.2
• Protocol version2025-06-18

On 2026-10-25 the server answered initialize and tools/list without a sign-in. First answer in 71 ms.

• Its tools do every use case we checked: enrich suspicious indicators with domain registration and certificate data; check SPF, DMARC and DKIM records before sending email.
• Checked on 2 of the 7 days it takes to judge reliability.

Said by rules from the measurements above. The likely first call is a model's pick from the tool list; read its description before relying on it.

• INITE MCP scoreafter a weeka score needs 7 daily checks: 2 so far
• What an agent can do with it2 of 2 use cases
• Use15 GitHub stars
• Answeredmeasuring2 of the 7 daily checks it takes to print a share
• Median first answer220 ms
• Space in an agent's context≈ 753 tokensthe definitions of all its tools (6), which an agent carries on every turn
• Tool definitionsB · 83 of 100
• Typed results6 of 6 toolsdeclared outputSchema: results come typed, read once

• Parameters without a description: in 6 of 6

A program checks the server once a day: initialize and tools/list, no model. Tokens are the definitions' length at about four characters a token. The grade averages six checks of every tool's name, description, schema and annotations; it says how well the tools are described, not whether they work. The score weighs what was measured and nothing else: answering (30%), doing the product's job (25%), definitions (20%), context (10%) and use (15%). A part that was not measured is left out, and a hidden instruction caps the score at 40. The state of vendors' MCP servers: method and numbers →

• domain_lookup

  Full report on a domain in one call: WHOIS/RDAP registration, DNS records, live SSL certificate, subdomains (live hosts with IPs first) and email authentication (SPF, DMARC, DKIM). Use it to triage a suspicious domain or profile a…

• whois_lookup

  Registration data for a domain: registrar, created, updated and expiry dates, nameservers and status. RDAP first (rdap.org, IANA bootstrap, 22 fallback servers), then port-43 WHOIS for 60+ TLDs. `_source` says which one answered. Use it…

• dns_records

  DNS records for a domain: A, AAAA, MX, TXT, NS, CAA and SOA, resolved in parallel.

• ssl_certificate

  The certificate a domain serves on port 443, from a live TLS handshake: issuer, subject, valid_from, valid_to, days_until_expiry, SANs, signature algorithm and serial number.

• subdomains

  Subdomains of a domain from certificate transparency logs, passive DNS and DNS brute force. `live` lists hosts that resolve now, each with its IP; `subdomains` lists every name found, live first; `pools` summarises large…

• email_security

  Email authentication for a domain: SPF and DMARC records, and DKIM keys found by probing about 29 common selectors (Google, Microsoft 365, Mailchimp, SendGrid and others). Custom selectors may not be found.