Independent trust grade B+ (87/100). No blocking issues found in the static + spec checks. wmcp.sh continuously watches mcp.agentdomains.co for tool drift and rug-pulls. The grade is free and identical whether or not the operator pays.
check_availabilityCheck whether a subdomain label is free before claiming it. Requires no API key. Returns { label, domain, fqdn, available, reason } where reason is 'a
signupCreate a new AgentDomains account and get an API key. Requires no existing key. IMPORTANT: the returned api_key is shown ONCE and is never retrievable
whoamiShow the current account: id, state, attached email and whether it is verified, domains used, and which domains are available to claim under. When quo
attach_emailAttach an email address to the account and send it a verification link. A human must click that link within 30 days or the provisional account and its
claim_domainRegister a subdomain (label.makes.fyi or label.agentdomains.co) on this account, optionally creating its first DNS record in the same call. An email i
list_domainsList every subdomain on this account, with each one's DNS records and whether it is forwarding, proxying, or delegated to external nameservers.
get_domainShow one subdomain in full: its fqdn, DNS records, forward or proxy configuration, and delegation state.
delete_domainDESTRUCTIVE AND IRREVERSIBLE: permanently delete a subdomain and every DNS record, forward, and proxy attached to it. The hostname stops resolving imm
add_dns_recordAdd a DNS record to a subdomain you already own. Use type A or AAAA to point at an IP address, CNAME to point at another hostname, or TXT for verifica
delete_recordDESTRUCTIVE: permanently remove ONE DNS record from a subdomain, keeping the name and every other record. Use this to undo a single record — a wrong I
add_acme_challengePublish a Let's Encrypt DNS-01 challenge: creates a TXT record at _acme-challenge.<label>.<domain> with the token your ACME client printed. Use this t
set_forwardForward (HTTP-redirect) a subdomain to another URL. Claims the label first if you do not own it yet, in which case an email may be required exactly as
remove_forwardStop forwarding a subdomain. The name itself stays registered on the account; only the redirect is removed.
set_proxyServe a backend at this subdomain through the AgentDomains edge, which terminates TLS with its own certificate — this is how you get working HTTPS on
remove_proxyStop reverse-proxying a subdomain, so the edge no longer serves the backend or terminates TLS for it. The name stays registered on the account.
delegate_nameserversDelegate the subdomain to your own nameservers, handing you full control of it and everything beneath it (your own records, MX, deeper sub-domains). A
delete_accountDESTRUCTIVE AND IRREVERSIBLE, AND THE LARGEST ONE HERE: delete the whole AgentDomains account and invalidate its API key, which cannot be recovered or
upgrade_to_proGet a Stripe checkout link for AgentDomains Pro: 100 names instead of the free 10, names never released for being unreachable, and priority email supp
+1 more tool
No proxied traffic observed for this host yet. Connect it at /connect and its grade gains a measured Reliability score + per-tool behavioral evidence — the half a static scan can't produce.
We re-grade mcp.agentdomains.co on a schedule and alert your Slack/webhook the moment its tools change or its grade drops — rug-pull insurance for the connection.
Run mcp.agentdomains.co? Claim it (free) to get drift alerts and show an independently-verified trust badge. The grade stays free — claiming just ties it to you.
Add the wmcp.sh trust oracle as an MCP server and call grade_mcp_server / check_mcp_drift in your agent's pre-connection gate:
https://wmcp.sh/mcp/trust
readOnly vs observed behavior) layer on via the wmcp.sh proxy.