OSIR Domain Registrar
REMOTE · BE.OSIR.COM · SCANNED SEP 24
Register, renew, transfer, and manage domains, DNS, VPS, and email with 105 tools. By OSIR.
Available components
Recent critical change
Authorization (3 Sept 2026). See the changelog before you install this server.
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security66
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (buildVpsInstance). See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability79
- 85% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Partial
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 14561 tokens (~136/item across 107 items; 105 tools + 2 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management73
- Stability observed for 22 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (10% of tools); any adoption earns full credit.Pass
Tool Safety97
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 14 of 16 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "getTransferQuote" implies "transfer" and declares readOnlyHint instead, contradicting what its own name says it does. See how to fix → Partial
- An AI judge read all 107 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
How do I install the OSIR Domain Registrar MCP server?
OSIR Domain Registrar is a hosted endpoint at https://be.osir.com/mcp/http, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · be.osir.com
claude mcp add --transport http com-osir-domain-registrar 'https://be.osir.com/mcp/http'
{
"mcpServers": {
"com-osir-domain-registrar": {
"url": "https://be.osir.com/mcp/http"
}
}
} {
"servers": {
"com-osir-domain-registrar": {
"type": "http",
"url": "https://be.osir.com/mcp/http"
}
}
} [mcp_servers.com-osir-domain-registrar] url = "https://be.osir.com/mcp/http"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-osir-domain-registrar": {
"type": "remote",
"url": "https://be.osir.com/mcp/http",
"enabled": true
}
}
} openclaw mcp add com-osir-domain-registrar --url 'https://be.osir.com/mcp/http' --transport streamable-http
mcp_servers:
com-osir-domain-registrar:
url: "https://be.osir.com/mcp/http" {
"McpServers": {
"com-osir-domain-registrar": {
"Transport": "http",
"Url": "https://be.osir.com/mcp/http"
}
}
} assistant mcp add com-osir-domain-registrar -t streamable-http -u 'https://be.osir.com/mcp/http'
{
"mcpServers": {
"com-osir-domain-registrar": {
"type": "http",
"url": "https://be.osir.com/mcp/http"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 24 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 70 to 73. That category is still filling its 30-day observation window: 21 days of observed history at the previous scan, 22 at this one. The score rises as the window fills, whether or not the server changes.
- 22 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 63 to 67. That category is still filling its 30-day observation window: 19 days of observed history at the previous scan, 20 at this one. The score rises as the window fills, whether or not the server changes.
- 20 Sept 26 +1
- Tool “osirAppDeploy” rewrote its description, which is the text the model reads security
- Tool “osirAppMoveToOwned” rewrote its description, which is the text the model reads security
- Tool “osirAppStatus” rewrote its description, which is the text the model reads security
- Tool “osirSitePublish” rewrote its description, which is the text the model reads security
- 18 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 50 to 53. That category is still filling its 30-day observation window: 15 days of observed history at the previous scan, 16 at this one. The score rises as the window fills, whether or not the server changes.
- 16 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Sept 26 0
- Tool “changeVpsPaymentTerm” rewrote its description, which is the text the model reads security
- Tool “deleteSshKey” rewrote its description, which is the text the model reads security
- 13 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.
- 11 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 24 Sept 2026 · Probed https://be.osir.com/mcp/http
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=be.osir.com | CN=YE2,O=Let's Encrypt,C=US | 15 Aug 2026 | 13 Nov 2026 | ECDSA 256 | ECDSA-SHA384 | 6e7a28cc9e2e81b0b48372f6ba4660b2201 |
| SANs: be.osir.com | ||||||
| CN=YE2,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 4df3b15dd6c0784c507cd37b58e6f115 |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC secure
Validation of be.osir.com. — Secure
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| osir.com. | present | 46538 | 13 | Verified |
| be.osir.com. | Verified address RRset verified with the apex keys |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=63072000 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://be.osir.com/mcp/http | Verified | 200 | |
| http (plaintext) | http://be.osir.com/mcp/http | HTTPS enforced | 301 | https://be.osir.com/mcp/http |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
addPrefixToDomain ~118
addPrefixToDomain: Generate domain suggestions by adding prefixes to a base name.
| Name | Type | Req | Description |
|---|---|---|---|
| lang | string | – | Language code; default "eng". |
| maxResults | integer | – | Maximum suggestions to return; default 20. |
| name | string | yes | Base name to prefix, e.g. "mycompany". |
| tlds | string | – | Comma-separated TLDs without leading dots, e.g. "com,net". |
| vocabulary | string | – | Prefix vocabulary: "@prefixes" or a custom comma-separated list. |
No output schema declared.
No examples provided.
addSshKey ~172
addSshKey: Store an SSH public key on your account so it can be injected into VPS installs. Idempotent: storing a key you already have returns the existing one instead of creating a duplicate, so it is safe to call before every order. Returns the key id to pass to orderVps or buildVpsInstance. Requires authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | A label for the key, e.g. 'laptop'. |
| publicKey | string | yes | The full single-line OpenSSH public key, e.g. 'ssh-ed25519 AAAA... user@host'. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
addSuffixToDomain ~120
addSuffixToDomain: Generate domain suggestions by adding suffixes to a base name.
| Name | Type | Req | Description |
|---|---|---|---|
| lang | string | – | Language code; default "eng". |
| maxResults | integer | – | Maximum suggestions to return; default 20. |
| name | string | yes | Base name to suffix, e.g. "mycompany". |
| tlds | string | – | Comma-separated TLDs without leading dots, e.g. "com,net". |
| vocabulary | string | – | Suffix vocabulary: "@suffixes" or a custom comma-separated list. |
No output schema declared.
No examples provided.
buildVpsInstance ~287
buildVpsInstance: Stage an operating system install (or reinstall) on a VPS instance. DESTRUCTIVE: ERASES ALL DATA on the server, including any deployed application, and cannot be undone. The install is asynchronous; afterwards poll getVpsInstanceDetails until buildState is COMPLETE. Requires authentication. Returns an actionId: present the summary to the user, then call executeConfirmedAction with the actionId if they approve.
| Name | Type | Req | Description |
|---|---|---|---|
| hostname | string | – | Hostname for the rebuilt server; defaults to the instance's current hostname. |
| instanceId | string | yes | VPS instance id from listMyVpsInstances. |
| operatingSystemId | integer | yes | Integer OS template id from listVpsOsTemplates, resolved with this same instanceId. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
| sshKeyIds | array | – | Integer SSH key ids from listMySshKeys, injected during install; without one you may not be able to log in. |
| swap | number | – | Swap size: 256, 512, or 768 (MB), or 1, 1.5, 2, 3, 4, 5, 6, or 8 (GB). |
No output schema declared.
No examples provided.
bulkDomainSuggestions ~173
bulkDomainSuggestions: Generate domain suggestions for 1-10 keywords across 1-6 TLDs (hard cap), grouped by originating keyword. Typical flow: call listCategorizedTlds first to pick 3-6 TLDs, then this tool. Per-suggestion availability may be "available", "taken", or "unknown"; confirm "unknown" or premium-TLD names with checkDomainAvailability before recommending.
| Name | Type | Req | Description |
|---|---|---|---|
| keywords | array | yes | 1-10 keywords describing the project. |
| lang | string | – | Language code; default "eng". |
| maxResults | integer | – | Maximum suggestions per keyword; default 20. |
| tlds | array | yes | 1-6 TLDs without leading dots (use "tech", not ".tech"), chosen from listCategorizedTlds. |
No output schema declared.
No examples provided.
cancelTransfer ~119
cancelTransfer: Stage cancellation of a pending domain transfer. DESTRUCTIVE and irreversible once executed. Requires authentication. Returns an actionId; present the summary to the user, then call executeConfirmedAction with the actionId if they approve.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Fully qualified domain name whose pending transfer to cancel, e.g. 'example.com'. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
changeVpsPaymentTerm ~165
changeVpsPaymentTerm: Stage a change of the payment term (billing cycle) for a VPS instance. Affects what you are billed. Requires authentication. Returns an actionId; present the summary to the user, then call executeConfirmedAction with the actionId if they approve.
| Name | Type | Req | Description |
|---|---|---|---|
| instanceId | string | yes | VPS instance id from listMyVpsInstances. |
| paymentTerm | string | yes | New billing cycle: 'MONTHLY', 'SEMI_ANNUAL', 'ANNUAL', 'BIENNIAL', or 'TRIENNIAL'. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
checkDeviceLoginStatus ~91
checkDeviceLoginStatus: Poll for device login completion. Call this after loginWithDevice() once you have opened the verification URL and signed in. Required: deviceCode (the device_code returned by loginWithDevice). On success returns a sessionKey; pass it as the sessionKey argument on every subsequent authenticated tool call.
| Name | Type | Req | Description |
|---|---|---|---|
| deviceCode | string | yes | The device_code value returned by loginWithDevice. |
| Name | Type | Req | Description |
|---|---|---|---|
| expiresIn | integer | – | – |
| message | string | – | – |
| sessionKey | string | – | – |
| status | string | – | – |
| success | boolean | – | – |
| tokenType | string | – | – |
No examples provided.
checkDomainAvailability ~116
checkDomainAvailability: Check if a domain name is available for registration, with price. No authentication required; anonymous callers get list pricing, authenticated callers get their account pricing. Required: domain (e.g., 'example.com')
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Fully qualified domain name to check, like "example.com", without scheme. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
| Name | Type | Req | Description |
|---|---|---|---|
| available | boolean | – | – |
| currency | string | – | – |
| domain | string | – | – |
| isPremium | boolean | – | – |
| message | string | – | – |
| price | number | – | – |
No examples provided.
checkHostAvailability ~104
checkHostAvailability: Check if a host/glue record name is available for creation. Requires authentication. Returns whether the hostname is free; call before createHost.
| Name | Type | Req | Description |
|---|---|---|---|
| hostname | string | yes | Fully qualified host name to check, e.g. 'ns1.example.com'. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
checkKeywordAvailability ~120
checkKeywordAvailability: Check keyword availability across all supported TLDs and registries with detailed per-domain results. Use checkKeywordAvailabilitySummary instead when you only need counts; it is faster.
| Name | Type | Req | Description |
|---|---|---|---|
| keyword | string | yes | Keyword to check, without a TLD, e.g. "example". |
| registries | string | – | Comma-separated registry filter, e.g. "verisign,pir,id,centralnic". |
| tlds | string | – | Comma-separated TLDs without leading dots, e.g. "com,net". |
No output schema declared.
No examples provided.
checkKeywordAvailabilitySummary ~110
checkKeywordAvailabilitySummary: Check keyword availability across TLDs and registries. Summary statistics only (no per-domain results), faster than checkKeywordAvailability.
| Name | Type | Req | Description |
|---|---|---|---|
| keyword | string | yes | Keyword to check, without a TLD, e.g. "example". |
| registries | string | – | Comma-separated registry filter, e.g. "verisign,pir". |
| tlds | string | – | Comma-separated TLDs without leading dots, e.g. "com,net". |
No output schema declared.
No examples provided.
countMyVpsInstances ~74
countMyVpsInstances: Get the total count of VPS instances owned by the authenticated user. Requires authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
createAccount ~326
createAccount: Create a new OSIR customer account; step 1 of onboarding, no authentication required. The contact must be the PRINCIPAL's real ICANN registrant contact (the human or business the account is for), never the AI agent itself. Sends a verification email; complete via verifyAccount with the emailed code. While PENDING_VERIFICATION the account can search, quote and fund; billable actions need ACTIVE. Calling again for a PENDING account re-sends the verification email.
| Name | Type | Req | Description |
|---|---|---|---|
| acceptedTerms | boolean | yes | Must be true; requires the principal's actual consent to the OSIR terms of service. |
| accountType | string | yes | Account type: INDIVIDUAL or ORGANIZATION. |
| agentName | string | – | Name of the AI agent acting for the principal, recorded for the audit trail. |
| agentVendor | string | – | Vendor of the AI agent acting for the principal, recorded for the audit trail. |
| contact | object | yes | The principal's real ICANN registrant contact (firstName, lastName, email, phone, street1, city, country), never the AI agent itself. |
| string | yes | Account login email; valid mailbox that receives the verification code. | |
| password | string | – | Optional account password; if omitted the account is agent-managed until a password is set. |
| principalReference | string | – | Principal's own reference identifying who the agent acted for, recorded for the audit trail. |
| termsVersion | string | yes | Version of the OSIR terms the principal accepted, e.g. '2026-09'. |
| Name | Type | Req | Description |
|---|---|---|---|
| accountId | string | – | – |
| contactId | string | – | – |
| nextSteps | array | – | – |
| status | string | – | – |
| verification | object | – | – |
No examples provided.
createContact ~245
createContact: Create a new contact for use with domain registrations. Requires authentication. Returns the created contact including its id for assignment to domains.
| Name | Type | Req | Description |
|---|---|---|---|
| city | string | yes | City name. |
| country | string | yes | Country as a 2-letter ISO 3166-1 alpha-2 code, e.g. 'US'. |
| string | yes | Contact's email address. | |
| firstName | string | yes | Contact's first name. |
| lastName | string | yes | Contact's last name. |
| organization | string | – | Organization or company name, if any. |
| phone | string | yes | Phone number in '+CC.number' format, e.g. '+1.5551234567'. |
| postalCode | string | yes | Postal or ZIP code. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
| state | string | – | State, province, or region, if applicable. |
| street1 | string | yes | First street address line. |
| street2 | string | – | Second street address line, if needed. |
No output schema declared.
No examples provided.
createDnsRecord ~254
createDnsRecord: Create a new DNS record for a domain. Requires authentication. For newly registered domains the zone is initialized automatically if missing. Returns the created record including its id for later updates or deletion.
| Name | Type | Req | Description |
|---|---|---|---|
| content | string | yes | Record value, e.g. an IPv4 dotted-quad or IPv6 address for A/AAAA, a hostname for CNAME/MX/NS, or text for TXT. |
| domain | string | yes | Fully qualified domain name the record belongs to, e.g. 'example.com'. |
| name | string | yes | Record name relative to the zone, e.g. 'www', 'mail', or '@' for the apex. |
| priority | integer | – | Priority for MX/SRV records only; defaults to 0 when omitted. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
| ttl | integer | – | Time to live in seconds; defaults to 3600 when omitted. |
| type | string | yes | Record type: A, AAAA, CNAME, MX, TXT, NS, SRV, CAA. |
No output schema declared.
No examples provided.
createHost ~158
createHost: Create a new host/glue record, e.g. for custom nameservers like 'ns1.example.com'. Requires authentication. Check the name first with checkHostAvailability. Returns the created host record.
| Name | Type | Req | Description |
|---|---|---|---|
| hostname | string | yes | Fully qualified host name to create, e.g. 'ns1.example.com'. |
| ipAddresses | array | yes | IP addresses for the host, IPv4 dotted-quad or IPv6, e.g. ['192.0.2.1', '198.51.100.1']. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
createMailbox ~270
createMailbox: Stage creation of a paid mailbox on a mail-enabled domain. BILLABLE: deducts from account balance; get a quote with getMailboxQuote and confirm the price with the user first. Requires authentication. Returns an actionId: present the summary to the user, then call executeConfirmedAction with the actionId if they approve. The result of the confirmed action contains the generated password EXACTLY ONCE; it can never be retrieved again, so show it to the user immediately (they can change it later with setMailboxPassword). Also share the client settings from the result (IMAP/SMTP/webmail).
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | An ACTIVE mail-enabled domain from listMailDomains. |
| localPart | string | yes | The part of the address before the @; the full mailbox address becomes 'localPart@domain', e.g. 'user@example.com'. |
| packageId | string | yes | Mailbox plan id from listMailPlans; there is no default. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
| term | string | – | Payment term: 'MONTHLY' or 'ANNUAL' (default ANNUAL). |
No output schema declared.
No examples provided.
createPaymentSession ~173
createPaymentSession: Stage a Stripe checkout session to add funds to the account balance. Requires authentication. Returns an actionId; present the summary to the user, then call executeConfirmedAction with the actionId if they approve. The executed result includes checkoutUrl (hand it to the human to pay) and expiresAt; then poll getPaymentTransactions until the balance credit appears.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | Amount to add to the balance, in the account currency as a decimal (e.g. 25.00). |
| currency | string | – | 3-letter ISO 4217 currency code, default USD. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
deleteContact ~120
deleteContact: Stage deletion of a contact. DESTRUCTIVE; fails if the contact is assigned to active domains. Requires authentication. Returns an actionId; present the summary to the user, then call executeConfirmedAction with the actionId if they approve.
| Name | Type | Req | Description |
|---|---|---|---|
| contactId | string | yes | Identifier of the contact to delete, as returned by listContacts. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
deleteDnsRecord ~140
deleteDnsRecord: Stage deletion of a DNS record. DESTRUCTIVE and irreversible once executed. Requires authentication. Returns an actionId; present the summary to the user, then call executeConfirmedAction with the actionId if they approve.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Fully qualified domain name the record belongs to, e.g. 'example.com'. |
| recordId | string | yes | Identifier of the record to delete, as returned by listDnsRecords. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
deleteHost ~119
deleteHost: Stage deletion of a host/glue record. DESTRUCTIVE and irreversible once executed. Requires authentication. Returns an actionId; present the summary to the user, then call executeConfirmedAction with the actionId if they approve.
| Name | Type | Req | Description |
|---|---|---|---|
| hostname | string | yes | Fully qualified host name to delete, e.g. 'ns1.example.com'. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
deleteMailbox ~119
deleteMailbox: Stage deletion of a mailbox. The mailbox stops working immediately and its data is destroyed after a 14-day grace period. Requires authentication. Returns an actionId: present the summary to the user, then call executeConfirmedAction with the actionId if they approve.
| Name | Type | Req | Description |
|---|---|---|---|
| mailboxId | string | yes | Mailbox id from listMailboxes. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
deleteSshKey ~130
deleteSshKey: Stage removal of an SSH key from your account. This does not affect servers already built with it, and the key can simply be added again. Requires authentication. Returns an actionId; present the summary to the user, then call executeConfirmedAction with the actionId if they approve.
| Name | Type | Req | Description |
|---|---|---|---|
| keyId | integer | yes | Integer key id from listMySshKeys. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
deleteVpsInstance ~116
deleteVpsInstance: Stage deletion/cancellation of a VPS instance. DESTRUCTIVE and irreversible. Requires authentication. Returns an actionId: present the summary to the user, then call executeConfirmedAction with the actionId if they approve.
| Name | Type | Req | Description |
|---|---|---|---|
| instanceId | string | yes | VPS instance id from listMyVpsInstances. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
enableMailDomain ~254
enableMailDomain: Enable email hosting on a domain you own. Free; mailboxes are what cost money. If the call fails with a DNS conflict (an existing SPF or MX record), ask the user for explicit consent, then re-call with spfMergeConfirmed=true and/or takeoverConfirmed=true. Requires authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| dnsMode | string | – | 'PDNS_AUTO' (default) publishes all mail DNS records automatically; the domain must use our nameservers. 'EXTERNAL_MANUAL' returns the DNS records for you to publish at your DNS provider, and the dom… |
| domain | string | yes | The domain to enable email hosting on, e.g. 'example.com'. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
| spfMergeConfirmed | boolean | – | Set true, only with the user's explicit consent, to replace a foreign SPF record. |
| takeoverConfirmed | boolean | – | Set true, only with the user's explicit consent, to repoint a foreign MX record; this moves their live email. |
No output schema declared.
No examples provided.
executeConfirmedAction ~97
executeConfirmedAction: Execute a previously staged destructive or financial action after user approval. The action expires after 5 minutes and can only be executed once.
| Name | Type | Req | Description |
|---|---|---|---|
| actionId | string | yes | The action UUID from the staging tool's response. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
generateDomainSuggestions ~138
generateDomainSuggestions: Generate domain name suggestions based on keywords. This is the preferred suggestion tool for a single keyword; use it over suggestAlternatives. Returns suggested names with availability.
| Name | Type | Req | Description |
|---|---|---|---|
| lang | string | – | Language code; default "eng". |
| maxResults | integer | – | Maximum suggestions to return; default 20. |
| name | string | yes | Keyword or base name to build suggestions from, e.g. "mycompany". |
| tlds | string | – | Comma-separated TLDs without leading dots, e.g. "com,net". |
| useNumbers | boolean | – | Allow digits in generated suggestions (true/false). |
No output schema declared.
No examples provided.
getAccountBalance ~67
getAccountBalance: Get the current account balance for the authenticated user. Requires authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
| Name | Type | Req | Description |
|---|---|---|---|
| balance | string | – | – |
| currency | string | – | – |
| message | string | – | – |
| success | boolean | – | – |
No examples provided.
getAccountSummary ~80
getAccountSummary: Get a comprehensive summary of the user's account: profile, balance, domain count, VPS count, and pending transfers. Requires authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
getAuthStatus ~80
getAuthStatus: Check whether the current session is authenticated. Returns authenticated status and token expiry. Optional: sessionKey (from checkDeviceLoginStatus).
| Name | Type | Req | Description |
|---|---|---|---|
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
| Name | Type | Req | Description |
|---|---|---|---|
| authenticated | boolean | – | – |
| tokenExpiresIn | integer | – | – |
| username | string | – | – |
No examples provided.
getContact ~103
getContact: Get detailed information about a specific contact. Requires authentication. Get the contactId from listContacts. Returns name, email, phone, organization, and address.
| Name | Type | Req | Description |
|---|---|---|---|
| contactId | string | yes | Identifier of the contact to fetch, as returned by listContacts. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
getContactsForDomain ~107
getContactsForDomain: Get all contacts (registrant, admin, tech, billing) assigned to a domain. Requires authentication. Returns the contact assigned to each role.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Fully qualified domain name whose contacts to fetch, e.g. 'example.com'. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
getDedicatedServerCatalog ~30
getDedicatedServerCatalog: Get all available dedicated server configurations with pricing and specifications. No authentication required.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
getDnsRecord ~134
getDnsRecord: Get details of a specific DNS record by id. Requires authentication. Get the recordId from listDnsRecords. Returns the record's name, type, content, TTL, and priority.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Fully qualified domain name the record belongs to, e.g. 'example.com'. |
| recordId | string | yes | Identifier of the record to fetch, as returned by listDnsRecords. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
getDomainAuditTrail ~98
getDomainAuditTrail: Get the audit trail (history of all changes) for a specific domain. Requires authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Fully qualified domain name to fetch the audit trail for (e.g. 'example.com'). |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
getDomainExtensions ~31
getDomainExtensions: Get all available domain extensions (TLDs) with pricing information. No authentication required.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
getDomainInfo ~135
getDomainInfo: Get registry (EPP) state plus account settings for one domain: status, nameservers, lock state, auto-renew, privacy, creation/expiry dates, premium/expired/redemption info. Dates are null while a registration is still pending at the registry; autoRenew is omitted for transferredOut domains.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Fully qualified domain name, like "example.com", without scheme. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
getDomainPricing ~96
getDomainPricing: Get pricing for domain extensions from the product catalog. Requires authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| extension | string | – | Domain extension to filter by, without the leading dot (e.g. 'com', 'net', 'org'). |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | – | – |
| pricing | array | – | – |
| success | boolean | – | – |
No examples provided.
getHostingBundle ~112
getHostingBundle: Get the hosting options and exact prices for a specific domain: recommended VPS packages (cheapest first), email plans, web forwarding, and app/site deployment. No authentication required. Call this ONCE after a successful availability check or registration to make a concise hosting offer; do not repeat the offer in the same conversation. Prices are display prices; the authoritative amount is computed at purchase.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Fully qualified domain name to get hosting options for (e.g. 'example.com'). |
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | – | – |
| nextSteps | array | – | – |
| options | object | – | – |
No examples provided.
getHostsForDomain ~102
getHostsForDomain: List all host/glue records associated with a domain. Requires authentication. Returns each host name and its IP addresses.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | Fully qualified domain name whose host records to list, e.g. 'example.com'. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
getInvoiceDetails ~89
getInvoiceDetails: Get detailed information about a specific invoice including line items. Requires authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| invoiceId | string | yes | The identifier of the invoice to fetch, as returned by listInvoices. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
getInvoiceStatistics ~71
getInvoiceStatistics: Get summary statistics of invoices: total paid, pending, overdue amounts. Requires authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
getMailboxQuote ~121
getMailboxQuote: Get a display-only price quote for a mailbox plan. The backend re-derives the authoritative price at purchase. Requires authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| packageId | string | yes | Mailbox plan id from listMailPlans. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
| term | string | – | Payment term: 'MONTHLY' or 'ANNUAL' (default ANNUAL). |
| Name | Type | Req | Description |
|---|---|---|---|
| currency | string | – | – |
| message | string | – | – |
| packageId | string | – | – |
| packageName | string | – | – |
| priceCents | integer | – | – |
| quotaBytes | integer | – | – |
| success | boolean | – | – |
| term | string | – | – |
No examples provided.
getMailboxUsage ~75
getMailboxUsage: Get disk usage per mailbox in bytes, for quota display alongside the plan's quotaBytes. Requires authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
getMailDnsRecords ~105
getMailDnsRecords: Get the DNS records a mail domain needs (MX, SPF, DKIM, ...), for customers managing DNS externally. Requires authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| domain | string | yes | A mail-enabled domain from listMailDomains, e.g. 'example.com'. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
getMyAuditLogs ~97
getMyAuditLogs: Get recent audit logs for the authenticated user across all services. Requires authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| page | integer | – | Zero-based page number for pagination. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
| size | integer | – | Number of log entries per page. |
No output schema declared.
No examples provided.
getMyProfile ~80
getMyProfile: Get the authenticated user's profile and account information including name, email, organization, balance, and domain/VPS counts. Requires authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
No output schema declared.
No examples provided.
getPaymentTransactions ~91
getPaymentTransactions: Get payment transaction history for the authenticated user. Requires authentication.
| Name | Type | Req | Description |
|---|---|---|---|
| page | integer | – | Zero-based page number for pagination. |
| sessionKey | string | – | Session key (osk_...) returned by checkDeviceLoginStatus. Pass it on every call when logged in via the in-chat device flow; omit when connected via OAuth. |
| size | integer | – | Number of transactions per page. |
No output schema declared.
No examples provided.
getProductCatalog ~33
getProductCatalog: Get the complete product catalog including domain extensions, VPS packages, and dedicated servers. No authentication required.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
What is the OSIR Domain Registrar MCP server?
OSIR Domain Registrar is an MCP server listed in the public MCP registry as com.osir/domain-registrar. Register, renew, transfer, and manage domains, DNS, VPS, and email with 105 tools. By OSIR. This page covers its hosted endpoint (https://be.osir.com/mcp/http).
Is the OSIR Domain Registrar MCP server safe to use?
OSIR Domain Registrar scores 79 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the OSIR Domain Registrar MCP server expose?
OSIR Domain Registrar exposes 105 tools: addPrefixToDomain, addSshKey, addSuffixToDomain, buildVpsInstance, bulkDomainSuggestions, and 100 more. Their descriptions and schemas cost roughly 14,266 tokens of context every time the server is loaded.
Does the OSIR Domain Registrar MCP server require authentication?
No. We connected to OSIR Domain Registrar without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the OSIR Domain Registrar MCP server still maintained?
OSIR Domain Registrar is still listed as active in the MCP registry. We last reached this channel on 24 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.