io.github.lanternrow/namecheap-api-mcp

NPM · NAMECHEAP-API-MCP · SCANNED AUG 3

Namecheap API — domains, DNS, contacts, registrar lock, SSL listing, and pricing.

Available components

+20 this week 66 66 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security78

No malware found by supply-chain analysis.Pass
CVE check failed: a known medium-severity CVE affects fast-xml-parser 4.5.7, a direct dependency. A fixed version is available. View diagnostics → Fail
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (97 of 101), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency45

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 35 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability77

AI-judged instruction clarity (excellent).Pass
Tool/resource definitions use about 1054 tokens (~65/item across 16 items; 16 tools + 0 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management23

Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage98

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
93% of tool parameters carry a description.Partial

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · namecheap-api-mcp

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add lanternrow-namecheap-api-mcp -- npx -y namecheap-api-mcp

# add to Codex CLI

codex mcp add lanternrow-namecheap-api-mcp -- npx -y namecheap-api-mcp

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "lanternrow-namecheap-api-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "namecheap-api-mcp"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add lanternrow-namecheap-api-mcp --command npx --arg -y --arg namecheap-api-mcp

# ~/.hermes/config.yaml

mcp_servers:
  lanternrow-namecheap-api-mcp:
    command: "npx"
    args: ["-y", "namecheap-api-mcp"]

// mcp.json

{
  "mcpServers": {
    "lanternrow-namecheap-api-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "namecheap-api-mcp"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

3 Aug 26 +3
- Stability: unverified → 0.23 ▲ functional
2 Aug 26 +42
- CVE-2026-41650 affects this package: medium ▼ security
- Known CVEs: unverified → fail ▼ security
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Malware scan: unverified → pass ▲ security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- Tool coverage: 100 → unverified ▼ functional
- Security disclosure: fail → unverified ▼ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Schema quality: unverified → excellent ▲ functional
- License: unverified → pass ▲ functional
- First check of Schema quality: unverified functional
- Licence: MIT functional
31 Jul 26 −25
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
27 Jul 26 46

First indexed and scored.

Show 2 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Vulnerabilities 1 finding

ID	CVE	Severity	Vector	Fix available
GHSA-gh4j-gqv2-49f6	CVE-2026-41650	medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	yes

Dependencies 97 packages

97 packages in the resolved dependency tree · 97 deprecated · 29 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 16 exposed · ~1,054 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

check_connection ~41

Verify the Namecheap API connection and credentials. Returns the account balance summary — a lightweight call that confirms the API user, key, and IP whitelist are all working.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

check_domains ~48

Check availability (and premium pricing) for one or more domains. Max 50 per call.

Input Output Examples

Name	Type	Req	Description
domains	array	yes	Domain names to check, e.g. ['foo.com','bar.io']

No output schema declared.

No examples provided.

get_dns_hosts ~51

Get all DNS host records (A, AAAA, CNAME, MX, TXT, URL, etc.) for a domain.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Full domain name, e.g. example.com

No output schema declared.

No examples provided.

get_domain_contacts ~43

Get the Registrant, Tech, Admin, and AuxBilling contact details for a domain.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Full domain name, e.g. example.com

No output schema declared.

No examples provided.

get_domain_info ~49

Get detailed info for one domain: status, created/expiry dates, WhoisGuard, DNS provider, and modification rights.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Full domain name, e.g. example.com

No output schema declared.

No examples provided.

get_email_forwarding ~41

Get email forwarding settings (mailbox → forward-to) for a domain.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Full domain name, e.g. example.com

No output schema declared.

No examples provided.

get_nameservers ~44

Get the nameservers associated with a domain, and whether it uses Namecheap's default DNS.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Full domain name, e.g. example.com

No output schema declared.

No examples provided.

get_pricing ~129

Get Namecheap pricing for a product type (e.g. DOMAIN register/renew/transfer). Cache results — this is a heavy endpoint.

Input Output Examples

Name	Type	Req	Description
action_name	string	—	e.g. REGISTER, RENEW, TRANSFER, REACTIVATE.
product_category	string	—	e.g. DOMAINS, REGISTER, RENEW, TRANSFER.
product_name	string	—	e.g. com, net, io — a specific TLD.
product_type	string	—	ProductType, e.g. DOMAIN, SSLCERTIFICATE, WHOISGUARD.

No output schema declared.

No examples provided.

get_registrar_lock ~35

Get the registrar lock status for a domain.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Full domain name, e.g. example.com

No output schema declared.

No examples provided.

list_domains ~108

List domains in the account, with creation/expiry dates, lock status, auto-renew, and WhoisGuard status. Supports paging and search.

Input Output Examples

Name	Type	Req	Description
list_type	string	—	Filter by status. Default ALL.
page	integer	—	Page number (default 1).
page_size	integer	—	Domains per page, 10-100 (default 20).
search_term	string	—	Keyword to filter the domain list.
sort_by	string	—	Sort order.

No output schema declared.

No examples provided.

list_ssl_certificates ~76

List SSL certificates in the account, with type, host name, status, and expiry.

Input Output Examples

Name	Type	Req	Description
list_type	string	—	ALL, Processing, Active, Completed, Cancelled, etc. Default ALL.
page	integer	—	—
page_size	integer	—	—
search_term	string	—	Keyword filter.

No output schema declared.

No examples provided.

set_custom_nameservers ~86

Point a domain at custom nameservers. NOTE: Namecheap host records, URL/email forwarding stop working while custom nameservers are in use.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Full domain name, e.g. example.com
nameservers	array	yes	Nameserver hostnames, e.g. ['dns1.p01.nsone.net','dns2.p01.nsone.net']

No output schema declared.

No examples provided.

set_default_dns ~51

Switch a domain to Namecheap's default (BasicDNS) nameservers. Required for Namecheap host records, URL/email forwarding.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Full domain name, e.g. example.com

No output schema declared.

No examples provided.

set_dns_hosts ~127

Replace ALL DNS host records for a domain. WARNING: this is destructive — Namecheap deletes any record not included here, so you must pass the COMPLETE desired record set (call get_dns_hosts first, merge your changes, then send everything). Switches the domain to Namecheap DNS if needed.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Full domain name, e.g. example.com
email_type	string	—	Email routing mode. Set MX when including MX records; leave unset otherwise.
records	array	yes	The COMPLETE set of host records to apply. Omitted records are deleted.

No output schema declared.

No examples provided.

set_email_forwarding ~65

Set email forwarding rules for a domain. Replaces the full forwarding set (pass all rules you want to keep).

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Full domain name, e.g. example.com
forwards	array	yes	The complete set of mailbox → forward-to rules.

No output schema declared.

No examples provided.

set_registrar_lock ~60

Lock or unlock a domain at the registrar (theft protection). Unlock before initiating an outbound transfer.

Input Output Examples

Name	Type	Req	Description
action	string	—	LOCK or UNLOCK. Default LOCK.
domain	string	yes	Full domain name, e.g. example.com

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug