
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@domainkits/sdk
Advanced tools
TypeScript client for the DomainKits REST API. Search expiring, newly registered, aged, active, deleted and marketplace domains, plus WHOIS, DNS, Certificate Transparency and trends.
TypeScript client for the DomainKits REST API. Tracks API version 0.3.5.
This is the official TypeScript SDK for the DomainKits API, published and maintained by the DomainKits team. DomainKits is built and operated by Lyalpha GmbH, with domain data and infrastructure provided by ABTdomain, our domain intelligence and data aggregation platform. This repository is hosted under the ABTdomain GitHub organisation. Learn more about the relationship at domainkits.com/about.
DomainKits is one API with a shared key across every endpoint. This SDK covers all of them (seven domain search types, WHOIS, DNS, reverse nameserver, Certificate Transparency, safety, trends and bulk download) with typed parameters and responses, automatic paging, and structured quota errors.
The REST API is for Premium and Platinum accounts; unauthenticated requests are rejected with 401. Keys start with dk_ and come from domainkits.com.
If you want a no-key way to explore the same data from an AI client, use @domainkits/mcp instead, which has a guest tier.
npm install @domainkits/sdk
import { DomainKits } from '@domainkits/sdk';
const dk = new DomainKits(process.env.DOMAINKITS_API_KEY!);
const { data, total } = await dk.nrds.list({
query: 'shop',
tld: 'com',
create_date_start: '2026-07-10',
create_date_end: '2026-07-10',
has_number: false,
has_hyphen: false,
});
console.log(`${total} matches`);
for (const d of data) {
console.log(d.domain, d.created, d.expires);
}
A single request returns at most 500 results. paginate walks the whole result set for you:
for await (const domain of dk.nrds.paginate({ query: 'shop', tld: 'com' })) {
console.log(domain.domain);
}
It stops when the result set is exhausted. Break out of the loop whenever you have enough, no further requests are made.
export pulls up to 50,000 rows as CSV in one request:
const csv = await dk.expired.export({ tld: 'com', status: 'pending_delete' });
This runs on a separate, much smaller quota with a monthly cap; call usage() for your account's numbers. It is for occasional bulk pulls, not for a scheduled job. Export columns match the endpoint's JSON fields.
50,000 is a cap, not a promise of completeness. Browsing .com matched 4,847,613 expiring domains on 27 July 2026, so an unfiltered export returns the first 50,000. Narrow the query if you need the result set to fit.
| Method | What it searches |
|---|---|
dk.expired | Domains in the deletion cycle: expired, redemption, pending delete |
dk.nrds | Newly registered domains, last 60 days, from the zone files |
dk.nrdsLive | Newly registered domains, last 3 days, from Certificate Transparency |
dk.aged | Domains with 5 to 20+ years of registration history |
dk.active | Currently registered domains |
dk.deleted | Dropped domains |
dk.market | Domains listed for sale on marketplaces |
Each has list, paginate and export, and its own parameter and result types: an expired result carries status, an NRD result carries expires, a market result carries platform.
Numeric ranges are _min/_max pairs (length_min/length_max, age_min/age_max), date ranges are _start/_end pairs (create_date_start/create_date_end, found_date_start/found_date_end); either side may be omitted, equal bounds select an exact value.
Composition filters (has_number, all_number, all_alpha, has_hyphen, has_sale) accept only true/false. Unknown parameter names and values return 400 with the supported values in the error message.
The full parameter and field reference per endpoint is the OpenAPI spec; the TypeScript types mirror it.
position defaults to contain everywhere except market, which defaults to start; pass contain there to match anywhere in the name.
Two registration feeds, read from different places, so they answer different questions.
nrds reads the zone files and holds 60 days. It is the complete view for the generic TLDs and the one to use for anything that looks back more than a few days.
nrdsLive holds the last 3 days with live updates, so it surfaces names registered hours ago that nrds cannot show yet, and it also reaches .ai and .io. Same parameter vocabulary; tld takes a single value there, rows never carry tld_count, and the endpoint runs on a smaller per-minute quota than nrds.
The two feeds also date their rows differently, and deliberately so. nrdsLive returns a full timestamp, 2026-08-17T18:42:29Z, because on a feed this fresh the hour a name was registered is the answer you came for. nrds returns a plain date, 2026-08-17, because across a 60 day window the hour has stopped meaning anything. Both are typed string; parse accordingly.
await dk.whois('example.com');
await dk.dns('example.com');
await dk.safety('example.com');
await dk.nsReverse({ ns: 'ns1.example.com', tld: 'com' });
await dk.tldCheck({ prefix: 'yourbrand' });
await dk.typosquat({ domain: 'example.com' });
await dk.ipLookup('8.8.8.8');
await dk.registrar('godaddy');
await dk.statusGuide('clientHold');
await dk.monitorChanges({ tld: 'com', reason: 'domain_transfer' });
await dk.ctSubdomains('example.com');
await dk.ctCerts({ domain: 'example.com', after: '2026-08-01', scope: 'all' });
await dk.ctSearch({ keyword: 'example', field: 'sld', sort: 'newest' });
await dk.tldTrends('newly', { tld: 'com' });
await dk.keywordTrends('hot');
await dk.usage();
await dk.searchStatus();
ctSubdomains, ctCerts and ctSearch share after, before, scope, sort, issuer, cert_type and limit.
scope decides how far back the read goes. valid covers the running half year and answers quickly; all reaches back to 2020 and costs more time. after and before take YYYY-MM-DD and filter on log time, so a date window is a better way to ask for recent activity than relying on the result order.
field on ctSearch decides where the keyword has to appear. reg matches the registered domain and returns every hostname under it, so one busy site can fill the result set. sld matches the subdomain label only, which skips those and leaves the cases where the keyword sits in front of an unrelated registration. domain matches anywhere in the full hostname.
san_list on a ctCerts record is one string, not an array: the subject alternative names joined by |, as in *.example.com|example.com. Split on | to get the names.
gTLDs only for the zone based domain search endpoints. The index covers generic TLDs: .com, .net, .org, .info, .biz, .xyz, .online, .site, .top, .club, .live, .app, .dev and others. Country-code TLDs are not indexed: a query for .de, .co or .us returns an empty result set, not an error. nrdsLive is the exception and also carries .ai and .io.
whois, dns, safety, ipLookup and the Certificate Transparency endpoints work on any domain, ccTLDs included.
No PII. Responses contain no personal data. WHOIS results are limited to registrar, dates, status codes and nameservers; registrant names, emails, addresses and phone numbers are not returned.
import { RateLimitError, AuthError, DomainKitsError } from '@domainkits/sdk';
try {
await dk.expired.export({ tld: 'com' });
} catch (error) {
if (error instanceof RateLimitError) {
console.log(`Quota exhausted. Retry in ${error.retryAfterMs}ms`);
console.log(error.rateLimit);
} else if (error instanceof AuthError) {
console.log('Key rejected, check your plan tier');
} else if (error instanceof DomainKitsError) {
console.log(error.status, error.message);
}
}
Every error carries the x-ratelimit-limit, x-ratelimit-remaining and x-ratelimit-reset values as a parsed rateLimit object. RateLimitError.retryAfterMs tells you how long until the window resets.
429 and 5xx responses are retried automatically, twice by default, waiting until the rate-limit window resets when that is under two minutes. Set maxRetries: 0 to handle it yourself.
const dk = new DomainKits({
apiKey: process.env.DOMAINKITS_API_KEY!,
timeoutMs: 60_000,
maxRetries: 2,
baseUrl: 'https://premium-api.domainkits.com/api/v1',
});
Call usage() for the live picture on your account: every endpoint reports its own per-minute, daily and monthly allowance alongside what you have already spent.
Daily quotas reset at 00:00 UTC, monthly quotas on the 1st. Current limits: domainkits.com/dev/api-docs.
FAQs
TypeScript client for the DomainKits REST API. Search expiring, newly registered, aged, active, deleted and marketplace domains, plus WHOIS, DNS, Certificate Transparency and trends.
The npm package @domainkits/sdk receives a total of 37 weekly downloads. As such, @domainkits/sdk popularity was classified as not popular.
We found that @domainkits/sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.