
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
@webdevtoday/nc-mcp-server
Advanced tools
MCP server for Namecheap domain registration - check availability, get pricing, and register domains
An MCP (Model Context Protocol) server that provides tools for interacting with the Namecheap domain registration API. Check domain availability, get pricing, and register domains through Claude Desktop or any MCP-compatible client.
This tool uses the Namecheap live API by default and can make REAL purchases that will charge your Namecheap account. Always double-check domain registration commands before confirming purchases.
To use the Namecheap API, your account must meet one of these requirements:
You can run this MCP server using npx without installing it locally:
npx @webdevtoday/nc-mcp-server
Add the following to your Claude Desktop configuration:
{
"mcpServers": {
"namecheap": {
"command": "npx",
"args": ["-y", "@webdevtoday/nc-mcp-server"],
"env": {
"NC_USERNAME": "your_namecheap_username",
"NC_API_KEY": "your_namecheap_api_key",
"NODE_ENV": "production"
}
}
}
}
To find your Claude Desktop configuration:
For domain registration, you'll need to provide registrant contact information. You can do this in two ways:
Environment Variable (Recommended for npx):
Add a REGISTRANT_PROFILE environment variable with JSON data:
{
"mcpServers": {
"namecheap": {
"command": "npx",
"args": ["-y", "@webdevtoday/nc-mcp-server"],
"env": {
"NC_USERNAME": "your_username",
"NC_API_KEY": "your_api_key",
"NODE_ENV": "production",
"REGISTRANT_PROFILE": "{\"firstName\":\"John\",\"lastName\":\"Doe\",\"address1\":\"123 Main St\",\"city\":\"New York\",\"stateProvince\":\"NY\",\"postalCode\":\"10001\",\"country\":\"US\",\"phone\":\"+1.2125551234\",\"email\":\"john@example.com\"}"
}
}
}
}
Local File:
If running locally, create a registrant-profile.json file in your working directory.
curl ifconfig.me
check_domainCheck if a domain is available for registration.
Parameters:
domain (string, required) - The domain name to check (e.g., "example.com")get_tld_pricingGet pricing information for a specific TLD.
Parameters:
tld (string, required) - The top-level domain (e.g., "com", "net", "io")register_domainRegister a new domain name.
Parameters:
domain (string, required) - Domain to registeryears (string, optional) - Registration period (default: "1")nameservers (string, optional) - Comma-separated nameserversconfirmPurchase (string, optional) - Set to "true" to complete purchaseenableWhoisPrivacy (string, optional) - Enable WhoisGuard (default: "true")"Is example123.com available?"
"Check if mydomain.io is taken"
"How much does a .com domain cost?"
"What's the price for .io domains?"
Domain registration is a two-step process for safety:
Step 1 - Preview:
"Register mydomain.com"
Step 2 - Confirm:
"Confirm the purchase"
For testing without real purchases, set NODE_ENV=sandbox:
{
"env": {
"NC_USERNAME": "your_username",
"NC_API_KEY": "your_sandbox_api_key",
"NODE_ENV": "sandbox"
}
}
npm install
npm run build
NC_USERNAME=your_username NC_API_KEY=your_key node dist/index.js
MIT
For issues or questions, please open an issue on GitHub.
Made with ❤️ by Jason Brashear (WebDevToday)
FAQs
MCP server for Namecheap domain registration - check availability, get pricing, and register domains
We found that @webdevtoday/nc-mcp-server demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.