# WhoAPI

> WhoAPI Inc. (founded 2011, Mountain View CA) is a domain-intelligence API company providing WHOIS, domain availability, domain age, domain reputation/score, SSL certificate inspection, email score, email/IP blacklist checks, and website screenshots through a single key-authenticated REST endpoint (api.whoapi.com). Every request is an HTTP GET selecting a task with the `r` parameter and returning gzip-compressed JSON with a numeric `status` and human-readable `status_desc`. WhoAPI publishes no llms.txt of its own; this file is generated by API Evangelist from the provider's public documentation.

## APIs

- [WhoAPI Domain Intelligence API](https://whoapi.com/api-documentation/): Nine tasks selected via `r` — whois, taken, cert, domainscore, domainscore-check, emailscore, emailscore-check, blacklist, screenshot. Auth: `apikey` query parameter. Base: `https://api.whoapi.com/`.

## Specs

- [OpenAPI](https://raw.githubusercontent.com/api-evangelist/whoapi/refs/heads/main/openapi/whoapi-domain-intelligence-api-openapi.yml): Generated by API Evangelist from the published documentation — one operation (`queryWhoAPI`).
- [Tool crosswalk](https://raw.githubusercontent.com/api-evangelist/whoapi/refs/heads/main/mcp/whoapi-tool-crosswalk.yml): The nine real capabilities behind that one operation, and the `r` value each requires.

## Docs

- [API Documentation](https://whoapi.com/api-documentation/)
- [Code Examples](https://whoapi.com/code-examples/) (PHP, JavaScript, Ruby, Python, Objective-C, C#, Java)
- [FAQ](https://whoapi.com/faq/)
- [Supported TLDs](https://whoapi.com/list-of-available-tlds/)
- [Pricing — Whois API](https://whoapi.com/whois-api-pricing/) (each of the seven APIs is priced separately)
- [Sign Up](https://my.whoapi.com/user/signup)
- [Status](https://status.whoapi.com)
- [Terms of Use](https://whoapi.com/terms-of-use/) · [Privacy Policy](https://whoapi.com/privacy-policy/)
- [Contact](https://whoapi.com/contact-us/) — chat widget and support tickets; no published support email.

## SDKs

All WhoAPI client libraries are stale — last released 2015–2016. Prefer a direct HTTP call.

- [Ruby gem `whoapi`](https://rubygems.org/gems/whoapi) — 0.1.0, published 2016-01-18
- [Python `whoapi`](https://pypi.org/project/whoapi/) — 0.1.2, no files on the index (not installable)
- [Go `whoapi-go`](https://github.com/WhoAPI/whoapi-go) — untagged, pinned to a 2015-08-31 commit; includes a CLI
- [R `whoapi`](https://cran.r-project.org/package=whoapi) — 0.1.2, ARCHIVED by CRAN on 2021-02-16

## Conventions

- Auth: private API key as the `apikey` query parameter; one key per account; optional IP whitelisting.
- Errors: returned in-band with HTTP 200 — branch on the numeric `status` (0 = success, 1–42 = documented errors), never on the HTTP code.
- Rate limits: no `429`, no `Retry-After`, no `RateLimit-*` headers. Exhaustion arrives as `status` 16 (per-IP one-minute block), 17/18 (plan and high-usage limits) or 36 (monthly quota).
- Webhooks: the asynchronous `domainscore` and `emailscore` tasks accept a `webhook_url` query parameter; WhoAPI POSTs a JSON **array** of results and retries 5 times (5/15/30/60/60 min). No signature is published.
- No versioning, no pagination, no idempotency-key contract (all tasks are safe GET reads).
- No `/.well-known/` surface at all — security.txt, OIDC/OAuth metadata, api-catalog and A2A agent card all return 404.

## Agent skills

- [Check domain availability](https://raw.githubusercontent.com/api-evangelist/whoapi/refs/heads/main/skills/whoapi-check-domain-availability.md)
- [Look up WHOIS records](https://raw.githubusercontent.com/api-evangelist/whoapi/refs/heads/main/skills/whoapi-whois-lookup.md)
- [Score a domain or email asynchronously](https://raw.githubusercontent.com/api-evangelist/whoapi/refs/heads/main/skills/whoapi-score-domain-with-webhook.md)