Skip to content

Own It

by modernmustardseed.com · remote · no sign-in to list tools · v1.0.0 · published by com.modernmustardseed

Maps who controls a business web presence (domain, DNS, hosting, site) and the cost of leaving.

Changes · 2
CompareRegistry entry

3 tools: 2 change things and 1 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http own-it https://mcp.modernmustardseed.com/own-it

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

3 tools

Changes things 2Claude Code: ask
  • audit_ownershipMap who controls each layer of a business’s web presence and how hard each would be to leave, from public data only: domain registration over RDAP (registrar, registrant when publi…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Map who controls each layer of a business’s web presence and how hard each would be to leave, from public data only: domain registration over RDAP (registrar, registrant when public, EPP status and transfer locks, expiry, DNSSEC), DNS host from the nameservers, website platform from public fingerprints (Wix, Squarespace, Shopify, WordPress, Webflow, GoDaddy Website Builder, Duda, HighLevel, Framer, agency and franchise builders and others), email provider from MX and SPF, analytics and ad tag IDs present in the page (GA4, Tag Manager, Google Ads, Meta Pixel and others), call tracking, embedded booking, CRM, chat and email signup tools, and profile links including a Google Business Profile when supplied. Returns an ownership map with, per layer, who controls it, a portability rating, a plain-words reason, evidence, sources and the first step to take control, plus a 0 to 100 portability score. It cannot see inside any account, so ownership of a Google Business Profile or tag account is reported as a check to make, never guessed. Results are cached for 24 hours.

    Annotations the server declares

    • title: Audit who controls a business online
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • check_domain_controlCheck who controls a domain, its DNS and its email, without reading the website: registrar and IANA id, registrant when the public record shows one, EPP status codes and transfer l…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Check who controls a domain, its DNS and its email, without reading the website: registrar and IANA id, registrant when the public record shows one, EPP status codes and transfer locks, registration and expiry dates, DNSSEC, nameservers and DNS host, and mail provider from MX and SPF. Returns a 0 to 100 control score, each layer with a reason and the first step to take control, and the raw registration facts. Shares the 24 hour cache with audit_ownership.

    Annotations the server declares

    • title: Check domain, DNS and email control
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Only reads 1Claude Code: allow
  • list_fingerprintsList the rules Own It uses to name vendors: website platforms, hosts, agency builders and reseller registrars, DNS hosts, email providers, tag ID formats, call tracking, booking an…No findings

    Why it is in this group

    • The name "list_fingerprints" says "list": a word for reading.
    Description, as the server wrote it
    List the rules Own It uses to name vendors: website platforms, hosts, agency builders and reseller registrars, DNS hosts, email providers, tag ID formats, call tracking, booking and CRM widgets, and profile sites, each with its public marker, portability rating and source. Without kind it returns counts per kind. Static reference, no network access.

    Annotations the server declares

    • title: List detection rules
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http own-it https://mcp.modernmustardseed.com/own-it

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__own-it__list_fingerprints"
    ],
    "ask": [
      "mcp__own-it__audit_ownership",
      "mcp__own-it__check_domain_control"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as own-it. Review it before you use it.