whois_lookup

What whois_lookup does on Nyxstrike

AI agents call whois_lookup to retrieve information from Nyxstrike without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why whois_lookup is rated Low

WHOIS lookup is a read-only operation that retrieves publicly available information about domain or IP registrations. It has no side effects, does not execute code or commands, and cannot modify or delete data. Although it exists in a penetration testing platform context, the tool itself is purely informational. The severity is low because WHOIS data is public and the operation poses no direct harm.

From the tool's definition Tool name is 'whois_lookup' and description states it will 'Perform a WHOIS lookup for a domain or IP address.' WHOIS lookups query publicly available registration data without modifying, deleting, or executing operations.

The rule that runs whois_lookup safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Nyxstrike, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For whois_lookup, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "whois_lookup": {}
  }
}

Questions about whois_lookup