Your Data · Alerts

list_my_domain_alerts

List your organisation's brand/domain intelligence alerts (new lookalike domains, DNS/WHOIS changes, disappearances), newest first. Set unread_only to show only unread. Costs 1 credit.

POST
tools/call

Cost: 1 credit per successful call  ·  Scope: mcp:org  ·  Response shape: jsonb

Returns data scoped to your own organisation only — the organisation is resolved from your API key and injected server-side, never read from the request.

Parameters

unread_onlybooleanoptionaldefault: false

When true, only return alerts that have not yet been marked as read.

limitintegeroptionaldefault: 50

Maximum number of entries to return. Accepted range: 1–200.

Example invocation

Ask your agent: "Show unread domain-impersonation alerts."

curl -s https://api.precursorintelligence.com/functions/v1/mcp \
  -H "Authorization: Bearer $PRECURSOR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_my_domain_alerts","arguments":{"unread_only":true,"limit":50}}}'

Response

result.content[0].text (parsed)
{
  "count": 2,
  "items": [
    {
      "domain": "example-secure-login.com",
      "alert_type": "new_lookalike",
      "description": "New lookalike domain registered resembling your primary brand.",
      "change_details": {
        "registrar": "NameCheap, Inc.",
        "first_seen": "2026-06-17",
        "edit_distance": 2
      },
      "is_read": false,
      "created_at": "2026-06-17T03:11:00.000Z"
    },
    {
      "domain": "examp1e.com",
      "alert_type": "dns_change",
      "description": "A record changed on a previously dormant lookalike domain.",
      "change_details": {
        "field": "A",
        "old_value": "0.0.0.0",
        "new_value": "203.0.113.42"
      },
      "is_read": false,
      "created_at": "2026-06-16T19:48:00.000Z"
    }
  ],
  "generated_at": "2026-06-18T08:15:00.000Z"
}

The full MCP envelope, including _meta.precursor with request_id, credits, and response_truncated, is documented in Response Format.

Response fields

countintegeroptional

Number of entries returned (equals items.length).

itemsarrayoptional

Domain intelligence alerts for your organisation, newest first. Each object contains the fields below.

items[].domainstringoptional

The domain the alert relates to.

items[].alert_typestringoptional

Type of alert, e.g. new_lookalike, dns_change, whois_change, disappearance.

items[].descriptionstringoptional

Human-readable description of the alert.

items[].change_detailsobjectoptional

Structured details of the observed change. Keys vary by alert_type.

items[].is_readbooleanoptional

Whether the alert has been marked as read.

items[].created_atstringoptional

ISO 8601 timestamp of when the alert was raised (UTC).

generated_atstringoptional

ISO 8601 timestamp indicating when this response was generated.

Errors

CodeMessageWhen
-32602invalid_params: limit: min:1limit is less than 1
-32602invalid_params: limit: max:200limit exceeds 200
-32001unauthorizedThe API key is invalid/revoked, the IP is not allowed, or the key lacks the mcp:org scope.
-32002insufficient_creditsYour credit balance is zero; top up from the dashboard
-32603internalUnexpected server error; the credit is automatically refunded