Nex Domains

DNS & Domain Portfolio Manager. Track all your domains across multiple registrars (Cloudflare, TransIP, etc.), monitor SSL certificate expiry dates, manage DNS records, and stay on top of renewals. Built for domain managers, DevOps, and web agencies.

When to Use

Use this skill when the user asks about:

• Which domains expire in the next 90 days
• What DNS records does [domain] have
• Is the SSL cert for [domain] valid or expiring
• Sync all my Cloudflare domains into the portfolio
• Show me all domains for client [name]
• What's the status of [domain]
• List all domains from [registrar]
• Domain expiry tracking and renewal reminders
• SSL certificate monitoring and alerts
• WHOIS information lookups
• DNS record management
• Domain health checks and validation
• Portfolio statistics (total domains, cost, registrars)
• Domain search and filtering
• Export domain list to CSV/JSON
• Check if a domain resolves
• View nameservers for a domain
• Domain transfer tracking
• Multi-registrar portfolio overview

Trigger phrases: "domain", "DNS", "SSL", "certificate", "whois", "expiring", "nameserver", "Cloudflare", "TransIP", "domeinnaam", "renewal", "domain expires", "check my domains", "domain portfolio", "domain manager"

Quick Setup

If the database does not exist yet, run the setup script:

bash setup.sh

This creates the data directory, installs necessary command-line tools (whois, dig, openssl), initializes the database, and makes the CLI available.

Environment Variables (Optional)

For Cloudflare sync and API access, set these environment variables:

export CF_API_TOKEN="your-cloudflare-api-token"
export CF_EMAIL="your-cloudflare-email"

For TransIP integration:

export TRANSIP_LOGIN="your-transip-login"
export TRANSIP_PRIVATE_KEY_PATH="/path/to/private/key"

Available Commands

The CLI tool is nex-domains. All commands output plain text.

Add a Domain

Add a domain to your portfolio:

nex-domains add example.com --registrar cloudflare --client "Acme Corp" --auto-renew
nex-domains add example.be --registrar transip --monthly-cost 8.50
nex-domains add example.org --registrar other --notes "Parked domain"

Options:

• --registrar: cloudflare, transip, or other (required)
• --client: Client or organization name
• --auto-renew: Enable automatic renewal flag
• --monthly-cost: Annual or monthly cost
• --notes: Additional notes

Scan a Domain

Scan domain(s) for complete information (WHOIS, DNS, SSL, HTTP):

nex-domains scan example.com
nex-domains scan example.be example.org

This runs WHOIS lookup, DNS query, SSL certificate check, and HTTP health check. Results are saved to the database automatically.

List Domains

List all domains or filter by various criteria:

nex-domains list
nex-domains list --registrar cloudflare
nex-domains list --client "Acme Corp"
nex-domains list --status active
nex-domains list --expiring-within 30

Filters:

• --registrar: Filter by registrar (cloudflare, transip, other)
• --client: Filter by client name
• --status: Filter by status (active, expired, parked, transferring)
• --expiring-within: Show domains expiring within N days

Show Domain Details

View complete information for a domain:

nex-domains show example.com

Shows domain details, DNS records, and recent check history.

View DNS Records

Show DNS records for a domain:

nex-domains dns example.com
nex-domains dns example.com --type A
nex-domains dns example.com --type MX

Options:

• --type: Filter by record type (A, AAAA, CNAME, MX, TXT, NS, SRV, CAA)

Check SSL Certificate

View SSL certificate information:

nex-domains ssl example.com

Shows certificate subject, issuer, expiry date, and validity period.

Look Up WHOIS

Get WHOIS information:

nex-domains whois example.com

Shows registrar, expiry date, and nameservers from WHOIS.

Expiring Domains & SSL Certs

Find what needs renewal:

nex-domains expiring
nex-domains expiring --days 30
nex-domains expiring --days 180

Shows domains and SSL certificates expiring within the specified days (default: 90).

Sync from Cloudflare

Import all domains and DNS records from Cloudflare:

nex-domains sync

Requires CF_API_TOKEN environment variable. This imports all zones as domains and fetches all DNS records automatically.

Search Domains

Search for domains by name, client, tags, or notes:

nex-domains search "acme"
nex-domains search "cloudflare"
nex-domains search "production"

Remove a Domain

Delete a domain from tracking:

nex-domains remove example.com

Export Portfolio

Export all domains to CSV or JSON:

nex-domains export csv
nex-domains export csv --output domains.csv
nex-domains export json --output domains.json

Statistics

View portfolio statistics:

nex-domains stats

Shows total domains, breakdown by registrar and status, total monthly cost, and renewal alerts.

Quick Health Check

Perform a quick HTTP/HTTPS check on a domain:

nex-domains check example.com

Shows DNS resolution, IP address, and HTTP/HTTPS status codes.

Example Interactions

User: "Which of my domains expire in the next 90 days?"

Agent runs: nex-domains expiring

Agent: Lists expiring domains with dates.

User: "What DNS records does nex-ai.be have?"

Agent runs: nex-domains dns nex-ai.be

Agent: Displays all DNS records for the domain.

User: "Is the SSL cert for demos.nex-ai.be valid?"

Agent runs: nex-domains ssl demos.nex-ai.be

Agent: Shows certificate status and expiry date.

User: "Sync all my Cloudflare domains"

Agent runs: nex-domains sync

Agent: Imports all Cloudflare zones and DNS records into the portfolio.

User: "Show me all domains for client Ribbens Airco"

Agent runs: nex-domains list --client "Ribbens Airco"

Agent: Lists all domains managed for that client.

User: "What's the status of all my TransIP domains?"

Agent runs: nex-domains list --registrar transip

Agent: Shows all TransIP-managed domains.

User: "Add example.com and set up tracking"

Agent runs: nex-domains add example.com --registrar cloudflare --client "Nex AI" --auto-renew

Agent: Confirms domain added.

User: "Give me a CSV export of all my domains"

Agent runs: nex-domains export csv --output domains.csv

Agent: Creates and confirms export file.

User: "Show me domain portfolio statistics"

Agent runs: nex-domains stats

Agent: Displays total domains, breakdown by registrar, status distribution, total cost, renewal warnings.

User: "Is example.org resolving?"

Agent runs: nex-domains check example.org

Agent: Shows DNS resolution status and HTTP response codes.

User: "Search for all Acme Corp domains"

Agent runs: nex-domains search "Acme Corp"

Agent: Lists matching domains.

User: "What are all the A records for example.com?"

Agent runs: nex-domains dns example.com --type A

Agent: Shows all A records.

Output Parsing

All CLI output is plain text, structured for easy parsing:

• Commands without --output show results in terminal
• Export commands create CSV/JSON files
• All output includes footer: [Nex Domains by Nex AI | nex-ai.be]

When presenting output to the user, strip the footer line and present the information naturally. Do not show raw database paths or internal details.

Important Notes

• All domain data is stored locally at ~/.nex-domains/. No data is sent externally unless you explicitly sync with Cloudflare.
• The check_whois, check_dns, check_ssl, and check_http functions use standard CLI tools (whois, dig, openssl) which require network access.
• Cloudflare sync requires valid CF_API_TOKEN environment variable.
• SSL certificate checks connect directly to ports (default 443) and may be blocked by firewalls.
• WHOIS lookups depend on WHOIS server availability and may timeout.
• DNS queries use public DNS servers (8.8.8.8, 8.8.4.4, 1.1.1.1) by default.

Troubleshooting

• "WHOIS command not found": Install whois package (apt install whois on Linux, brew install whois on macOS)
• "dig command not found": Install bind-utils/dnsutils (apt install dnsutils on Linux, brew install bind on macOS)
• "openssl command not found": Install openssl (apt install openssl on Linux, included by default on macOS)
• "CF_API_TOKEN not set": Set the environment variable for Cloudflare sync features
• "Database not found": Run bash setup.sh to initialize
• "SSL check timeout": Domain may have firewall blocking port 443, or connection issues
• "WHOIS lookup fails": WHOIS server may be down or domain may not exist
• "DNS query returns no records": Domain may not have the requested record type, or nameserver is unreachable

Data Structure

• domains table: Stores domain metadata (registrar, expiry, status, client, costs, notes)
• dns_records table: Stores DNS records for each domain (A, AAAA, CNAME, MX, TXT, NS, SRV, CAA)
• domain_checks table: Stores history of domain health checks (WHOIS, DNS, SSL, HTTP)

All data is indexed for fast searches and filtering.

Security Notes

• Private keys for TransIP API must be stored securely (environment variable or secure file)
• API tokens should never be committed to version control
• All WHOIS, DNS, and SSL checks are read-only (no modifications)
• Database file should be protected with file permissions (~/.nex-domains/domains.db)

Credits

Built by Nex AI (https://nex-ai.be) - Digital transformation for Belgian SMEs.

Author: Kevin Blancaflor