namecheap-webui-mcp

MCP server for managing Namecheap through the normal web dashboard (no Namecheap API key, no IP allowlist).

This server uses fresh Playwright sessions plus saved auth state (storage-state.json) so reads/writes survive between calls without relying on fragile persistent browser profiles.

quick start

npm install
npx playwright install chromium
npm run build
npm start

tools

supported dashboard views (namecheap_webui_query)

• account
• domains
• expiring
• hosting
• private-email
• ssl-certificates
• apps
• my-offers
• profile
• growth-tools
• advanced-dns (requires domainName)
• domain-manage (requires domainName)

env

Copy .env.example and adjust if needed:

cp .env.example .env

• NAMECHEAP_BASE_URL (default https://www.namecheap.com)
• NAMECHEAP_LOGIN_URL (default https://www.namecheap.com/myaccount/login/)
• NAMECHEAP_ACCOUNT_URL (default https://ap.www.namecheap.com/)
• NAMECHEAP_USER_DATA_DIR (default .namecheap-profile)
• NAMECHEAP_BROWSER_EXECUTABLE_PATH (optional, e.g. /usr/bin/chromium-browser)
• NAMECHEAP_HEADLESS (default true)
• NAMECHEAP_SLOW_MO (default 0)
• NAMECHEAP_NAVIGATION_TIMEOUT_MS (default 30000)

login flow

1. call namecheap_webui_login with username + password
2. if result is two-factor-required, call again with twoFactorCode
3. verify with namecheap_webui_status

If direct login is blocked by anti-bot friction on your host, import a full logged-in cookie set with namecheap_webui_import_cookies.

recommended safety workflow

1. namecheap_webui_status
2. namecheap_domain_get_overview / namecheap_domain_get_nameservers
3. namecheap_dns_get_records
4. namecheap_dns_set_records (prefer append)

For domain-level changes:

1. namecheap_domain_get_features
2. namecheap_domain_set_feature

mcp config example

{
  "mcp": {
    "namecheap-webui": {
      "type": "local",
      "enabled": true,
      "command": ["node", "/absolute/path/namecheap-webui-mcp/dist/index.js"],
      "environment": {
        "NAMECHEAP_USER_DATA_DIR": "/absolute/path/namecheap-webui-mcp/.namecheap-profile",
        "NAMECHEAP_HEADLESS": "true",
        "NAMECHEAP_NAVIGATION_TIMEOUT_MS": "30000"
      }
    }
  }
}

limitations

• Depends on live Namecheap markup and labels; selectors may need updates when UI changes
• Bulk operations are still modeled as single-domain actions
• Some accounts/domains may require extra verification dialogs before edits are allowed