Professional DNS diagnostics: 14 tools for DNS, DNSSEC, email security, SSL, and propagation.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
IP blacklist / DNSBL check. Tests A-record and MX IPs against Spamhaus, Barracuda, SpamCop, SORBS, and more.
This tool isn't marked read-only, so it may change something on the server or in an account you connected.
IP blacklist / DNSBL check. Tests A-record and MX IPs against Spamhaus, Barracuda, SpamCop, SORBS, and more.
| Argument | Type | Description |
|---|---|---|
| token* | string | |
| domain* | string |
{
"type": "object",
"title": "blacklist_checkArguments",
"required": [
"domain",
"token"
],
"properties": {
"token": {
"type": "string",
"title": "Token"
},
"domain": {
"type": "string",
"title": "Domain"
}
}
}DANE/TLSA validation: cross-validates TLSA DNS records against the live TLS certificate. Supports all four TLSA usage types.
| Argument | Type | Description |
|---|---|---|
| port | integer | |
| token* | string | |
| domain* | string |
{
"type": "object",
"title": "dane_validateArguments",
"required": [
"domain",
"token"
],
"properties": {
"port": {
"type": "integer",
"title": "Port",
"default": 443
},
"token": {
"type": "string",
"title": "Token"
},
"domain": {
"type": "string",
"title": "Domain"
}
}
}Full diagnosis combining resolution + DNSSEC. Use first when something is broken.
| Argument | Type | Description |
|---|---|---|
| token* | string | |
| domain* | string |
{
"type": "object",
"title": "diagnoseArguments",
"required": [
"domain",
"token"
],
"properties": {
"token": {
"type": "string",
"title": "Token"
},
"domain": {
"type": "string",
"title": "Domain"
}
}
}Look up DNS records for a domain. Record types: a, aaaa, ns, mx, txt, soa, caa, srv, cname, ds, tlsa, https, svcb, any, all.
| Argument | Type | Description |
|---|---|---|
| rr | string | |
| token* | string | |
| domain* | string |
{
"type": "object",
"title": "dns_lookupArguments",
"required": [
"domain",
"token"
],
"properties": {
"rr": {
"type": "string",
"title": "Rr",
"default": "a"
},
"token": {
"type": "string",
"title": "Token"
},
"domain": {
"type": "string",
"title": "Domain"
}
}
}DNSSEC health report: key inventory, signature expiry, algorithm assessment, DS at parent, rollover readiness, full chain of trust (Root → TLD → Domain) with chain_intact flag and broken-link identification, warnings, and recommendations.
| Argument | Type | Description |
|---|---|---|
| token* | string | |
| domain* | string |
{
"type": "object",
"title": "dnssec_healthArguments",
"required": [
"domain",
"token"
],
"properties": {
"token": {
"type": "string",
"title": "Token"
},
"domain": {
"type": "string",
"title": "Domain"
}
}
}Validate DNSSEC chain of trust. Returns: secure / insecure / bogus / indeterminate.
| Argument | Type | Description |
|---|---|---|
| token* | string | |
| domain* | string |
{
"type": "object",
"title": "dnssec_validateArguments",
"required": [
"domain",
"token"
],
"properties": {
"token": {
"type": "string",
"title": "Token"
},
"domain": {
"type": "string",
"title": "Domain"
}
}
}Registrar lock and EPP status. Checks transfer lock, delete lock, serverHold, pendingDelete.
| Argument | Type | Description |
|---|---|---|
| token* | string | |
| domain* | string |
{
"type": "object",
"title": "domain_statusArguments",
"required": [
"domain",
"token"
],
"properties": {
"token": {
"type": "string",
"title": "Token"
},
"domain": {
"type": "string",
"title": "Domain"
}
}
}Full SPF, DKIM, DMARC, and BIMI audit with A-F grade and prioritized fix recommendations.
| Argument | Type | Description |
|---|---|---|
| token* | string | |
| domain* | string |
{
"type": "object",
"title": "email_security_auditArguments",
"required": [
"domain",
"token"
],
"properties": {
"token": {
"type": "string",
"title": "Token"
},
"domain": {
"type": "string",
"title": "Domain"
}
}
}Geolocation and hosting: country, city, ISP, ASN, CDN detection, is_hosting flag.
| Argument | Type | Description |
|---|---|---|
| token* | string | |
| domain* | string |
{
"type": "object",
"title": "geo_lookupArguments",
"required": [
"domain",
"token"
],
"properties": {
"token": {
"type": "string",
"title": "Token"
},
"domain": {
"type": "string",
"title": "Domain"
}
}
}HTTP/HTTPS reachability: status codes, redirect chain, HSTS header, HTTP→HTTPS redirect detection.
| Argument | Type | Description |
|---|---|---|
| token* | string | |
| domain* | string |
{
"type": "object",
"title": "http_checkArguments",
"required": [
"domain",
"token"
],
"properties": {
"token": {
"type": "string",
"title": "Token"
},
"domain": {
"type": "string",
"title": "Domain"
}
}
}MX health + provider detection: Google Workspace, M365, Proofpoint, Zoho, 35+ providers.
| Argument | Type | Description |
|---|---|---|
| token* | string | |
| domain* | string |
{
"type": "object",
"title": "mx_checkArguments",
"required": [
"domain",
"token"
],
"properties": {
"token": {
"type": "string",
"title": "Token"
},
"domain": {
"type": "string",
"title": "Domain"
}
}
}Check DNS propagation across 16 global resolvers: Google, Cloudflare, Quad9, China, Korea, Russia.
| Argument | Type | Description |
|---|---|---|
| token* | string | |
| domain* | string | |
| record_type | string |
{
"type": "object",
"title": "propagation_checkArguments",
"required": [
"domain",
"token"
],
"properties": {
"token": {
"type": "string",
"title": "Token"
},
"domain": {
"type": "string",
"title": "Domain"
},
"record_type": {
"type": "string",
"title": "Record Type",
"default": "A"
}
}
}DNS resolution diagnostics. Returns status: ok / nxdomain / nodata / servfail / refused / timeout / degraded.
| Argument | Type | Description |
|---|---|---|
| token* | string | |
| domain* | string |
{
"type": "object",
"title": "resolve_checkArguments",
"required": [
"domain",
"token"
],
"properties": {
"token": {
"type": "string",
"title": "Token"
},
"domain": {
"type": "string",
"title": "Domain"
}
}
}SSL certificate: validity, expiry countdown, domain match, issuer, chain completeness.
| Argument | Type | Description |
|---|---|---|
| token* | string | |
| domain* | string |
{
"type": "object",
"title": "ssl_checkArguments",
"required": [
"domain",
"token"
],
"properties": {
"token": {
"type": "string",
"title": "Token"
},
"domain": {
"type": "string",
"title": "Domain"
}
}
}Discover subdomains by probing 75 common names plus crt.sh Certificate Transparency logs. Surfaces exposed dev/staging environments.
| Argument | Type | Description |
|---|---|---|
| token* | string | |
| domain* | string |
{
"type": "object",
"title": "subdomain_discoverArguments",
"required": [
"domain",
"token"
],
"properties": {
"token": {
"type": "string",
"title": "Token"
},
"domain": {
"type": "string",
"title": "Domain"
}
}
}TTL advisory: flags dangerous TTLs and gives step-by-step migration lowering plan.
| Argument | Type | Description |
|---|---|---|
| token* | string | |
| domain* | string |
{
"type": "object",
"title": "ttl_checkArguments",
"required": [
"domain",
"token"
],
"properties": {
"token": {
"type": "string",
"title": "Token"
},
"domain": {
"type": "string",
"title": "Domain"
}
}
}Parsed WHOIS: registrar, creation/expiry dates, domain age, nameservers, EPP status, DNSSEC status.
| Argument | Type | Description |
|---|---|---|
| token* | string | |
| domain* | string |
{
"type": "object",
"title": "whois_lookupArguments",
"required": [
"domain",
"token"
],
"properties": {
"token": {
"type": "string",
"title": "Token"
},
"domain": {
"type": "string",
"title": "Domain"
}
}
}AXFR zone transfer vulnerability check. Tests whether any authoritative NS allows public zone transfers (critical misconfiguration).
| Argument | Type | Description |
|---|---|---|
| token* | string | |
| domain* | string |
{
"type": "object",
"title": "zone_axfrArguments",
"required": [
"domain",
"token"
],
"properties": {
"token": {
"type": "string",
"title": "Token"
},
"domain": {
"type": "string",
"title": "Domain"
}
}
}Check all authoritative nameservers return identical answers. Catches lame delegation and SOA mismatches.
| Argument | Type | Description |
|---|---|---|
| token* | string | |
| domain* | string |
{
"type": "object",
"title": "zone_consistencyArguments",
"required": [
"domain",
"token"
],
"properties": {
"token": {
"type": "string",
"title": "Token"
},
"domain": {
"type": "string",
"title": "Domain"
}
}
}