Front Sentinel
Read-only security checks for dApp domains: registry lock, DNSSEC, CAA, SRI, SEAL DNS controls
Sollte ich dies verwenden
Qualität und Sicherheit
Basierend auf einer automatisierten Analyse der Tool-Definitionen und der Einhaltung des Protokolls.
Kontextkosten
Dies ist die ungefähre Anzahl der Tokens, die jedes Mal verbraucht werden, wenn die Tools des Servers in den Kontext eines Modells geladen werden. Höhere Werte verringern die Aufmerksamkeit, die für andere Aufgaben verfügbar ist.
Installieren
Installation mit einem Klick
Fügen Sie dies Ihrer Datei `claude_desktop_config.json` hinzu:
{
"mcpServers": {
"domain-security": {
"url": "https://frontsentinel.com/mcp"
}
}
}Remote-Endpunkte
https://frontsentinel.com/mcpstreamable-httpWas es kann
Tool-Inventar
Tools (4)
🟢scan_domain(domain)
Scores how well a dApp or website domain is protected against hijacking: registrar transfer/update locks, registry lock, DNSSEC, CAA, expiry, nameserver consistency across resolvers, SRI on third-party scripts and the Content-Security-Policy header. Returns a 0-100 score, each check with pass/fail/unknown and advice. Results are cached for an hour.
Eingabe-Schema
{
"type": "object",
"properties": {
"domain": {
"type": "string",
"description": "Domain name, e.g. app.example.com. A URL is accepted too; only the host is used."
}
},
"required": [
"domain"
],
"additionalProperties": false
}🟢check_registry_lock(domain)
Reads the domain's EPP status codes from RDAP and tells whether registry lock (serverUpdateProhibited + serverTransferProhibited) is on, partly on or off, and which registrar-level locks are set.
Eingabe-Schema
{
"type": "object",
"properties": {
"domain": {
"type": "string",
"description": "Domain name, e.g. app.example.com. A URL is accepted too; only the host is used."
}
},
"required": [
"domain"
],
"additionalProperties": false
}🟢check_sri(url)
Loads a public page and lists every script, stylesheet and preload it pulls in. For third-party files, checks whether an integrity= hash is present and matches, and returns a ready sha384 hash for files that have none.
Eingabe-Schema
{
"type": "object",
"properties": {
"url": {
"type": "string",
"description": "Public https page URL or domain, e.g. https://app.example.com/"
}
},
"required": [
"url"
],
"additionalProperties": false
}🟢check_seal_dns_registrar(domain)
Goes through the 16 controls of the SEAL Security Frameworks certification for DNS & Registrar and marks what public data shows for each: ok, partial, gap, not visible from outside, or a process control the team has to document itself. Includes DNSSEC, CAA, SPF/DMARC/MTA-STS, locks, expiry and security.txt.
Eingabe-Schema
{
"type": "object",
"properties": {
"domain": {
"type": "string",
"description": "Domain name, e.g. app.example.com. A URL is accepted too; only the host is used."
}
},
"required": [
"domain"
],
"additionalProperties": false
}Community
Nachweis