MCP MeasureMCP Measure

index observed

idig-dns

Professional DNS diagnostics: 14 tools for DNS, DNSSEC, email security, SSL, and propagation.

Should I use this

Quality & Safety

A
Description quality
91%
Schema completeness
80%
Naming quality
80%
Poisoning risk
100%
Permission match
100%
Protocol compliance
100%

Findings (3)

  • LOWTool 'mx_check' description lacks action verbin mx_check
  • LOWTool 'ttl_check' description lacks action verbin ttl_check
  • LOWTool 'http_check' description lacks action verbin http_check

Based on automated analysis of tool definitions and protocol compliance.

Context Cost

~1,575Tokens (tool definitions)
~569 BTypical response size
Moderate attention impact (1.23% of 128k context)

This is the approximate number of tokens consumed each time the server's tools are loaded into a model's context. Higher counts reduce the attention available for other tasks.

Install

One-Click Install

Add this to your `claude_desktop_config.json` file:

{
  "mcpServers": {
    "idig-dns": {
      "url": "https://mcp.softricks.net/sse"
    }
  }
}

Remote endpoints

https://mcp.softricks.net/ssesse

What it can do

Tool inventory

Tools (19)

🟢 Read-only🟡 Write🔴 Delete⚪ Unknown
⚪dns_lookup(domain, token, rr)

Look up DNS records for a domain. Record types: a, aaaa, ns, mx, txt, soa, caa, srv, cname, ds, tlsa, https, svcb, any, all.

Input Schema

{
  "type": "object",
  "properties": {
    "domain": {
      "title": "Domain",
      "type": "string"
    },
    "token": {
      "title": "Token",
      "type": "string"
    },
    "rr": {
      "default": "a",
      "title": "Rr",
      "type": "string"
    }
  },
  "required": [
    "domain",
    "token"
  ],
  "title": "dns_lookupArguments"
}
⚪email_security_audit(domain, token)

Full SPF, DKIM, DMARC, and BIMI audit with A-F grade and prioritized fix recommendations.

Input Schema

{
  "type": "object",
  "properties": {
    "domain": {
      "title": "Domain",
      "type": "string"
    },
    "token": {
      "title": "Token",
      "type": "string"
    }
  },
  "required": [
    "domain",
    "token"
  ],
  "title": "email_security_auditArguments"
}
⚪dnssec_validate(domain, token)

Validate DNSSEC chain of trust. Returns: secure / insecure / bogus / indeterminate.

Input Schema

{
  "type": "object",
  "properties": {
    "domain": {
      "title": "Domain",
      "type": "string"
    },
    "token": {
      "title": "Token",
      "type": "string"
    }
  },
  "required": [
    "domain",
    "token"
  ],
  "title": "dnssec_validateArguments"
}
⚪dnssec_health(domain, token)

DNSSEC health report: key inventory, signature expiry, algorithm assessment, DS at parent, rollover readiness, full chain of trust (Root → TLD → Domain) with chain_intact flag and broken-link identification, warnings, and recommendations.

Input Schema

{
  "type": "object",
  "properties": {
    "domain": {
      "title": "Domain",
      "type": "string"
    },
    "token": {
      "title": "Token",
      "type": "string"
    }
  },
  "required": [
    "domain",
    "token"
  ],
  "title": "dnssec_healthArguments"
}
🟢resolve_check(domain, token)

DNS resolution diagnostics. Returns status: ok / nxdomain / nodata / servfail / refused / timeout / degraded.

Input Schema

{
  "type": "object",
  "properties": {
    "domain": {
      "title": "Domain",
      "type": "string"
    },
    "token": {
      "title": "Token",
      "type": "string"
    }
  },
  "required": [
    "domain",
    "token"
  ],
  "title": "resolve_checkArguments"
}
⚪diagnose(domain, token)

Full diagnosis combining resolution + DNSSEC. Use first when something is broken.

Input Schema

{
  "type": "object",
  "properties": {
    "domain": {
      "title": "Domain",
      "type": "string"
    },
    "token": {
      "title": "Token",
      "type": "string"
    }
  },
  "required": [
    "domain",
    "token"
  ],
  "title": "diagnoseArguments"
}
🟢propagation_check(domain, token, record_type)

Check DNS propagation across 16 global resolvers: Google, Cloudflare, Quad9, China, Korea, Russia.

Input Schema

{
  "type": "object",
  "properties": {
    "domain": {
      "title": "Domain",
      "type": "string"
    },
    "token": {
      "title": "Token",
      "type": "string"
    },
    "record_type": {
      "default": "A",
      "title": "Record Type",
      "type": "string"
    }
  },
  "required": [
    "domain",
    "token"
  ],
  "title": "propagation_checkArguments"
}
🟢mx_check(domain, token)

MX health + provider detection: Google Workspace, M365, Proofpoint, Zoho, 35+ providers.

Input Schema

{
  "type": "object",
  "properties": {
    "domain": {
      "title": "Domain",
      "type": "string"
    },
    "token": {
      "title": "Token",
      "type": "string"
    }
  },
  "required": [
    "domain",
    "token"
  ],
  "title": "mx_checkArguments"
}
🔴domain_status(domain, token)

Registrar lock and EPP status. Checks transfer lock, delete lock, serverHold, pendingDelete.

Input Schema

{
  "type": "object",
  "properties": {
    "domain": {
      "title": "Domain",
      "type": "string"
    },
    "token": {
      "title": "Token",
      "type": "string"
    }
  },
  "required": [
    "domain",
    "token"
  ],
  "title": "domain_statusArguments"
}
⚪geo_lookup(domain, token)

Geolocation and hosting: country, city, ISP, ASN, CDN detection, is_hosting flag.

Input Schema

{
  "type": "object",
  "properties": {
    "domain": {
      "title": "Domain",
      "type": "string"
    },
    "token": {
      "title": "Token",
      "type": "string"
    }
  },
  "required": [
    "domain",
    "token"
  ],
  "title": "geo_lookupArguments"
}
🟢ttl_check(domain, token)

TTL advisory: flags dangerous TTLs and gives step-by-step migration lowering plan.

Input Schema

{
  "type": "object",
  "properties": {
    "domain": {
      "title": "Domain",
      "type": "string"
    },
    "token": {
      "title": "Token",
      "type": "string"
    }
  },
  "required": [
    "domain",
    "token"
  ],
  "title": "ttl_checkArguments"
}
🟢zone_consistency(domain, token)

Check all authoritative nameservers return identical answers. Catches lame delegation and SOA mismatches.

Input Schema

{
  "type": "object",
  "properties": {
    "domain": {
      "title": "Domain",
      "type": "string"
    },
    "token": {
      "title": "Token",
      "type": "string"
    }
  },
  "required": [
    "domain",
    "token"
  ],
  "title": "zone_consistencyArguments"
}
🟢ssl_check(domain, token)

SSL certificate: validity, expiry countdown, domain match, issuer, chain completeness.

Input Schema

{
  "type": "object",
  "properties": {
    "domain": {
      "title": "Domain",
      "type": "string"
    },
    "token": {
      "title": "Token",
      "type": "string"
    }
  },
  "required": [
    "domain",
    "token"
  ],
  "title": "ssl_checkArguments"
}
⚪subdomain_discover(domain, token)

Discover subdomains by probing 75 common names plus crt.sh Certificate Transparency logs. Surfaces exposed dev/staging environments.

Input Schema

{
  "type": "object",
  "properties": {
    "domain": {
      "title": "Domain",
      "type": "string"
    },
    "token": {
      "title": "Token",
      "type": "string"
    }
  },
  "required": [
    "domain",
    "token"
  ],
  "title": "subdomain_discoverArguments"
}
🟢blacklist_check(domain, token)

IP blacklist / DNSBL check. Tests A-record and MX IPs against Spamhaus, Barracuda, SpamCop, SORBS, and more.

Input Schema

{
  "type": "object",
  "properties": {
    "domain": {
      "title": "Domain",
      "type": "string"
    },
    "token": {
      "title": "Token",
      "type": "string"
    }
  },
  "required": [
    "domain",
    "token"
  ],
  "title": "blacklist_checkArguments"
}
⚪whois_lookup(domain, token)

Parsed WHOIS: registrar, creation/expiry dates, domain age, nameservers, EPP status, DNSSEC status.

Input Schema

{
  "type": "object",
  "properties": {
    "domain": {
      "title": "Domain",
      "type": "string"
    },
    "token": {
      "title": "Token",
      "type": "string"
    }
  },
  "required": [
    "domain",
    "token"
  ],
  "title": "whois_lookupArguments"
}
🟢http_check(domain, token)

HTTP/HTTPS reachability: status codes, redirect chain, HSTS header, HTTP→HTTPS redirect detection.

Input Schema

{
  "type": "object",
  "properties": {
    "domain": {
      "title": "Domain",
      "type": "string"
    },
    "token": {
      "title": "Token",
      "type": "string"
    }
  },
  "required": [
    "domain",
    "token"
  ],
  "title": "http_checkArguments"
}
⚪zone_axfr(domain, token)

AXFR zone transfer vulnerability check. Tests whether any authoritative NS allows public zone transfers (critical misconfiguration).

Input Schema

{
  "type": "object",
  "properties": {
    "domain": {
      "title": "Domain",
      "type": "string"
    },
    "token": {
      "title": "Token",
      "type": "string"
    }
  },
  "required": [
    "domain",
    "token"
  ],
  "title": "zone_axfrArguments"
}
⚪dane_validate(domain, token, port)

DANE/TLSA validation: cross-validates TLSA DNS records against the live TLS certificate. Supports all four TLSA usage types.

Input Schema

{
  "type": "object",
  "properties": {
    "domain": {
      "title": "Domain",
      "type": "string"
    },
    "token": {
      "title": "Token",
      "type": "string"
    },
    "port": {
      "default": 443,
      "title": "Port",
      "type": "integer"
    }
  },
  "required": [
    "domain",
    "token"
  ],
  "title": "dane_validateArguments"
}

Recommended Prompts

list_items
List all [items] available in idig-dns
Expected tools: blacklist_check
browse_collection
Show me the [collection] from idig-dns
Expected tools: blacklist_check

Community

Rate this Server

Evidence

Recent observations

verifiedversion not recorded19 tools
verifiedversion not recorded19 tools
verifiedversion not recorded19 tools
verifiedversion not recorded19 tools
verifiedversion not recorded19 tools
verifiedversion not recorded19 tools