devns
Manages local development domains served by Caddy, with automatic HTTPS and reverse proxying to local application ports. Provides tools to add, remove, list, and check the health of domains, which directly update Caddy's configuration and reload it via its admin API.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@devnsAdd myapp.test to port 3000"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
devns
Local domain https://<name>.test without a port for macOS.
devns add webui 8080
# ✓ https://webui.test → 127.0.0.1:8080 (caddy admin load HTTP 200)One CLI that sets everything up: dnsmasq (wildcard *.test → 127.0.0.1), Caddy (the sole holder of ports 80/443, automatic HTTPS via internal CA), and an optional local DoH bridge so browsers with Secure DNS can still open .test domains.
Why is it needed?
Without devns | With devns |
|
|
Port conflicts between projects | Unique name per project, no port in the URL |
Plain HTTP | Trusted HTTPS (secure cookies, service workers, clipboard API work) |
Browser Secure DNS kills local domains | DoH bridge: |
Related MCP server: DDEV MCP Server
Install
Requirements: macOS + uv + Homebrew.
git clone https://github.com/apiep/devns && cd devns
uv tool install --editable .
devns init # sekali saja — minta sudo interaktif 2-3x
devns doh install # opsional: bridge DoH utk browser secure-DNSdevns init sets up:
brew install dnsmasq caddyif not already installed/etc/resolver/test→ macOS routes the.testTLD to 127.0.0.1address=/.test/127.0.0.1block indnsmasq.conf+ root service on :53Main Caddyfile (
import ~/.config/devns/sites/*.caddy) + root service on 80/443Caddy's internal CA added to the system trust store (
sudo caddy trust)DoH bridge (
dnsproxyfrom AdGuard — binary auto-downloaded based on OS/arch)
Day-to-day no sudo at all: add/rm/ls/open/doctor/doh/log.
Usage
devns add pueue 7337 # daftarkan domain + reload Caddy + cek port
devns add api 3000 --open # sekalian buka browser
devns ls # ● https://pueue.test → 127.0.0.1:7337
devns open pueue # buka di browser default
devns rm pueue # hapus (konfirmasi; -y skip)
devns doctor # kesehatan: resolver/DNS/Caddy/HTTPS/DoH
devns doh install # bridge DoH (LaunchAgent user-level)
devns doh status
devns doh log -f # ikuti log dnsproxy liveBrowsers with Secure DNS
After devns doh install, set Secure DNS to Custom: https://dns.test:8443/dns-query.
.test queries are answered locally, all other queries are forwarded encrypted to your chosen DoH upstream (default OpenDNS).
Architecture
Browser ──DoH──> dns.test:8443 (dnsproxy, launchd io.devns.doh)
├─ [/test/] ──> dnsmasq :53 ──> 127.0.0.1
└─ lainnya ──> https://doh.opendns.com/dns-query
Browser ──HTTPS──> Caddy :443 ──reverse_proxy──> 127.0.0.1:<port-app>
──HTTP───> Caddy :80 ──308──> HTTPS
cert: Caddy Local Authority (tls internal), per-hostname on-demandRegistry:
~/.config/devns/registry.yaml= the single source of truthSite files:
~/.config/devns/sites/<name>.caddy(generated artifacts; the template usesflush_interval -1so SSE is not buffered)Daily reload: Caddy admin endpoint
localhost:2019with theContent-Type: text/caddyfileheader
MCP server
devns ships with a stdio MCP server with no extra dependencies:
hermes mcp add devns --command devns-mcp # Hermes Agent
# atau konfigurasi MCP client lain (Claude Desktop dsb) dengan command "devns-mcp"Tools: list_domains, add_domain, remove_domain, check_health, doh_status.
Skill for AI agents
This repo includes a portable skill at skills/devns/SKILL.md (agentskills.io / Claude skills format). Copy or symlink it into your agent's skills directory.
Design notes (real-world lessons)
Wildcard
*.testis rejected by modern verifiers — Chrome and curl reject a wildcard cert that attaches directly to a TLD even if the SAN is RFC-valid. That's why certs are generated per-hostname on demand by Caddy's internal CA.Port 5353 is already used by mDNSResponder (Bonjour) → the DoH bridge uses 5335.
/etc/resolver/testmakes resolution hang (not fail fast) when dnsmasq is down — that's a sign the resolver is active, not a bug.
License
MIT
Available Tools
5 toolsadd_domainA
Daftarkan nama.test -> 127.0.0.1:port lalu reload Caddy. Nama harus [a-z0-9-]. Contoh: add_domain(name='webui', port=8080)
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | nama domain tanpa .test | |
| port | Yes | port lokal tujuan |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It does mention the key side effect (reloads Caddy) and the required domain naming pattern. However, it omits details like idempotency, failure modes, or whether existing entries are overwritten, leaving some behavioral ambiguity.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that front-loads the core action, followed by the naming constraint and an example. There is zero filler, and every part contributes to understanding the tool. It is exceptionally concise and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter tool with no output schema, the description covers the purpose, the side effect, naming rules, and an example. It is mostly complete, but it does not describe what the return value or success/failure indications look like, which would be helpful for an agent interpreting the result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema descriptions are already clear (name without .test, local port), so baseline is 3. The description adds value by specifying the exact character pattern for name ([a-z0-9-]) and providing a concrete example, which goes beyond the schema. This elevates the score to 4.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action (register a .test domain pointing to 127.0.0.1:port) and explicitly mentions reloading Caddy, making it distinct from sibling tools like list_domains or remove_domain. The verb 'Daftarkan' and resource are clear, and the example reinforces the purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides a naming constraint ([a-z0-9-]) and a concrete example, which clarifies when and how to call it. It does not explicitly mention alternatives or exclusion scenarios, but the sibling names make the intended use obvious. The guidance is adequate, though not exhaustive.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_healthA
Cek kesehatan rantai devns: resolver, DNS, Caddy (admin + 80/443), HTTPS.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description bears full responsibility for disclosing behavior. It lists the components checked but does not state that the operation is read-only, whether it makes any changes, or what the output/return format is. An agent cannot infer side effects, permission requirements, or how to interpret results from this description alone.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single concise sentence with no filler. It front-loads the action and resource, then lists the components. Every word earns its place, and the structure is immediately scannable.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (no parameters, no output schema), the description covers the scope of what is checked. However, it does not explain what the result looks like (e.g., a summary, pass/fail, detailed diagnostics) or what 'health' means in practice. Since the output schema is absent, the description should provide at least a hint of return semantics, which it omits.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has no parameters, so the schema is trivially complete. The description inherently needs no parameter explanations. Per the rubric, a zero-parameter tool gets a baseline of 4, and there is no reason to deduct since the description adds no misleading or missing parameter info.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Cek kesehatan' = check health) and a specific resource ('rantai devns' = devns chain), and enumerates the components checked (resolver, DNS, Caddy, HTTPS). This clearly distinguishes it from siblings that manage domains (list_domains, add_domain, remove_domain) or check DoH status (doh_status). It is not a tautology and provides concrete scope.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description states what it does (checks health) but gives no guidance on when to use it versus alternatives. It does not mention whether to prefer this over doh_status for DoH-specific checks, nor does it specify prerequisites or typical scenarios. The context is implied ('health') but there is no explicit when/when-not or alternative naming.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
doh_statusC
Status bridge DoH lokal (dnsproxy via launchd).
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It does not state whether the operation is read-only, what side effects may occur, what the response format is, or any error conditions. For a status tool this is a critical omission.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single short sentence with no fluff, but it is under-specified. It is not effectively front-loaded because it fails to convey the tool's purpose clearly enough; brevity is achieved but at the cost of clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the simplicity (no params, no output schema), the description still needs to convey the tool's function and how it differs from check_health. It does not mention return values, read-only behavior, or the relationship to sibling tools, so an agent lacks critical information to use it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the baseline is 4. The description does add context about the domain (DoH local bridge via dnsproxy/launchd) which helps an agent understand the subject, even though it does not explain any parameter (as there are none).
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Status bridge DoH lokal (dnsproxy via launchd).' is a label-like phrase rather than a clear action. It names a resource (bridge DoH) and context (dnsproxy/launchd) but lacks an explicit verb like 'retrieve' or 'check', and does not distinguish it from the sibling check_health which likely serves a similar status purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to use this tool versus any of its siblings. No context is provided about the intended scenario or alternative tools, leaving an agent without any basis to select this tool over check_health.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_domainsA
Daftar semua domain *.test terdaftar beserta port dan status port.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description carries the full burden. It describes a read operation (listing) but does not explicitly state that it is read-only, non-destructive, or free of side effects. It also does not mention any error conditions, rate limits, or data volume concerns. For a tool with no annotation coverage, more behavioral disclosure is needed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, direct sentence that front-loads the action (list all) and the resource (registered *.test domains) and includes the key output details. Every word earns its place; there is no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter tool with no output schema, the description adequately specifies what the tool returns: registered domains, ports, and port status. It does not mention pagination, sorting, or limits, but for a simple list operation, this is not a critical omission. The description is sufficient for an agent to call and interpret the result correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the description does not need to elaborate on them. The schema coverage is trivially 100% and there is nothing missing. The baseline of 4 applies because there are no parameters to describe.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action (list all) on a specific resource (registered *.test domains) and includes the details it returns (port and port status). It is clearly distinct from sibling tools like add_domain, remove_domain, check_health, and doh_status, which serve different purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit when-to-use or when-not-to-use guidance is provided. The name and description imply this is the tool for viewing all domains, but it does not mention alternatives like check_health or any conditions that would make another tool more suitable. The usage context is implied but not explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
remove_domainB
Hapus nama.test dari registry + site Caddy, lalu reload.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must disclose behavior on its own. It states that the tool modifies a registry and a Caddy site and triggers a reload, which are relevant side effects. However, it does not mention irreversibility, permission requirements, or failure modes, so it's partially transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence with the core action front-loaded. There is zero wasted text, and every word contributes to the meaning.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple one-parameter removal tool, the description covers the essential steps (remove, reload) but leaves out important context like whether the domain must exist, what happens on failure, or any safety caveats. Given the lack of an output schema and annotations, it is minimally complete but not thorough.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description must explain the 'name' parameter. The phrase 'Hapus nama.test' implies that 'name' is the domain to remove, which gives basic meaning. However, it lacks format, examples, or edge-case details, so it only partially compensates for the gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action (remove) and the resource (domain from registry and Caddy site) with a reload step. It is concise and unambiguous, though it does not explicitly contrast with sibling tools like add_domain, so it's not a full 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. There is no mention of conditions, prerequisites, or when not to use it. The name implies removal but that's not explicit enough for an agent to make a confident choice.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
5 tool updates
v0.1.0- First observed
add_domain - First observed
check_health - First observed
doh_status - First observed
list_domains - First observed
remove_domain
TDQS
Each tool serves a distinct purpose: listing, adding, removing domains, checking overall health, and checking DoH status. There is no overlap or ambiguity between the tools, making selection straightforward.
All tool names follow a consistent snake_case pattern with a verb_noun structure (list, add, remove, check) except 'doh_status' which is a noun phrase, but it still fits the naming style seamlessly. No mixed conventions or inconsistent verbs.
Five tools cover the complete lifecycle of managing local dev domains and health monitoring without being excessive or sparse. This is well-scoped for a developer-focused DNS and Caddy management server.
The tool set provides full CRUD for domains (list, add, remove) plus health checks for the entire system maintenance. There are no obvious missing operations required for the stated purpose; updates can be achieved by remove/add.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Custom domains for SaaS and AI agents: search, register, connect DNS, and issue HTTPS over MCP.
Look up DNS information for any domain to troubleshoot issues and gather insights. Get fast, relia…
MCP server for DNSimple — domains, DNS zone records, availability, pricing and contacts.
Manage hosts, redirects, SSL, and traffic analytics from Claude and other AI assistants.
Related MCP Servers
- AlicenseAqualityDmaintenanceEnables comprehensive DNS operations including lookups for various record types, reverse DNS queries, batch processing, and DNS resolution tracing. Supports multiple DNS servers with configurable caching and robust error handling.4642MIT
- AlicenseAqualityDmaintenanceEnables AI assistants to interact with DDEV local development environments by querying databases, managing project states, and executing container commands. It provides comprehensive control over local services with a security-first approach using whitelisted operations.5393GPL 2.0
- FlicenseNot gradedqualityDmaintenanceEnables checking domain availability using WHOIS and DNS resolution, with support for single and batch queries.28-
- AlicenseBqualityDmaintenanceEnables domain name checking and related services through a standardized MCP interface.2MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/apiep/devns'
If you have feedback or need assistance with the MCP directory API, please join our Discord server