Dechonet MCP
A domain security reconnaissance MCP server providing 13 tools for analyzing DNS, SSL, email authentication, network infrastructure, and overall security posture of domains and IPs.
Comprehensive Security Scan (
security_scan): Run 9 parallel checks on a domain, receiving a 0–100 Health Score with an A–F grade and prioritized remediation actions.DNS Lookup (
dns_lookup): Query DNS records (A, AAAA, MX, TXT, NS, SOA, CAA), validate DNSSEC, SPF/DMARC syntax, and identify misconfigurations with severity-rated diagnostics.SSL/TLS Check (
ssl_check): Verify certificate expiry, issuer, SANs, chain integrity, and TLS version, graded A+ to F.HTTP Security Audit (
http_security): Trace HTTP redirects and audit 10 security headers (CSP, HSTS, X-Frame-Options, COOP, CORP, COEP, Permissions-Policy, etc.), graded A+ to F.Email Authentication (
email_auth): Check MX, SPF, DMARC, DKIM (15 selectors), BIMI, MTA-STS, TLS-RPT, DANE, and blacklists, returning a 0–100 deliverability score.Port Scan (
port_scan): Identify open TCP ports and services (HTTP, HTTPS, SSH, FTP, SMTP, DNS, databases) on a host.DNS Propagation (
dns_propagation): Monitor propagation across 8+ global resolvers (Google, Cloudflare, Quad9, OpenDNS) to detect stale caches.Reverse DNS (
reverse_dns): Perform PTR lookups for IPv4/IPv6 addresses and verify forward-confirmed rDNS (FCrDNS).ASN/BGP Lookup (
asn_lookup): Identify network operator, prefixes, abuse contact, and network type (cloud/CDN/ISP/hosting) for an IP or ASN.WHOIS/RDAP Lookup (
whois_lookup): Retrieve domain registration data including registrar, dates, nameservers, and status flags.IP Info (
ip_info): Get public IP details including ISP, ASN, geolocation, and proxy/VPN detection.Email Header Analysis (
email_header_analysis): Trace email delivery routes, extract SPF/DKIM/DMARC results, and detect delays or unencrypted hops from raw headers.Subnet Calculator (
subnet_calc): Calculate subnet details (network/broadcast address, host range, usable hosts, wildcard mask) from CIDR notation — works offline.
DechoNet MCP Server
Domain security reconnaissance tools for AI agents via Model Context Protocol.
13 security tools — DNS, SSL, HTTP headers, email auth, port scan, propagation, reverse DNS, ASN/BGP, RDAP/WHOIS, subnet calc, and comprehensive security scan — callable from Claude Desktop and any MCP-compatible AI agent.
Part of DechoNet. Every tool here is also a free web tool at dechonet.com — no sign-up, no API key — backed by error-fix guides. This package brings the same checks to AI agents.
Quick Start (Claude Desktop)
Add to your claude_desktop_config.json:
{
"mcpServers": {
"dechonet": {
"command": "npx",
"args": ["-y", "dechonet-mcp"]
}
}
}Or if installed locally:
{
"mcpServers": {
"dechonet": {
"command": "node",
"args": ["/path/to/dechonet/mcp/build/index.js"]
}
}
}Config file location:
macOS:
~/Library/Application Support/Claude/claude_desktop_config.jsonWindows:
%APPDATA%\Claude\claude_desktop_config.json
Restart Claude Desktop. You'll see the DechoNet tools icon in the input area.
Related MCP server: domain-security-mcp-server
Install
# Via npx (no install needed)
npx dechonet-mcp
# Or install globally
npm install -g dechonet-mcpAvailable Tools
Tool | Description |
| Comprehensive scan — 9 checks in parallel, 0-100 Health Score, A-F grade |
| DNS records + DNSSEC + SPF/DMARC validation |
| SSL/TLS certificate, chain, TLS version, A-F grade |
| HTTP redirect trace + 10 security headers audit, A-F grade |
| SPF, DMARC, DKIM, BIMI, MTA-STS, DANE + blacklist check |
| Open TCP ports with service identification |
| DNS propagation across 8+ global resolvers |
| PTR record + FCrDNS verification |
| ASN/BGP network identification + abuse contact |
| RDAP/WHOIS domain registration data |
| Public IP, ISP, ASN, proxy detection |
| Email delivery route tracing + auth results |
| CIDR subnet calculator (offline) |
Example Prompts
Once connected, try asking Claude:
"Check the security posture of example.com"
"Is the SSL certificate for mysite.com about to expire?"
"What DNS records does example.com have?"
"Scan the open ports on my-server.com"
"Analyze these email headers: [paste headers]"
"What's the ASN for 8.8.8.8?"
"Calculate the subnet for 10.0.0.0/16"
SSE Transport (Remote)
For remote/HTTP-based MCP connections:
cd mcp
npm run start:sse
# Server runs on http://localhost:3100
# SSE endpoint: http://localhost:3100/sseDevelopment
cd mcp
npm install
npm run build # TypeScript → build/
npm run dev # Run with tsx (stdio)
npm run start:sse # Run SSE serverHow It Works
The MCP server calls DechoNet's public API (https://dechonet.com/api/util/*) — the same backend as the dechonet.com web tools — and returns structured results with:
Status (ok/warn/bad)
KPIs (key performance indicators per tool)
Issues with severity (critical/warning/info) and confidence levels
Actionable remediation steps
Raw data (full JSON)
All data comes from public sources (DNS, HTTP headers, SSL certificates, RDAP). No active exploitation.
Environment Variables
Variable | Default | Description |
|
| API base URL |
|
| Response language ( |
|
| SSE server port |
About DechoNet
DechoNet is a domain security reconnaissance platform — distributed observation, cross-verification. The same diagnostics ship three ways: free web tools, error-fix guides, and this MCP server.
🌐 Web tools (free, no sign-up): https://dechonet.com
📘 Guides (fix common DNS/SSL/HTTP/email errors): https://dechonet.com/guides
MIT licensed. Issues and PRs welcome.
Available Tools
13 toolsasn_lookupA
Look up Autonomous System (ASN) / BGP information for an IP address or AS number: the network operator, announced prefixes, abuse contact, and a classification (cloud, CDN, ISP, hosting, or enterprise). Use this to identify who runs a network or whether an IP is cloud/CDN-hosted. Use reverse_dns instead for the host-level PTR name of a single IP. Read-only; requires no API key; rate-limited. Returns operator, prefixes, classification, and abuse contact.
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | An IP address (e.g., '1.1.1.1') or an AS number in 'AS####' form (e.g., 'AS13335'). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description fully discloses behavior: it is read-only, requires no API key, and is rate-limited. It lists the return fields but does not mention error handling (e.g., if query is invalid or not found), which would improve transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and well-structured: purpose first, then usage guidance, then constraints and return fields. No redundant or unnecessary information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given there is no output schema, the description sufficiently lists the return fields (operator, prefixes, classification, abuse contact) and constraints (read-only, rate-limited, no API key). It covers all essential context for a simple lookup tool with good sibling differentiation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the single parameter 'query' is already well-described in the schema. The description restates the same information (IP address or AS number format) without adding new semantic meaning beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses the specific verb 'Look up' and clearly identifies the resource (Autonomous System / BGP information) and the returned data (operator, prefixes, classification, abuse contact). It explicitly distinguishes from the sibling 'reverse_dns' by stating when to use that instead.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit context for when to use the tool ('identify who runs a network or whether an IP is cloud/CDN-hosted') and when not to (use reverse_dns for host-level PTR). It also notes that it is read-only, requires no API key, and is rate-limited.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dns_lookupA
Query DNS records (A, AAAA, MX, TXT, NS, SOA, CAA) for a domain and validate email-related records, including DNSSEC presence and SPF/DMARC syntax, returning severity-rated diagnostics. Use this for a single authoritative answer about one domain. Use dns_propagation instead when you need to compare answers across multiple global resolvers (e.g., right after a change), or email_auth for a full SPF/DKIM/DMARC deliverability assessment. Read-only; requires no API key or authentication; subject to rate limiting. Returns a text report: status, KPI summary, detected issues, and recommended actions.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Registrable domain or hostname to query, without scheme or path (e.g., 'example.com' or 'mail.example.com'). Do not include 'http://' or a trailing slash. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It states 'Read-only; requires no API key or authentication; subject to rate limiting' and describes the return format (text report with status, KPI, issues, actions). This provides good behavioral context, though specific rate limits or error handling are not mentioned.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise (three sentences) and well-structured: first sentence states purpose and capabilities, second provides usage guidance, third covers behavioral traits and return format. Every sentence adds essential information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has one parameter and no output schema, but the description sufficiently explains that it returns a text report with status, KPI, issues, and actions. It covers the main behavioral aspects (read-only, no auth, rate limiting). However, it does not describe error handling or what happens for invalid domains.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with a clear description for the 'domain' parameter. The description adds value by explaining what the tool does with the domain (querying specific record types and validating email records), which enriches the parameter meaning beyond the schema alone.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly specifies that the tool queries DNS records (A, AAAA, MX, TXT, NS, SOA, CAA) and validates email-related records, including DNSSEC and SPF/DMARC. It distinguishes itself from sibling tools like dns_propagation and email_auth by stating its unique scope.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit guidance: 'Use this for a single authoritative answer about one domain. Use dns_propagation instead when you need to compare answers across multiple global resolvers... or email_auth for a full SPF/DKIM/DMARC deliverability assessment.' This clearly tells the agent when to choose this tool over alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dns_propagationA
Query one DNS record across 8+ global public resolvers (Google, Cloudflare, Quad9, OpenDNS, and more) simultaneously and report which resolvers return stale versus updated values. Use this after changing a record to confirm worldwide propagation. Use dns_lookup instead for a single authoritative answer with SPF/DMARC validation. Read-only; requires no API key; rate-limited. Returns per-resolver values and a consistency verdict.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Domain whose record to compare across resolvers (e.g., 'example.com'), without scheme or path. | |
| type | No | DNS record type to compare across resolvers. Defaults to A (IPv4 address), the most common propagation check. | A |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description fully covers behavioral traits. It discloses that the tool is read-only, requires no API key, is rate-limited, queries across 8+ resolvers, and returns per-resolver values and a consistency verdict. These details exceed what an agent would infer from the schema alone and provide a clear operational picture.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences long, front-loading the core functionality in the first sentence and adding usage guidance and sibling differentiation in the second. Every sentence serves a purpose with no wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having no output schema, the description implies the return structure (per-resolver values and a consistency verdict). It also covers rate limiting, authentication, and appropriate use cases. Given the moderate complexity (2 parameters, 1 required), the description provides enough contextual detail for an agent to understand, invoke, and interpret results correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% description coverage for both parameters (domain and type), so the baseline is 3. The tool description adds value by noting that the default type 'A' is 'the most common propagation check,' providing context beyond the schema description. This extra semantic guidance justifies a score above baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it queries one DNS record across 8+ global resolvers and reports stale vs updated values. It uses a specific verb ('Query') and resource ('DNS record'), and distinguishes itself from the sibling tool dns_lookup by noting its focus on propagation confirmation rather than authoritative answers with SPF/DMARC validation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use this tool: 'Use this after changing a record to confirm worldwide propagation.' It also contrasts with the sibling dns_lookup, saying 'Use dns_lookup instead for a single authoritative answer with SPF/DMARC validation,' and mentions the tool is read-only, requires no API key, and is rate-limited.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
email_authA
Assess a domain's email authentication and deliverability posture: MX records, SPF, DMARC, DKIM (probes 15 common selectors), BIMI, MTA-STS, TLS-RPT, and DANE, plus a blacklist check across all MX hosts, returning a 0-100 deliverability score. Use this for a full sending/receiving readiness review of a domain. Use dns_lookup instead if you only need raw TXT/MX records, or email_header_analysis to diagnose a specific message that was already sent. Read-only; requires no API key; rate-limited. Returns a text report: score, per-mechanism KPIs, issues, and actions.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Email domain to assess — the part after '@' (e.g., 'example.com'). An IP address is also accepted for reverse/PTR-based checks. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses read-only nature, no API key requirement, rate-limiting, and output format: 'Returns a text report: score, per-mechanism KPIs, issues, and actions.' No annotations provided, so description carries full burden and does so thoroughly.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is a single paragraph but efficiently structured: front-loads purpose, then lists mechanisms, usage guidance, alternatives, and limitations. Slightly lengthy but each sentence adds value; no fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given complexity (multiple checks, scoring) and no output schema, description explains return value in detail: '0-100 deliverability score... text report: score, per-mechanism KPIs, issues, and actions.' Covers all necessary context for an AI agent to understand behavior.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% for the single parameter 'domain'. Description adds meaning beyond schema: specifies format (part after '@'), example, and accepts IP for reverse/PTR checks. This clarifies usage beyond simple schema definition.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states its purpose: 'Assess a domain's email authentication and deliverability posture' and lists specific mechanisms (MX, SPF, DMARC, etc.). It distinguishes from siblings like dns_lookup and email_header_analysis by specifying focus and scope.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit usage guidance: 'Use this for a full sending/receiving readiness review of a domain.' Also provides when-not and alternatives: 'Use dns_lookup instead if you only need raw TXT/MX records, or email_header_analysis to diagnose a specific message that was already sent.'
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
email_header_analysisA
Parse raw email headers to reconstruct the delivery path (each Received hop in order), extract SPF/DKIM/DMARC authentication results, measure per-hop delays, and flag unencrypted (non-TLS) hops. Use this to diagnose a specific message that was already delivered — spoofing, delays, or where mail was lost. Use email_auth instead to assess a domain's sending configuration before sending. Read-only; requires no API key; rate-limited. INPUT is the full raw header block. OUTPUT is a text report containing: the ordered hop route, per-mechanism auth results (pass/fail), detected inter-hop delays, and the encryption status of each hop.
| Name | Required | Description | Default |
|---|---|---|---|
| headers | Yes | The complete raw email header block, copied verbatim — every line from the first 'Received:'/'From:' down to the blank line before the body. Paste as-is, including folded continuation lines; do not include the message body. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description fully covers behavior: read-only, no API key required, rate-limited, and details the input format and output contents, ensuring the agent understands side effects and constraints.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise, front-loaded with the core action, and every sentence adds value. It covers purpose, usage, and key details without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity and absence of output schema, the description adequately specifies all major outputs (hop route, auth results, delays, encryption) and covers input format, rate limits, and use cases, making it complete for agent understanding.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and already provides detailed instructions for the 'headers' parameter. The main description only reiterates 'INPUT is the full raw header block' without adding new semantic value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool parses raw email headers to reconstruct the delivery path, extract authentication results, measure delays, and flag unencrypted hops. It distinguishes itself from the sibling email_auth by specifying different use cases.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to use (diagnose a specific delivered message) and when not to (use email_auth for domain configuration assessment), providing clear context and alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
http_securityA
Follow a URL's HTTP redirect chain and audit response security headers (CSP, HSTS, X-Frame-Options, COOP, CORP, COEP, Permissions-Policy), grading A+ to F and flagging information leaks such as server-version disclosure. Use this for HTTP-layer/header posture. Use ssl_check instead for certificate or TLS-handshake issues, or security_scan for a full domain report. Read-only (an HTTP GET-style probe that sends no payload); requires no API key; rate-limited. Returns a text report: grade, header findings, redirect trace, issues, and actions.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | Full URL including scheme (e.g., 'https://example.com/path'). If the scheme is omitted, https:// is assumed. Redirects are followed starting from this URL. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description fully carries burden. Clearly states read-only nature (GET-style probe, no payload), no API key requirement, rate-limiting, and return type (text report with grade, issues, actions).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Concise, front-loaded with core action, then details, then alternatives. Every sentence adds value with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite no output schema, the description thoroughly covers return content (grade, header findings, redirect trace, issues, actions). Given low parameter count (1) and complexity of security audit, description is complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% for the single param 'url'. Description adds value by noting scheme default (https) and redirect behavior, going beyond schema. Baseline 3, plus extra context makes 4.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description explicitly states it follows HTTP redirects and audits security headers, grading A+ to F. Clearly distinguishes from sibling tools by naming alternatives (ssl_check, security_scan).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit when-to-use context (HTTP-layer/header posture) and when-not-to-use alternatives (ssl_check for TLS, security_scan for full domain).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ip_infoA
Report information about the caller's own public IP as seen by the server: IPv4/IPv6 address, ISP, ASN, approximate geolocation, and proxy/VPN heuristics. Takes no input — it reflects the egress IP of THIS MCP server's network, which is usually NOT the end user's IP. Use this to discover the server's outbound IP or test connectivity. To inspect a specific, known IP instead, use asn_lookup or reverse_dns. Read-only; requires no API key; rate-limited.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden and delivers thoroughly. It discloses that the tool reflects the MCP server's egress IP (not the end user's), states it is read-only, requires no API key, and is rate-limited. All critical behavioral traits are explicitly covered.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences long, front-loads the key information, and every sentence adds value. No unnecessary words or repetition. Highly efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description fully compensates by listing all types of returned information (address, ISP, ASN, geolocation, heuristics). It also covers scope (server's IP vs user's IP), safety (read-only), authentication (no key), and limits (rate-limited). For a zero-parameter tool, this is complete and leaves no gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters and schema coverage is 100%. The description explains it takes no input, which adds value by confirming the tool is input-free. Baseline 4 is appropriate since there is nothing to add beyond that.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool reports information about the caller's own public IP, listing specific data points (IPv4/IPv6, ISP, ASN, geolocation, proxy/VPN heuristics). It distinguishes from siblings like asn_lookup by noting that ip_info reflects the server's egress IP, not a specific known IP.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says when to use (discover server's outbound IP, test connectivity) and when not (to inspect a specific known IP). It names two alternative tools (asn_lookup, reverse_dns) for the latter case. Provides clear decision guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
port_scanA
Probe a host for a fixed set of common TCP ports (HTTP, HTTPS, SSH, FTP, SMTP, DNS, and common databases) and report which are open, the service name, and the response time. BEHAVIOR: this makes an ACTIVE TCP connection to the target. It is non-intrusive — a connect probe only; it does not authenticate, send exploits, or transfer data — and changes nothing on the target (read-only), but the connection is visible in the target's logs, so only scan hosts you own or are explicitly authorized to test. Use this to confirm which services are exposed. Use ssl_check or http_security instead to assess a specific service's configuration. Requires no API key; rate-limited. Returns a per-port open/closed list with service names.
| Name | Required | Description | Default |
|---|---|---|---|
| host | Yes | Hostname or IP to probe (e.g., 'example.com' or '203.0.113.10'). A 'host:port' form is accepted to hint a specific port. Only supply targets you own or are authorized to test. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description fully carries the behavioral disclosure burden. It explains the tool makes active TCP connections, is non-intrusive (connect probe only, no authentication/exploits/data transfer), is read-only but visible in target logs. It also notes rate limiting and lack of API key requirements, providing complete transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is efficiently structured, starting with the core action, then behavioral notes, usage guidelines, and constraints. Every sentence adds unique value without redundancy, and it is appropriately sized given the tool's complexity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite no output schema, the description explains return type (per-port open/closed list with service names). It covers input, behavior, constraints (authorization, visibility in logs), and rate limits. All necessary context for an agent to select and invoke the tool correctly is present.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With only one parameter and 100% schema description coverage, the baseline is 3. The description adds value by clarifying the host parameter can accept a 'host:port' form to hint a specific port and emphasizes authorization, but the schema already describes the parameter well.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool probes a host for common TCP ports and reports open ports, service names, and response times. It uses specific verbs like 'probe' and 'report', and distinguishes from siblings by naming ssl_check and http_security as alternatives for specific service configuration assessment.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use the tool ('confirm which services are exposed') and when not to ('use ssl_check or http_security instead'). It also includes authorization requirements and rate limits, guiding appropriate usage.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
reverse_dnsA
Resolve the PTR (reverse DNS) record for an IPv4 or IPv6 address and verify forward-confirmed reverse DNS (FCrDNS) by checking that the PTR hostname resolves back to the same IP. Infers the hosting provider from PTR naming patterns. Use this to validate mail-server rDNS or identify a single IP's host. Use asn_lookup instead for network/BGP ownership of the IP. Read-only; requires no API key; rate-limited. Returns the PTR hostname, FCrDNS pass/fail, and a provider guess.
| Name | Required | Description | Default |
|---|---|---|---|
| ip | Yes | IP address to reverse-resolve, IPv4 or IPv6 (e.g., '8.8.8.8' or '2001:4860:4860::8888'). Must be an IP, not a hostname. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Despite no annotations, the description discloses key traits: read-only, no API key, rate-limited, and the return values (PTR hostname, FCrDNS pass/fail, provider guess). Lacks details on error scenarios or edge cases, but sufficient for most use cases.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single, well-structured paragraph. Front-loaded with the main action, then details, usage guidance, and notes. Every sentence serves a purpose with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple single-parameter tool without output schema, the description fully covers functionality, usage context, return values, and sibling differentiation. No gaps identified.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with a descriptive parameter comment. The description adds the constraint 'Must be an IP, not a hostname', which goes beyond the schema and prevents misuse.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it resolves PTR records and verifies FCrDNS, with a specific verb ('resolve') and resource ('PTR record'). It distinguishes itself from the sibling tool 'asn_lookup' by specifying when to use each.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly provides use cases ('validate mail-server rDNS or identify a single IP's host') and alternatives ('Use asn_lookup instead for network/BGP ownership'). Also notes read-only nature, no API key requirement, and rate limiting.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
security_scanA
One-shot comprehensive audit of a domain: runs DNS, SSL, HTTP headers, email auth, port scan, DNS propagation, reverse DNS, and ASN/RDAP checks in parallel, then computes a 0-100 Health Score with an A-F grade and a prioritized action list. Use this as the default starting point for "is this domain healthy/secure?" questions. Call the individual tools (e.g., ssl_check, email_auth) instead when you need depth on one area. BEHAVIOR: this includes an ACTIVE port_scan of the domain's host, so only run it on domains you own or are authorized to test. Read-only otherwise; requires no API key; rate-limited (it makes multiple backend calls). Returns the score, per-area breakdown, top actions, and per-area summaries.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Domain to audit end-to-end (e.g., 'example.com'). Scheme and path are stripped. NOTE: the host is also port-scanned, so use only targets you are authorized to test. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, but description fully covers behavior: includes active port scan (authorization needed), read-only otherwise, no API key, rate-limited, and what it returns (score, breakdown, actions, summaries).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and front-loaded; every sentence adds value. It is appropriately sized for the complexity of the tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite no output schema, the description explains what is returned (score, per-area breakdown, top actions, summaries). Given the single parameter, the description is complete and leaves no ambiguity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There is only one parameter (domain) with 100% schema description coverage. The tool description repeats the information from the schema, adding no new meaning beyond what the schema already provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states the tool performs a one-shot comprehensive audit of a domain with multiple specific checks (DNS, SSL, etc.) and computes a health score and grade. It clearly distinguishes from sibling tools by naming alternatives for depth.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says to use as default starting point and advises to call individual tools for depth on one area. Gives when to use and when not to use, with alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ssl_checkA
Inspect a host's served TLS/SSL certificate and connection: expiry date, issuer, SAN list, chain integrity, TLS version, and HSTS, returning an A+ to F grade weighted by certificate validity (40%), TLS version (25%), chain trust (15%), and HSTS (20%). Use this to diagnose certificate or HTTPS-handshake problems for one host. Use http_security instead to audit response security headers, or security_scan for an all-in-one domain report. Read-only: it completes a TLS handshake but sends no application data; requires no API key; rate-limited. Returns a text report: grade, expiry/issuer KPIs, issues, and actions.
| Name | Required | Description | Default |
|---|---|---|---|
| host | Yes | Hostname to inspect, without scheme (e.g., 'example.com'). The host portion of a pasted URL is also accepted. | |
| port | No | TCP port for the TLS handshake. Defaults to 443 (standard HTTPS); set this only for a non-standard HTTPS port such as 8443. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description fully covers behavioral traits: it states it is read-only, completes a TLS handshake but sends no application data, requires no API key, and is rate-limited. It also discloses the grading weights (40% certificate validity, etc.) and what the return report contains.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise at about five sentences, all directly contributing to understanding the tool. It starts with the main purpose and includes usage guidance, behavioral transparency, and return format. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has only 2 simple parameters, no output schema, and no annotations, the description is complete. It explains the input (host, port), the process (TLS handshake, grading), the output (text report with grade, KPIs, issues, actions), and the constraints (read-only, no API key, rate-limited). No gaps remain.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and both parameters have descriptions. The tool description adds value by clarifying the port default (443) and advising to change only for non-standard ports, which is helpful beyond the schema. It does not add much additional semantics for the host parameter but the schema already covers it.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool inspects a host's TLS/SSL certificate and connection, providing a detailed report including grade. It explicitly distinguishes itself from sibling tools 'http_security' and 'security_scan', making its unique purpose clear.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says 'Use this to diagnose certificate or HTTPS-handshake problems for one host' and provides direct alternatives: 'Use http_security instead to audit response security headers, or security_scan for an all-in-one domain report.' This provides clear when-to-use and when-not-to-use guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
subnet_calcA
Compute IPv4 subnet details from CIDR notation entirely locally — no network call: network and broadcast addresses, usable host range, total usable hosts, subnet mask, and wildcard mask. /31 and /32 are handled per RFC 3021 (point-to-point / single host). Use this for IPv4 address planning. It does not query DNS or contact any host, so it is purely computational. Requires no API key and is NOT rate-limited (computed in-process). Returns the calculated fields as text.
| Name | Required | Description | Default |
|---|---|---|---|
| cidr | Yes | IPv4 address with a CIDR prefix length 0-32 (e.g., '192.168.1.0/24'). IPv4 only; host bits may be any address inside the block. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Description fully discloses local computation, no network calls, handling of /31 and /32 per RFC 3021, and that it requires no API key and is not rate-limited. No annotations provided, so description carries full burden and meets it thoroughly.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single paragraph of 4 sentences, front-loads the main action, and covers all necessary details without redundancy. Every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (1 param, no output schema), the description is complete: it explains the computation, special cases, return fields, and constraints. It compensates for the lack of output schema by describing results.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single parameter 'cidr' has full schema coverage (100%) with a clear description. The tool description adds context about IPv4 only and special cases but does not significantly augment schema semantics. Baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool computes IPv4 subnet details from CIDR notation locally, listing specific outputs like network/broadcast addresses and usable host range. It distinguishes from sibling tools (e.g., dns_lookup, ip_info) by emphasizing it's purely computational with no network call.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states 'Use this for IPv4 address planning' and notes it does not query DNS or contact any host. Also mentions no API key needed and not rate-limited, guiding when to choose this over network-dependent siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
whois_lookupA
Retrieve domain registration data via RDAP (with WHOIS fallback): registrar, creation/expiry/update dates, nameservers, and EPP status flags, highlighting risk states such as clientHold and pendingDelete. Use this for ownership, lifecycle, and expiry questions about a registered domain. Use dns_lookup instead for live DNS records, or reverse_dns/asn_lookup for IP-level ownership. Read-only; requires no API key; rate-limited. Returns registrar, key dates, nameservers, and status flags.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Registered domain name to look up (e.g., 'example.com'). A subdomain is normalized to its registrable domain. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Description discloses read-only nature, no API key required, rate-limiting, and fallback behavior. Since no annotations exist, description fully bears the burden and does so effectively. No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise: two sentences front-loaded with the main action and return fields. Each sentence adds value—purpose, data returned, risk highlights, usage guidance, alternatives, and behavioral notes. No redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given a single parameter, no output schema, and no annotations, the description covers purpose, usage, output details, alternatives, and behavioral notes. It is complete for an agent to select and invoke correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% for the single parameter 'domain'. The description adds critical context: 'A subdomain is normalized to its registrable domain', which is beyond the schema description. This aids correct usage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool retrieves domain registration data via RDAP with WHOIS fallback, listing specific data fields (registrar, dates, nameservers, EPP status flags) and risk states. It distinguishes itself from siblings dns_lookup, reverse_dns, and asn_lookup.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit guidance: use for ownership, lifecycle, and expiry questions. Alternatives are named: dns_lookup for live DNS, reverse_dns/asn_lookup for IP-level ownership. This clarifies when to use this tool versus siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
12 tool updates
v1.0.3- Changed
asn_lookup1 field changed- changed
Input schema / properties / query / descriptionPrevious value: -"ASN (e.g., AS13335) or IP address"New value: +"An IP address (e.g., '1.1.1.1') or an AS number in 'AS####' form (e.g., 'AS13335')."
- Changed
dns_lookup1 field changed- changed
Input schema / properties / domain / descriptionPrevious value: -"Domain name to query (e.g., example.com)"New value: +"Registrable domain or hostname to query, without scheme or path (e.g., 'example.com' or 'mail.example.com'). Do not include 'http://' or a trailing slash."
- Changed
dns_propagation2 fields changed- changed
Input schema / properties / domain / descriptionPrevious value: -"Domain to check"New value: +"Domain whose record to compare across resolvers (e.g., 'example.com'), without scheme or path." - changed
Input schema / properties / type / descriptionPrevious value: -"Record type"New value: +"DNS record type to compare across resolvers. Defaults to A (IPv4 address), the most common propagation check."
- Changed
email_auth1 field changed- changed
Input schema / properties / domain / descriptionPrevious value: -"Domain or IP to check (e.g., example.com or 1.2.3.4)"New value: +"Email domain to assess — the part after '@' (e.g., 'example.com'). An IP address is also accepted for reverse/PTR-based checks."
- Changed
email_header_analysis1 field changed- changed
Input schema / properties / headers / descriptionPrevious value: -"Raw email headers to analyze (paste the full header text)"New value: +"The complete raw email header block, copied verbatim — every line from the first 'Received:'/'From:' down to the blank line before the body. Paste as-is, including folded continuation lines; do not include the message body."
- Changed
http_security1 field changed- changed
Input schema / properties / url / descriptionPrevious value: -"URL to check (e.g., https://example.com)"New value: +"Full URL including scheme (e.g., 'https://example.com/path'). If the scheme is omitted, https:// is assumed. Redirects are followed starting from this URL."
- Changed
port_scan1 field changed- changed
Input schema / properties / host / descriptionPrevious value: -"Hostname or IP to scan (e.g., example.com or example.com:443)"New value: +"Hostname or IP to probe (e.g., 'example.com' or '203.0.113.10'). A 'host:port' form is accepted to hint a specific port. Only supply targets you own or are authorized to test."
- Changed
reverse_dns1 field changed- changed
Input schema / properties / ip / descriptionPrevious value: -"IP address to look up (IPv4 or IPv6)"New value: +"IP address to reverse-resolve, IPv4 or IPv6 (e.g., '8.8.8.8' or '2001:4860:4860::8888'). Must be an IP, not a hostname."
- Changed
security_scan1 field changed- changed
Input schema / properties / domain / descriptionPrevious value: -"Domain to scan comprehensively (e.g., example.com)"New value: +"Domain to audit end-to-end (e.g., 'example.com'). Scheme and path are stripped. NOTE: the host is also port-scanned, so use only targets you are authorized to test."
- Changed
ssl_check2 fields changed- changed
Input schema / properties / host / descriptionPrevious value: -"Hostname to check (e.g., example.com)"New value: +"Hostname to inspect, without scheme (e.g., 'example.com'). The host portion of a pasted URL is also accepted." - changed
Input schema / properties / port / descriptionPrevious value: -"Port number (default: 443)"New value: +"TCP port for the TLS handshake. Defaults to 443 (standard HTTPS); set this only for a non-standard HTTPS port such as 8443."
- Changed
subnet_calc1 field changed- changed
Input schema / properties / cidr / descriptionPrevious value: -"IP with CIDR prefix (e.g., 192.168.1.0/24)"New value: +"IPv4 address with a CIDR prefix length 0-32 (e.g., '192.168.1.0/24'). IPv4 only; host bits may be any address inside the block."
- Changed
whois_lookup1 field changed- changed
Input schema / properties / domain / descriptionPrevious value: -"Domain name to look up"New value: +"Registered domain name to look up (e.g., 'example.com'). A subdomain is normalized to its registrable domain."
13 tool updates
v0.1.0- First observed
asn_lookup - First observed
dns_lookup - First observed
dns_propagation - First observed
email_auth - First observed
email_header_analysis - First observed
http_security - First observed
ip_info - First observed
port_scan - First observed
reverse_dns - First observed
security_scan - First observed
ssl_check - First observed
subnet_calc - First observed
whois_lookup
TDQS
Each tool targets a specific aspect of network or domain diagnostics with clear boundaries. Overlapping areas like DNS vs. DNS propagation or email auth vs. email header analysis are effectively differentiated by descriptions and use cases.
All tool names follow a consistent snake_case pattern with a clear convention: typically first word is the resource (asn, dns, email, http, etc.) and second word is the action or property (lookup, scan, calc, auth, etc.). No naming conflicts or style mixing.
With 13 tools covering DNS, email, SSL, HTTP, IP, WHOIS, and more, the count is well-scoped for a comprehensive domain security and diagnostics server. Each tool serves a distinct purpose without bloat.
The set covers major diagnostic areas: DNS records and propagation, email authentication and header analysis, SSL/TLS, HTTP security headers, port scanning, WHOIS, ASN, reverse DNS, subnet calculation, and a meta security scan. Obvious gaps are absent.
Maintenance
Related MCP Connectors
Domain intel for AI agents: RDAP registration, DNS, email deliverability, tech stack.
61Domain intel for AI agents: RDAP registration, DNS, email deliverability, tech stack.
29 pay-per-call DNS, SEO, SSL, security, and dev tools for AI agents. x402, no API key.
URL intelligence for AI agents and developers. 16 tools, 25 signal weights, 20 free checks.
Related MCP Servers
- AlicenseAqualityAmaintenanceSecurity intelligence API for AI models. CVE lookup with EPSS/KEV, domain recon (DNS, WHOIS, SSL, subdomains, WAF), and code security checks (secrets, injection, headers). 16 tools, no API key required.5533MIT
- AlicenseAqualityDmaintenanceEnables AI agents to audit email and domain security (SPF, DKIM, DMARC, etc.) for any domain without requiring API keys.19MIT
- AlicenseAqualityBmaintenanceComprehensive DNS security toolkit for AI agents: 103 tools across 13 categories including DNSSEC validation, subdomain takeover detection, email security audit, and more, all running locally with no external API calls required.1001265MIT
- AlicenseNot gradedqualityCmaintenanceProvides live infrastructure monitoring for AI agents, including domain health checks, MCP server security posture, email blacklists, broken-link scans, and cloud vendor status. No signup or API key needed for public tools.MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/node-man/dechonet-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server