About dev.dnsdoctor/mcp
dev.dnsdoctor/mcp is an MCP server in the Healthcare category: email-auth diagnosis (SPF, DMARC, DKIM, MX, blacklist) with validated copy-paste fix records.
Install
git clone https://github.com/dnsdoctor/claude-pluginThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (17)
audit_spf_includesThe SPF include/redirect tree — who can transitively send as the domain, with typed findings (broken include, confirmed-unregistered include, expiring registration, nested `+all`). Analysis only; no SPF fix record.
Parameters not published.
build_dmarc_upgradeA validated DMARC enforcement record, capped at `p=quarantine` and returned only when the server-derived alignment gate passes; without that evidence the answer is reporting-first and no record is returned. `p=reject` comes from the readiness engine's aggregate-report evidence, never from a scan.
Parameters not published.
build_parked_domain_recordsThe Null MX + `v=spf1 -all` + `p=reject; np=reject` hardening pack for a domain that sends no mail. The server re-checks DNS itself and refuses when it finds evidence of mail.
Parameters not published.
check_dkim_selectorLook up one DKIM selector and check the key.
Parameters not published.
check_propagationWhether a DNS change has gone global: six vantage points (five owner-run probes plus the server's own resolver) read the same name, returning the grid plus a deterministic verdict. Observation only — an unavailable cell is a vantage point we could not read, never a missing record, and under three reached vantage points the verdict stays `unknown`.
Parameters not published.
check_recordRead any DNS record type for a name.
Parameters not published.
check_reverse_dnsPTR / forward-confirmed reverse DNS for an IP.
Parameters not published.
count_spf_lookupsThe SPF DNS-lookup count against the RFC limit of 10.
Parameters not published.
generate_dmarc_recordBuild a DMARC record from a policy + reporting address.
Parameters not published.
get_alerts**Token required.** The account's monitoring alert log, newest first. Read-only — no acknowledge, no delete. Page down with `before` until `next_before` is `null` before advancing `since`.
Parameters not published.
Show all 17 tools
get_readiness**Token required.** Whether one monitored domain's aggregate-report evidence justifies a stronger DMARC policy yet: `ready`, the `blockers`, and `next_record` (validated, or `null` while blocked — which is an answer, not a gap).
Parameters not published.
get_reportPersisted report (scans once if none exists).
Parameters not published.
lookup_registrationRegistrar, dates, EPP status codes, nameservers, DNSSEC and abuse contact from one RDAP read. Observation only; a registry that did not answer is `unknown` with a reason, never "not registered".
Parameters not published.
parse_dmarc_reportParse an aggregate (RUA) report file into rows.
Parameters not published.
scan_domainFresh scan of a domain; full report.
Parameters not published.
start_monitoring_signupA sign-up link to hand to the human who owns the domain. Sends no email and creates nothing — they open it, sign in on our page themselves (a social provider or an emailed link, whichever that deployment offers), and the domain is carried over to their dashboard already filled in; monitoring starts once they verify it with a TXT record.
Parameters not published.
validate_dmarc_recordParse and validate a DMARC record, tag by tag.
Parameters not published.
Ask AI
Ask AI about dev.dnsdoctor/mcp
Powered by Claude · Grounded in docs
Security checks
6 checks have not been run yet.