1. Conduid
  2. Security
  3. net.softricks/idig-dns
MCP server · Security

net.softricks/idig-dns

by · github.com/kbhave/MCP-Service-iDig

Professional DNS diagnostics: 14 tools for DNS, DNSSEC, email security, SSL, and propagation.

Unclaimed last commit 7 months ago security
InstallView source
34Low

Scored 6 months ago · breakdown

About net.softricks/idig-dns

net.softricks/idig-dns is an MCP server published by kbhave in the Security category: professional DNS diagnostics: 14 tools for DNS, DNSSEC, email security, SSL, and propagation.

Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/kbhave/MCP-Service-iDig

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (19)

blacklist_checkIP blacklist / DNSBL check — Spamhaus, Barracuda, SpamCop, SORBS, and more

Parameters not published.

dane_validateDANE/TLSA validation — cross-validates TLSA records against live TLS certificate

Parameters not published.

diagnoseFull diagnosis combining resolution + DNSSEC — start here when something is broken

Parameters not published.

dns_lookupLook up any DNS record type: A, AAAA, MX, NS, TXT, SOA, CAA, SRV, CNAME, DS, TLSA, HTTPS, SVCB

Parameters not published.

dnssec_healthKey inventory, signature expiry, algorithm assessment, rollover readiness

Parameters not published.

dnssec_validateDNSSEC chain of trust — returns secure / insecure / bogus / indeterminate

Parameters not published.

domain_statusEPP registrar lock status — transfer-ready, delete lock, serverHold, pendingDelete

Parameters not published.

email_security_auditSPF, DKIM, DMARC, and BIMI audit with A–F grade and prioritized fix recommendations

Parameters not published.

geo_lookupGeolocation, ISP, ASN, CDN detection, hosting flag

Parameters not published.

http_checkHTTP/HTTPS reachability — status codes, redirect chain, HSTS, HTTP→HTTPS redirect

Parameters not published.

Show all 19 tools
mx_checkMX health + provider detection (Google Workspace, M365, Proofpoint, 35+ providers)

Parameters not published.

propagation_checkCheck propagation across 16 global resolvers: Google, Cloudflare, Quad9, China, Korea, Russia

Parameters not published.

resolve_checkResolution diagnostics — returns ok / nxdomain / servfail / timeout / degraded

Parameters not published.

ssl_checkCertificate validity, expiry countdown, domain match, issuer, chain completeness

Parameters not published.

subdomain_discoverProbe 75 common subdomains + crt.sh Certificate Transparency logs — surfaces exposed dev/staging environments

Parameters not published.

ttl_checkTTL advisory with step-by-step migration lowering plan

Parameters not published.

whois_lookupParsed WHOIS data — registrar, expiry, domain age, nameservers, EPP status

Parameters not published.

zone_axfrAXFR zone transfer vulnerability check — tests if any NS allows public zone transfers

Parameters not published.

zone_consistencyCompare all authoritative nameservers — catches lame delegation and SOA mismatches

Parameters not published.

Ask AI

✦

Ask AI about net.softricks/idig-dns

Powered by Claude · Grounded in docs

I know everything about net.softricks/idig-dns. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ✓README presentThe repository ships documentation.

5 checks have not been run yet.

README

iDig DNS MCP Server

A remote MCP server exposing 19 professional DNS diagnostic tools from the iDig API — built by Kedar Bhave ( Softricks ).

Connect any MCP-compatible AI client (Claude Desktop, Cursor, Windsurf, and more) to real DNS infrastructure. Diagnose outages, audit email security, validate DNSSEC, check SSL certificates, trace propagation across 16 global resolvers, and more — all in plain English.

Live endpoint: https://mcp.softricks.net/sse

Quickstart

Claude Desktop

Edit ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "idig-dns": {
      "command": "npx",
      "args": [
        "mcp-remote",
        "https://mcp.softricks.net/sse"
      ]
    }
  }
}

Restart Claude Desktop. You'll see idig-dns appear under Connectors.

Cursor / Windsurf

Add to your MCP settings:

{
  "mcpServers": {
    "idig-dns": {
      "command": "npx",
      "args": [
        "mcp-remote",
        "https://mcp.softricks.net/sse"
      ]
    }
  }
}

Authentication

All tools require a token parameter. Get your token at api.softricks.net/idig/docs.

Tools

Tool Description
dns_lookup Look up any DNS record type: A, AAAA, MX, NS, TXT, SOA, CAA, SRV, CNAME, DS, TLSA, HTTPS, SVCB
resolve_check Resolution diagnostics — returns ok / nxdomain / servfail / timeout / degraded
diagnose Full diagnosis combining resolution + DNSSEC — start here when something is broken
email_security_audit SPF, DKIM, DMARC, and BIMI audit with A–F grade and prioritized fix recommendations
mx_check MX health + provider detection (Google Workspace, M365, Proofpoint, 35+ providers)
dnssec_validate DNSSEC chain of trust — returns secure / insecure / bogus / indeterminate
dnssec_health Key inventory, signature expiry, algorithm assessment, rollover readiness
propagation_check Check propagation across 16 global resolvers: Google, Cloudflare, Quad9, China, Korea, Russia
ssl_check Certificate validity, expiry countdown, domain match, issuer, chain completeness
ttl_check TTL advisory with step-by-step migration lowering plan
zone_consistency Compare all authoritative nameservers — catches lame delegation and SOA mismatches
subdomain_discover Probe 75 common subdomains + crt.sh Certificate Transparency logs — surfaces exposed dev/staging environments
geo_lookup Geolocation, ISP, ASN, CDN detection, hosting flag
domain_status EPP registrar lock status — transfer-ready, delete lock, serverHold, pendingDelete
blacklist_check IP blacklist / DNSBL check — Spamhaus, Barracuda, SpamCop, SORBS, and more
whois_lookup Parsed WHOIS data — registrar, expiry, domain age, nameservers, EPP status
http_check HTTP/HTTPS reachability — status codes, redirect chain, HSTS, HTTP→HTTPS redirect
zone_axfr AXFR zone transfer vulnerability check — tests if any NS allows public zone transfers
dane_validate DANE/TLSA validation — cross-validates TLSA records against live TLS certificate

Example prompts

My emails are going to spam for example.com — token is YOUR_TOKEN

Did my DNS changes propagate yet for example.com? token: YOUR_TOKEN

Run a full security audit on example.com, token YOUR_TOKEN

Is the SSL cert for example.com about to expire? token YOUR_TOKEN

We're migrating example.com to a new host next week — are the TTLs safe? token YOUR_TOKEN

What subdomains does example.com have exposed? token YOUR_TOKEN

Are any of example.com's IPs on a blacklist? token YOUR_TOKEN

Get WHOIS info for example.com — token YOUR_TOKEN

Is example.com reachable over HTTPS? token YOUR_TOKEN

Check if example.com is vulnerable to zone transfers — token YOUR_TOKEN

Validate DANE/TLSA records for example.com — token YOUR_TOKEN

Architecture

Claude Desktop / Cursor / Windsurf
        │
        │  MCP over SSE
        ▼
mcp.softricks.net          ← Railway (always-on Python/FastMCP server)
        │
        │  HTTPS
        ▼
api.softricks.net/idig     ← AWS Lambda (iDig REST API)
        │
        │  DNS queries
        ▼
Live DNS infrastructure

Self-hosting

Clone this repo and deploy your own instance:

git clone https://github.com/kbhave/MCP-Service-iDig
cd MCP-Service-iDig
pip install -r requirements.txt
python mcp_server.py

Or deploy to Railway in one click — connect your GitHub repo and Railway handles the rest.

Requirements:

  • Python 3.11+
  • mcp==1.26.0
  • httpx

Related

License

MIT

README copy captured when this server was indexed; it may lag the repository. The original is authoritative.

Questions

About net.softricks/idig-dns

How do I install net.softricks/idig-dns?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is net.softricks/idig-dns safe to use with an AI agent?

Its trust score is 34 out of 100 (low). It passes 1 of the 1 static security checks run so far. It has no ConduID identity yet, so agent calls to it are not receipted.

Is net.softricks/idig-dns still maintained?

The last commit was 7 months ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.