BlackVeil DNS & Email Security Scanner

by blackveilsecurity.com · remote · no sign-in to list tools · v3.100.1 · published by com.blackveilsecurity

DNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.

Deletes · 1Changes · 54

Compare Registry entry

81 tools: 1 can delete or cancel things, 54 change things and 26 only read.

Scanned Oct 21, 2026

Deletes or cancels1Claude Code: deny: see these tools
Can't be undone0Claude Code: ask
Changes things54Claude Code: ask: see these tools
Only reads26Claude Code: allow: see these tools

5 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http dns https://dns-mcp.blackveilsecurity.com/mcp

Findings

Matches of fixed checks, with the text they matched.

4 warn1 info

Warnscan_domain
The server marks "scan_domain" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "run": a word for a change.
What this check looks for
Warngenerate
The server marks "generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "generate" says "generate": a word for a change.
What this check looks for
Warncheck_root_server_set
The server marks "check_root_server_set" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "check_root_server_set" says "set": a word for a change.
What this check looks for
Warnbrand_audit_single
The server marks "brand_audit_single" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "run": a word for a change.
What this check looks for
Infobrand_audit_get_report
The description mentions "credential".
Matched text
description: "...ed /reports/ download link (same bearer credential as this call). Completed targets whose..."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

81 tools

Deletes or cancels 1Removes, cancels or revokes something.Claude Code: deny

delete_brand_audit_watchPermanently removes a recurring brand-audit watch by watchId.Reads text others writeNo findings
Why it is in this group
- The name "delete_brand_audit_watch" says "delete": a word for removing or ending something.
- The description says "Permanently removes".
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Permanently removes a recurring brand-audit watch by watchId. Owner-scoped — a watchId owned by another principal surfaces as notFound. Returns confirmation of deletion.
Annotations the server declares
- title: Delete Brand Audit Watch
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true

Changes things 54Creates or changes something that can be changed back.Claude Code: ask

assess_spoofabilityCompute a composite email spoofability risk score (0–100, higher = more spoofable) by combining SPF trust surface, DMARC enforcement, and DKIM coverage.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Compute a composite email spoofability risk score (0–100, higher = more spoofable) by combining SPF trust surface, DMARC enforcement, and DKIM coverage. Returns a risk level (minimal→critical), per-control sub-scores, and plain-language summary of how easy it would be to spoof email from the domain. Use when asked how easy it is to spoof email from a domain, or for a composite email spoofing risk score.
Annotations the server declares
- title: Assess Spoofability
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
batch_scanBulk-scan up to 10 domains in parallel.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Bulk-scan up to 10 domains in parallel. Runs a full security audit on each domain in the list and returns score, NIST-aligned letter grade (6-band A+/A/B/C/D/F), and finding counts per domain. Use when you want to audit multiple domains at once or do a bulk scan of several domains simultaneously — distinct from compare_domains which does a side-by-side analysis of 2–5 domains. Version stamps (hoisted once per batch): 'scoringModelVersion' is the scoring POLICY semver and is INDEPENDENT of 'dnsChecksPackageVersion', the @blackveil/dns-checks npm engine-package version — the model version legitimately lags and the two must not be compared. Record 'scoringConfigHash' when citing scores.
Annotations the server declares
- title: Batch Scan
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
batch_scan_startStart a durable asynchronous scan of 1–10 domains.Reads text others writeNo findings
Why it is in this group
- The name "batch_scan_start" says "start": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Start a durable asynchronous scan of 1–10 domains. Returns a stable job ID; replaying the same idempotency key with the same principal, normalized inputs, and scoring versions returns the same job.
Annotations the server declares
- title: Batch Scan Start
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
brand_audit_batch_startEnqueue an async brand audit across up to 50 target domains with optional standard/deep discovery depth, brand aliases, and caller-supplied candidate domains.Reads text others writeNo findings
Why it is in this group
- The name "brand_audit_batch_start" says "start": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Enqueue an async brand audit across up to 50 target domains with optional standard/deep discovery depth, brand aliases, and caller-supplied candidate domains. Returns { auditId, queuedAt, targetCount, etaSeconds } immediately; poll with brand_audit_status and fetch results with brand_audit_get_report once complete. Each target consumes 1 unit of the monthly BRAND_AUDIT_QUOTAS budget.
Annotations the server declares
- title: Brand Audit Batch Start
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
brand_audit_singleRun a full brand audit on a single target with optional standard/deep discovery depth, brand aliases, and caller-supplied candidate domains.Reads text others write1 finding
Why it is in this group
- The description's first verb is "run": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "brand_audit_single" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "run": a word for a change.
  What this check looks for
Description, as the server wrote it
Run a full brand audit on a single target with optional standard/deep discovery depth, brand aliases, and caller-supplied candidate domains. Discovers brand-related domains, looks up registrar + registrant for each candidate, and classifies each into consolidated, real registrar-sprawl shadowIt, authorized vendor dependency, indeterminate, or impersonation relationships. Gated tier-wide by monthly BRAND_AUDIT_QUOTAS (free/agent=0, developer=50, partner=200, enterprise=500, owner=unlimited).
Annotations the server declares
- title: Brand Audit Single
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_agent_discoveryAssess the security posture of IETF BANDAID agent-discovery records (draft-mozleywilliams-dnsop-dnsaid).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Assess the security posture of IETF BANDAID agent-discovery records (draft-mozleywilliams-dnsop-dnsaid). Detects SVCB agent records under _agents/_index._{protocol}._agents, reports whether the discovery zone is DNSSEC-anchored (unsigned = spoofable agent endpoints), evaluates DANE/TLSA binding trust (RFC 6698 §10.1), and checks capability-document integrity (cap / cap-sha256). Read-only; uses Private-Use SVCB param code points pending IANA assignment.
Annotations the server declares
- title: Check Agent Discovery
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_authoritative_dns_infraMeasure authoritative DNS infrastructure posture for a hostname over direct DNS-over-TCP/53 from a single vantage: TCP/53 reachability, the authoritative AA flag, recursion exposur…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Measure authoritative DNS infrastructure posture for a hostname over direct DNS-over-TCP/53 from a single vantage: TCP/53 reachability, the authoritative AA flag, recursion exposure, SOA serial consistency across nameservers, DNSKEY/RRSIG presence (not validation), IPv4/IPv6 answer parity, and unsupported-query handling — plus, for authenticated callers, a zone-transfer refusal test (first response only, no zone data retrieved) and CHAOS version.bind/id.server disclosure. Reports UDP/53 reachability, amplification, EDNS large-response/truncation, DNS cookies/RRL, BGP origin, RPKI, route-leak signals, anycast diversity, vantage latency, and RIR/RDAP as inconclusive — none of those are measured. Uses BV_INFRA_PROBE when available.
Annotations the server declares
- title: Check Authoritative DNS Infra
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_bimiCheck the BIMI brand-logo record at default._bimi.<domain>.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Check the BIMI brand-logo record at default._bimi.<domain>. Validates the logo URL (l=) and the presence of mark-certificate authority evidence (a=) — the a= tag is a bare URL, so the certificate type (VMC or CMC) is not determined — and verifies the DMARC enforcement prerequisite (p=quarantine/reject) that mail clients require before displaying a BIMI logo. Returns findings for a missing/malformed record or unmet prerequisites. Use to assess brand-indicator readiness in inboxes. Part of the scan_domain audit.
Annotations the server declares
- title: Check BIMI
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_caaLook up CAA records for a domain.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Look up CAA records for a domain. Shows which Certificate Authorities are authorized to issue certificates. Part of the scan_domain audit.
Annotations the server declares
- title: Check CAA
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_daneCheck DANE/TLSA certificate pinning for SMTP at port 25.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Check DANE/TLSA certificate pinning for SMTP at port 25. Resolves the domain's MX hosts and looks up TLSA records at _25._tcp.<mx-host>, validating their syntax, usage/selector/matching-type fields and DNSSEC backing on the MX host's zone. The record is reported as present but UNVERIFIED: there is no certificate probe for port 25/SMTP, so the pinned data is never compared against the certificate the mail server actually serves (the comparable capture-and-compare pipeline exists only for check_dane_https at port 443, and is itself currently kill-switched there — see that tool's description). Use when asked if SMTP mail servers publish DANE/TLSA pinning; this does not confirm the pin matches the live certificate. For HTTPS DANE at port 443, use check_dane_https instead. Part of the scan_domain audit.
Annotations the server declares
- title: Check DANE
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_dane_httpsVerify DANE certificate pinning for HTTPS connections.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Verify DANE certificate pinning for HTTPS connections. Looks up TLSA records at _443._tcp.{domain} (port 443) and validates their syntax, usage/selector/matching-type fields and DNSSEC backing. The record is reported as present but UNVERIFIED in every deployment: comparison against the certificate the host actually serves is currently withdrawn because the operator probe vantage cannot observe the origin certificate (finding metadata notAssessedReason probe_vantage_intercepted when the probe is bound), so a stale pin is NOT detected here. Distinct from check_dane which covers SMTP at port 25. Part of the scan_domain audit.
Annotations the server declares
- title: Check DANE HTTPS
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_dblCheck domain reputation against DNS-based Domain Block Lists (Spamhaus DBL, URIBL, SURBL).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Check domain reputation against DNS-based Domain Block Lists (Spamhaus DBL, URIBL, SURBL). Returns listing status with decoded return codes.
Annotations the server declares
- title: Check DBL
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_dkimLook up DKIM records for a domain.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Look up DKIM records for a domain. Probes common selectors, validates the signing algorithm used for outgoing email (RSA-1024/2048, Ed25519), and reports key strength. Use to verify that outbound email signatures are cryptographically sound. Part of the scan_domain audit.
Annotations the server declares
- title: Check DKIM
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_dmarcLook up and validate the DMARC record for a domain.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Look up and validate the DMARC record for a domain. Shows the enforcement level (none/quarantine/reject), alignment mode (strict/relaxed), and aggregate/forensic reporting destinations. Use to determine a domain's DMARC enforcement level, whether it sends aggregate reports, or if it is protected against email impersonation — distinct from check_shadow_domains (which checks TLD variants) and assess_spoofability (composite score). Part of the scan_domain audit.
Annotations the server declares
- title: Check DMARC
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_dnskey_strengthAudit the cryptographic strength of DNSKEY signing algorithms used for DNSSEC.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Audit the cryptographic strength of DNSKEY signing algorithms used for DNSSEC. Reports which algorithm is used for DNSSEC signing keys (RSA/SHA-1, RSA/SHA-256, ECDSA P-256, Ed25519, etc.), flags deprecated algorithms (RSA/SHA-1, DSA), independent of whether the DNSSEC chain validates. Use when asked what algorithm is used for DNSSEC signing keys, or if deprecated DNSKEY algorithms are in use. Part of the scan_domain audit.
Annotations the server declares
- title: Check Dnskey Strength
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_dnssecCheck DNSSEC status for a domain.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Check DNSSEC status for a domain. Verifies whether DNS is tamper-proof and protected against cache poisoning and DNS spoofing attacks by validating DNSKEY and DS records. Reports whether DNSSEC is enabled and validating. Part of the scan_domain audit.
Annotations the server declares
- title: Check DNSSEC
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_dnssec_chainWalk the full DNSSEC chain of trust from the DNS root down to the target domain, tracing DS/DNSKEY records and algorithm usage at each zone level.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Walk the full DNSSEC chain of trust from the DNS root down to the target domain, tracing DS/DNSKEY records and algorithm usage at each zone level. Use when asked to trace the chain of trust from the DNS root, or to see the full DNSSEC delegation path step by step.
Annotations the server declares
- title: Check DNSSEC Chain
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_fast_fluxDetect fast-flux DNS behavior: performs multiple rounds of A/AAAA queries and checks whether IP addresses are rotating rapidly on each DNS query (a sign of botnet or malicious infr…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Detect fast-flux DNS behavior: performs multiple rounds of A/AAAA queries and checks whether IP addresses are rotating rapidly on each DNS query (a sign of botnet or malicious infrastructure). Compares IP answer sets and TTLs across rounds to identify rapidly rotating infrastructure used to hide malicious activity.
Annotations the server declares
- title: Check Fast Flux
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_http_securityAudit a domain's browser-facing HTTP security headers over HTTPS.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Audit a domain's browser-facing HTTP security headers over HTTPS. Inspects Content-Security-Policy (flagging unsafe-inline/unsafe-eval/wildcards), X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and the cross-origin isolation headers (COOP/COEP/CORP), and detects CDN/WAF interception. Returns per-header findings for missing or weak protections against XSS, clickjacking, and cross-origin attacks. Part of the scan_domain audit.
Annotations the server declares
- title: Check HTTP Security
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_lookalikesDetect active typosquat and lookalike/homoglyph domains that impersonate your brand and could be used in phishing.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Detect active typosquat and lookalike/homoglyph domains that impersonate your brand and could be used in phishing. Identifies character-substitution and visual-confusion domains registered by attackers. Distinct from check_shadow_domains (TLD variants with auth gaps) and discover_brand_domains (legitimate brand portfolio).
Annotations the server declares
- title: Check Lookalikes
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_mta_stsCheck whether a domain enforces SMTP TLS for inbound mail via MTA-STS, protecting against downgrade attacks.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Check whether a domain enforces SMTP TLS for inbound mail via MTA-STS, protecting against downgrade attacks. Queries _mta-sts.<domain> and fetches the policy file, reports mode (enforce/testing/none) and MX coverage. Use to verify whether inbound SMTP is protected against TLS downgrade or MITM — distinct from check_dane which uses TLSA pinning. Part of the scan_domain audit.
Annotations the server declares
- title: Check MTA STS
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_mxLook up MX records for a domain.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Look up MX records for a domain. Identifies which mail servers receive inbound email for the domain and which email hosting provider is used (Google Workspace, Microsoft 365, Proofpoint, etc.). Use when asked which email provider hosts inbound mail for a domain, or to see MX record configuration. Part of the scan_domain audit.
Annotations the server declares
- title: Check MX
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_mx_reputationCheck whether the mail server (MX) IP addresses are listed on spam blocklists (Spamhaus, Barracuda, SORBS, and other RBLs).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Check whether the mail server (MX) IP addresses are listed on spam blocklists (Spamhaus, Barracuda, SORBS, and other RBLs). Also verifies reverse DNS for MX hosts. Use when you want to know if your mail server IP is blacklisted, or if your MX is on any blocklist — distinct from check_rbl which checks a specific IP directly.
Annotations the server declares
- title: Check MX Reputation
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_nsAudit a domain’s nameserver delegation and redundancy.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Audit a domain’s nameserver delegation and redundancy. Identifies the DNS hosting provider and, when the infrastructure probe is available, directly compares parent and child NS sets, verifies authoritative AA responses, and checks required glue addresses. Use to detect stale registrar delegations, lame nameservers, and intermittent resolution risk. Part of the scan_domain audit.
Annotations the server declares
- title: Check NS
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_nsec_walkabilityAssess zone walkability risk by analyzing NSEC3PARAM configuration.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Assess zone walkability risk by analyzing NSEC3PARAM configuration. Detects plain NSEC zones, weak NSEC3 parameters, and opt-out flags.
Annotations the server declares
- title: Check NSEC Walkability
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_ptrVerify forward-confirmed reverse DNS (PTR/FCrDNS) for mail servers.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Verify forward-confirmed reverse DNS (PTR/FCrDNS) for mail servers. Part of the scan_domain audit.
Annotations the server declares
- title: Check Ptr
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_rblCheck MX server IP reputation against 6 DNS-based Real-time Blocklists (SpamCop, UCEProtect, Mailspike, Barracuda, PSBL).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Check MX server IP reputation against 6 DNS-based Real-time Blocklists (SpamCop, UCEProtect, Mailspike, Barracuda, PSBL). Resolves MX hosts to IPs first.
Annotations the server declares
- title: Check Rbl
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_realtime_threat_feedCheck a domain against BlackVeil real-time threat intelligence (curated intel-gateway feed).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Check a domain against BlackVeil real-time threat intelligence (curated intel-gateway feed). Distinct from DNSBL checks. Operator-deploy only; degrades to info when unprovisioned.
Annotations the server declares
- title: Check Realtime Threat Feed
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_resolver_consistencyCheck DNS consistency across 4 public resolvers.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Check DNS consistency across 4 public resolvers.
Annotations the server declares
- title: Check Resolver Consistency
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_root_server_setQuery a rotating sample of 3 root servers per call and compare the priming NS set, glue, SOA serials, and cross-root consistency against the embedded official root hints.Reads text others write1 finding
Why it is in this group
- The name "check_root_server_set" says "set": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "check_root_server_set" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "check_root_server_set" says "set": a word for a change.
  What this check looks for
Description, as the server wrote it
Query a rotating sample of 3 root servers per call and compare the priming NS set, glue, SOA serials, and cross-root consistency against the embedded official root hints. Uses BV_INFRA_PROBE when available; without it, returns the embedded hints as reference data only.
Annotations the server declares
- title: Check Root Server Set
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_spfLook up and validate the SPF record for a domain.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Look up and validate the SPF record for a domain. Lists all IP addresses and third-party senders authorised to send email on behalf of the domain, flags syntax errors, and shows the trust surface (which mail servers are whitelisted). Use when you need to know who is permitted to send email as a domain. Part of the scan_domain audit.
Annotations the server declares
- title: Check SPF
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_srvMap a domain's DNS-visible service footprint by probing 19 common SRV record prefixes (email, calendar, messaging, directory, web) in parallel.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Map a domain's DNS-visible service footprint by probing 19 common SRV record prefixes (email, calendar, messaging, directory, web) in parallel. Returns discovered services and flags insecure service advertisements — e.g. plaintext IMAP/POP3/LDAP without an encrypted variant. A domain with no matches among the probed prefixes is not proof the domain has no services at all. Use when asked to map DNS-visible services or flag insecure service advertisements.
Annotations the server declares
- title: Check SRV
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_sslCheck the HTTPS/TLS posture of a domain: HTTPS reachability, HSTS policy, and HTTP-to-HTTPS redirect.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Check the HTTPS/TLS posture of a domain: HTTPS reachability, HSTS policy, and HTTP-to-HTTPS redirect. Also returns certificate metadata (issuer, expiry date, days remaining, SAN count) read from public Certificate Transparency logs — this describes the most recently LOGGED certificate, which may differ from the one currently served. Origin TLS protocol support and cipher suites are not assessed; legacy-TLS detection is withdrawn because the probe cannot observe the origin handshake. Use to verify HTTPS/HSTS configuration and certificate issuer/expiry. Part of the scan_domain audit.
Annotations the server declares
- title: Check SSL
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_subdomailingDetect SubdoMailing risk: analyzes the SPF include chain for dangling or hijackable subdomains that could let an attacker send email as the domain.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Detect SubdoMailing risk: analyzes the SPF include chain for dangling or hijackable subdomains that could let an attacker send email as the domain. Use when you want to know if an SPF include chain can be hijacked through a dangling domain, or to detect subdomain mailing risk hidden in SPF includes. Part of the scan_domain audit.
Annotations the server declares
- title: Check Subdomailing
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_subdomain_takeoverSweep subdomains for dangling CNAMEs pointing to deprovisioned cloud services that could be claimed by an attacker (subdomain takeover vulnerabilities).Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Sweep subdomains for dangling CNAMEs pointing to deprovisioned cloud services that could be claimed by an attacker (subdomain takeover vulnerabilities). Detects 16 provider families (AWS S3/CloudFront, Azure Front Door/CDN/Blob/App Service, GCP Cloud Storage, Heroku, GitHub Pages, Vercel, Firebase, Shopify, etc.). Use when asked if subdomains are pointing to deprovisioned cloud services. Pair with discover_subdomains to widen the candidate set — note that returns a CT sample, not a full inventory.
Annotations the server declares
- title: Check Subdomain Takeover
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_tlsrptCheck whether a domain has SMTP TLS Reporting (TLS-RPT) configured.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Check whether a domain has SMTP TLS Reporting (TLS-RPT) configured. Queries _smtp._tls.<domain> for the v=TLSRPTv1 record and validates its reporting destination (rua= mailto:/https:), flagging a missing record, duplicate records, or an invalid/absent reporting URI. Complements MTA-STS by giving visibility into TLS delivery failures. Part of the scan_domain audit.
Annotations the server declares
- title: Check TLSRPT
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_txt_hygieneAudit TXT records for stale entries and SaaS exposure.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Audit TXT records for stale entries and SaaS exposure.
Annotations the server declares
- title: Check TXT Hygiene
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_zone_hygieneAudit DNS zone hygiene: identifies sensitive or forgotten subdomains exposed in DNS, stale SOA records, and zone propagation issues.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Audit DNS zone hygiene: identifies sensitive or forgotten subdomains exposed in DNS, stale SOA records, and zone propagation issues. Use to find any sensitive subdomains that should not be publicly visible, or to audit overall DNS zone cleanliness.
Annotations the server declares
- title: Check Zone Hygiene
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
cymru_asnMap domain IPs to Autonomous System Numbers via Team Cymru DNS.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Map domain IPs to Autonomous System Numbers via Team Cymru DNS. Returns ASN, prefix, country, registry, and organization for each IP. Flags high-risk hosting ASNs.
Annotations the server declares
- title: Cymru Asn
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
discover_brand_domainsDiscover all domains that belong to a brand's portfolio by aggregating certificate, DNS, redirect, and mail-policy signals.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Discover all domains that belong to a brand's portfolio by aggregating certificate, DNS, redirect, and mail-policy signals. Use when asked what domains are part of a brand portfolio, or to find all domains related to a brand. Pass the EXACT seed domain verbatim — do NOT normalize or substitute a canonical domain.
Annotations the server declares
- title: Discover Brand Domains
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
discover_brand_domains_startStart an async brand-domain discovery for the EXACT seed domain provided (the async sibling of discover_brand_domains, which can run ~24s and time out interactive clients).Reads text others writeNo findings
Why it is in this group
- The name "discover_brand_domains_start" says "start": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Start an async brand-domain discovery for the EXACT seed domain provided (the async sibling of discover_brand_domains, which can run ~24s and time out interactive clients). Same args as discover_brand_domains. Returns { auditId, queuedAt, etaSeconds } immediately; poll with discover_brand_domains_status and fetch ranked candidates with discover_brand_domains_findings once complete.
Annotations the server declares
- title: Discover Brand Domains Start
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
generateGenerate a DNS/email security remediation artifact.Reads text others write1 finding
Why it is in this group
- The name "generate" says "generate": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "generate" says "generate": a word for a change.
  What this check looks for
Description, as the server wrote it
Generate a DNS/email security remediation artifact. Artifact types: spf_record (build a new SPF record), dmarc_record (create a DMARC policy), dkim_config (DKIM key setup), mta_sts_policy (generate an MTA-STS policy file), fix_plan (prioritized remediation plan for all findings), or rollout_plan (phased DMARC enforcement timeline). Use when asked to generate or create a record or policy.
Annotations the server declares
- title: Generate
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
map_complianceMap scan findings to compliance frameworks: NIST 800-177, PCI DSS 4.0, SOC 2, CIS Controls.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Map scan findings to compliance frameworks: NIST 800-177, PCI DSS 4.0, SOC 2, CIS Controls. Shows pass/fail/partial status per control.
Annotations the server declares
- title: Map Compliance
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
map_supply_chainMap DNS-visible third-party service dependencies for a domain.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Map DNS-visible third-party service dependencies for a domain. Correlates SPF, NS, TXT verifications, SRV services, and CAA records to reveal which third-party vendors can send email as the domain, control DNS, or access integrated services. Use when asked to map third-party or supply-chain dependencies — not for listing who can send email (use check_spf for that).
Annotations the server declares
- title: Map Supply Chain
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
osint_investigate_domain_startStart an async OSINT investigation for a domain.Reads text others writeNo findings
Why it is in this group
- The name "osint_investigate_domain_start" says "start": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Start an async OSINT investigation for a domain. Operator-deploy only; targets must be operator-authorized on the recon watchlist; degrades to info when unprovisioned. Returns an investigationId immediately — poll with osint_investigation_status and retrieve results with osint_investigation_report.
Annotations the server declares
- title: Osint Investigate Domain Start
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
osint_investigate_email_startStart an async OSINT investigation for an email address (breach exposure, account correlation).Reads text others writeCan send data outNo findings
Why it is in this group
- The name "osint_investigate_email_start" says "start": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe name "osint_investigate_email_start" says "start" and "email": it writes something other people read.
Description, as the server wrote it
Start an async OSINT investigation for an email address (breach exposure, account correlation). Owner/enterprise tier only — people-centric OSINT is restricted to prevent misuse. Returns an investigationId immediately — poll with osint_investigation_status and retrieve results with osint_investigation_report.
Annotations the server declares
- title: Osint Investigate Email Start
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
osint_investigate_infrastructure_startStart an async deep-infrastructure OSINT investigation for a query (domain, IP, or org).Reads text others writeNo findings
Why it is in this group
- The name "osint_investigate_infrastructure_start" says "start": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Start an async deep-infrastructure OSINT investigation for a query (domain, IP, or org). Operator-deploy only; targets must be operator-authorized on the recon watchlist; degrades to info when unprovisioned. Returns an investigationId immediately — poll with osint_investigation_status.
Annotations the server declares
- title: Osint Investigate Infrastructure Start
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
osint_investigate_supply_chain_startStart an async supply-chain OSINT investigation for a query.Reads text others writeNo findings
Why it is in this group
- The name "osint_investigate_supply_chain_start" says "start": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Start an async supply-chain OSINT investigation for a query. Operator-deploy only; targets must be operator-authorized on the recon watchlist; degrades to info when unprovisioned. Returns an investigationId immediately — poll with osint_investigation_status.
Annotations the server declares
- title: Osint Investigate Supply Chain Start
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
osint_investigate_username_startStart an async OSINT investigation for a username (cross-platform presence, breach correlation).Reads text others writeNo findings
Why it is in this group
- The name "osint_investigate_username_start" says "start": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Start an async OSINT investigation for a username (cross-platform presence, breach correlation). Owner/enterprise tier only — people-centric OSINT is restricted to prevent misuse. Returns an investigationId immediately — poll with osint_investigation_status and retrieve results with osint_investigation_report.
Annotations the server declares
- title: Osint Investigate Username Start
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
prioritize_portfolio_leadsRank a brand’s portfolio (or an explicit domain set) into prioritized registrar-partner sales leads by product-gap value × severity.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Rank a brand’s portfolio (or an explicit domain set) into prioritized registrar-partner sales leads by product-gap value × severity. Multi-domain, paid. Reuses map_registrar_products per domain, then ranks. Distinct from map_registrar_products (per-domain product mapping) and batch_scan (raw scores).
Annotations the server declares
- title: Prioritize Portfolio Leads
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
register_brand_audit_watchCreates a recurring brand-audit watch for a domain on a daily/weekly/monthly cadence.Reads text others writeCan send data outNo findings
Why it is in this group
- The description's first verb is "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe input takes a URL (input.webhook_url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Creates a recurring brand-audit watch for a domain on a daily/weekly/monthly cadence. Each run enqueues a fresh brand_audit_batch_start and (when a webhook is configured) POSTs a diff webhook on classification drift. Returns the new watchId. Owner-scoped; per-principal cap of 20 active watches.
Annotations the server declares
- title: Register Brand Audit Watch
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
scan_buckets_startStart an async cloud-bucket discovery scan for a target domain.Reads text others writeNo findings
Why it is in this group
- The name "scan_buckets_start" says "start": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Start an async cloud-bucket discovery scan for a target domain. Operator-deploy only; targets must be operator-authorized on the recon watchlist; degrades to info when unprovisioned. Returns a scanId immediately — poll progress with scan_buckets_status and retrieve results with scan_buckets_findings.
Annotations the server declares
- title: Scan Buckets Start
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
scan_domainRun a full DNS and email security audit for a single domain.Reads text others write1 finding
Why it is in this group
- The description's first verb is "run": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "scan_domain" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The description's first verb is "run": a word for a change.
  What this check looks for
Description, as the server wrote it
Run a full DNS and email security audit for a single domain. Aggregates every scan-included check in parallel (SPF, DKIM, DMARC, DNSSEC, TLS/SSL, MTA-STS, CAA, BIMI, subdomain takeover, and more) and returns an overall security score, NIST-aligned letter grade (6-band A+/A/B/C/D/F), maturity stage, and prioritized findings. Use for a comprehensive single-domain audit, to get a domain's overall security grade, or to assess email security maturity. Version stamps: 'scoringModelVersion' is the scoring POLICY semver (changes only when weights/thresholds/severities change, so it advances slowly) and is INDEPENDENT of — never comparable to — 'dnsChecksPackageVersion', the @blackveil/dns-checks npm engine-package version, which moves every release; a lower model version is expected, not a version gap. When citing a score, record 'scoringConfigHash' — it identifies the exact scoring configuration that produced the result.
Annotations the server declares
- title: Scan Domain
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sge_quickscanAnswer, for ONE domain, whether it meets the New Zealand Secure Government Email (SGE) requirements agencies must satisfy by October 2026.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Answer, for ONE domain, whether it meets the New Zealand Secure Government Email (SGE) requirements agencies must satisfy by October 2026. Reports all seven SGE controls — DMARC p=reject, SPF -all, DKIM, SMTP transport TLS, MTA-STS enforce, TLS-RPT, full sub-domain coverage — each as satisfied, not satisfied, or NOT MEASURED, with the structured evidence behind every verdict. Neither SMTP transport TLS nor sub-domain coverage can be observed from a single domain scan, so a DNS-only result tops out at INDETERMINATE, which is not a pass. Distinct from map_compliance, which maps findings to NIST/PCI/SOC 2/CIS.
Annotations the server declares
- title: Sge Quickscan
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

Only reads 26Looks things up and changes nothing.Claude Code: allow

analyze_driftMeasure whether a domain's DNS security posture improved or regressed by comparing the current state against a prior scan snapshot.Reads text others writeNo findings
Why it is in this group
- The name "analyze_drift" says "analyze": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Measure whether a domain's DNS security posture improved or regressed by comparing the current state against a prior scan snapshot. Returns a drift classification (improving/stable/regressing/mixed), score delta, and lists of improvements and regressions. Use to answer "did our security score improve or regress since last time?" — distinct from compare_baseline which checks compliance against a fixed policy (not improvement over time).
Annotations the server declares
- title: Analyze Drift
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
batch_scan_findingsFetch owner-scoped findings for a completed asynchronous batch scan.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "fetch": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Fetch owner-scoped findings for a completed asynchronous batch scan.
Annotations the server declares
- title: Batch Scan Findings
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
batch_scan_statusRead the owner-scoped status of an asynchronous batch scan.Reads text others writeNo findings
Why it is in this group
- The name "batch_scan_status" says "status": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Read the owner-scoped status of an asynchronous batch scan.
Annotations the server declares
- title: Batch Scan Status
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
brand_audit_get_reportFetch the result JSON for a completed brand audit.Reads text others write1 finding
Why it is in this group
- The name "brand_audit_get_report" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "...ed /reports/ download link (same bearer credential as this call). Completed targets whose..."
  What this check looks for
Description, as the server wrote it
Fetch the result JSON for a completed brand audit. With `target` set, returns the per-target CheckResult; without, returns the audit-level aggregate. Returns notReady when polling an in-flight audit. When a rendered PDF sidecar exists, metadata includes pdfUrl — an authenticated /reports/ download link (same bearer credential as this call). Completed targets whose PDF is still rendering include pdfPending so callers can poll again.
Annotations the server declares
- title: Brand Audit Get Report
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
brand_audit_statusPoll the status of an enqueued brand audit.Reads text others writeNo findings
Why it is in this group
- The name "brand_audit_status" says "status": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Poll the status of an enqueued brand audit. Returns audit-level status (queued | running | completed | failed), progress 'N/M', and per-target statuses. Owner-scoped — auditIds owned by other principals surface as notFound.
Annotations the server declares
- title: Brand Audit Status
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_llms_txtInspect a domain's published /llms.txt and /llms-full.txt for links and install instructions an AI agent could inherit from someone else.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "inspect": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Inspect a domain's published /llms.txt and /llms-full.txt for links and install instructions an AI agent could inherit from someone else. Parses and dedupes the links (same-origin vs external), sweeps external link hosts for dangling CNAMEs and deprovisioned-service fingerprints (evidence of a dangling service, not proof it can be claimed), and checks package names in npm/npx/pnpm/yarn/pip/uv/pipx install commands against the npm or PyPI registry (an unregistered name is claimable) and OSV malicious-package (MAL-) advisories. Detection only; not scored. Anything not measured is listed under notAssessed.
Annotations the server declares
- title: Check Llms TXT
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_shadow_domainsFind alternate TLD variants of a domain (e.g.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "find": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Find alternate TLD variants of a domain (e.g. example.net, example.co) that have weak or missing email authentication and could be used to spoof email. Use when asked about TLD variants with email auth gaps — distinct from check_lookalikes which detects typosquat/homoglyph impersonation domains.
Annotations the server declares
- title: Check Shadow Domains
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
check_svcb_httpsValidate HTTPS/SVCB records (RFC 9460) for modern transport capability advertisement.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "validate": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Validate HTTPS/SVCB records (RFC 9460) for modern transport capability advertisement. Part of the scan_domain audit.
Annotations the server declares
- title: Check SVCB HTTPS
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
compare_baselineCompare a domain's current security configuration against a fixed policy baseline to determine compliance.Reads text others writeNo findings
Why it is in this group
- The name "compare_baseline" says "compare": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Compare a domain's current security configuration against a fixed policy baseline to determine compliance. Use to check whether a domain meets a policy requirement — not for tracking improvement/regression over time (use analyze_drift) and not for comparing multiple domains (use compare_domains).
Annotations the server declares
- title: Compare Baseline
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
compare_domainsSide-by-side security comparison of 2–5 domains.Reads text others writeNo findings
Why it is in this group
- The name "compare_domains" says "compare": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Side-by-side security comparison of 2–5 domains. Shows relative scores, category gaps, and unique weaknesses for each domain. Use when comparing your security posture against a competitor, or doing a head-to-head comparison between multiple domains.
Annotations the server declares
- title: Compare Domains
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
discover_brand_domains_findingsFetch the ranked candidate domains (the discovery CheckResult) for an async run started with discover_brand_domains_start.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "fetch": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Fetch the ranked candidate domains (the discovery CheckResult) for an async run started with discover_brand_domains_start. Returns notReady while the discovery is still in-flight; the discovery result once complete. Owner-scoped.
Annotations the server declares
- title: Discover Brand Domains Findings
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
discover_brand_domains_statusPoll the status of an async brand-domain discovery started with discover_brand_domains_start.Reads text others writeNo findings
Why it is in this group
- The name "discover_brand_domains_status" says "status": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Poll the status of an async brand-domain discovery started with discover_brand_domains_start. Returns status (queued | running | completed | failed) and progress. Owner-scoped — operationIds owned by other principals surface as notFound.
Annotations the server declares
- title: Discover Brand Domains Status
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
discover_subdomainsFind subdomains of a domain using Certificate Transparency logs.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "find": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Find subdomains of a domain using Certificate Transparency logs. Reveals shadow IT, forgotten services, and unauthorized certificate issuance. Returns a CT SAMPLE, not an asset inventory: the count is a lower bound, a host with no publicly-logged certificate never appears, and the result carries a per-source `coverage` record stating what was actually consulted. `countBasis` says whether `totalSubdomains` is the tool’s normal reach (`sample`) or a `floor` from a run whose recall was cut (then `minSubdomainsObserved` is present); `concreteSubdomains` excludes wildcard patterns.
Annotations the server declares
- title: Discover Subdomains
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
explain_findingExplain a finding with impact and remediation.Reads text others writeNo findings
Why it is in this group
- The name "explain_finding" says "explain": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Explain a finding with impact and remediation.
Annotations the server declares
- title: Explain Finding
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_benchmarkGet industry benchmark data: shows what percentile a domain's security score ranks at within its sector or country cohort, the mean score, and the most common DNS security failures…Reads text others writeNo findings
Why it is in this group
- The name "get_benchmark" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Get industry benchmark data: shows what percentile a domain's security score ranks at within its sector or country cohort, the mean score, and the most common DNS security failures across the industry. Use when asked how a score compares to the industry average, what percentile a score is in, or what the most common security failures are in an industry or sector.
Annotations the server declares
- title: Get Benchmark
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_domain_rankRank a domain against its country or global cohort using the GSI benchmark corpus.Reads text others writeNo findings
Why it is in this group
- The name "get_domain_rank" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Rank a domain against its country or global cohort using the GSI benchmark corpus. Accepts a domain score (from scan_domain) and optional country/sector; returns a percentile: "scores better than X% of peers". Owner-gate exempt — public cohort data only.
Annotations the server declares
- title: Get Domain Rank
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_provider_insightsGet security benchmarks and common configuration issues for a specific email or DNS service-provider cohort (e.g.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_provider_insights" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "get" and "email": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "get" and "issue": it reads issues, which other people can write.
Description, as the server wrote it
Get security benchmarks and common configuration issues for a specific email or DNS service-provider cohort (e.g. Google Workspace customers, Microsoft 365 customers). Use when asked how an email service provider compares to competitors on security posture, or to see typical misconfigurations for a named vendor's customers.
Annotations the server declares
- title: Get Provider Insights
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
list_brand_audit_watchesReturns the caller's recurring brand-audit watches: watchId, domain, interval, webhook presence, last-run time, and active state.Reads text others writeNo findings
Why it is in this group
- The name "list_brand_audit_watches" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Returns the caller's recurring brand-audit watches: watchId, domain, interval, webhook presence, last-run time, and active state. Owner-scoped. Read-only.
Annotations the server declares
- title: List Brand Audit Watches
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
osint_investigation_reportRetrieve the final report of a completed OSINT investigation by investigationId.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "retrieve": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Retrieve the final report of a completed OSINT investigation by investigationId. For a deep_infrastructure investigation the report also composes discover_subdomains for the target (a cached CT sample under `ctDiscovery`, never an inventory). Operator-deploy only; targets must be operator-authorized on the recon watchlist; degrades to info when unprovisioned or not yet complete.
Annotations the server declares
- title: Osint Investigation Report
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
osint_investigation_statusPoll the status of an OSINT investigation by investigationId.Reads text others writeNo findings
Why it is in this group
- The name "osint_investigation_status" says "status": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Poll the status of an OSINT investigation by investigationId. Operator-deploy only; targets must be operator-authorized on the recon watchlist; degrades to info when unprovisioned. Returns current status (running | completed | failed) and progress metadata.
Annotations the server declares
- title: Osint Investigation Status
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
rdap_lookupFetch domain registration data via RDAP (modern WHOIS replacement).Reads text others writeNo findings
Why it is in this group
- The name "rdap_lookup" says "lookup": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Fetch domain registration data via RDAP (modern WHOIS replacement). Returns the domain registrar (the company the domain was registered with), registrant contact, creation/expiration dates, EPP status codes, and domain age. Use when asked who registered the domain, who the registrar is, or when the registration expires — distinct from check_ns which identifies the DNS nameserver provider.
Annotations the server declares
- title: RDAP Lookup
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
resolve_spf_chainTrace the full SPF include chain for a domain.Reads text others writeNo findings
Why it is in this group
- The name "resolve_spf_chain" says "resolve": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Trace the full SPF include chain for a domain. Recursively resolves all includes, shows lookup count, tree depth, and flags circular includes or exceeding the 10-lookup limit.
Annotations the server declares
- title: Resolve SPF Chain
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
scan_buckets_findingsRetrieve findings from a completed cloud-bucket discovery scan by scanId.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "retrieve": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Retrieve findings from a completed cloud-bucket discovery scan by scanId. Operator-deploy only; targets must be operator-authorized on the recon watchlist; degrades to info when unprovisioned. The scanId is required so reads can be owner-scoped; target and provider filters are optional.
Annotations the server declares
- title: Scan Buckets Findings
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
scan_buckets_statusPoll the status of a cloud-bucket discovery scan by scanId.Reads text others writeNo findings
Why it is in this group
- The name "scan_buckets_status" says "status": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Poll the status of a cloud-bucket discovery scan by scanId. Operator-deploy only; targets must be operator-authorized on the recon watchlist; degrades to info when unprovisioned. Returns scan status (running | completed | failed) and progress metadata.
Annotations the server declares
- title: Scan Buckets Status
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
simulate_attack_pathsAnalyze current DNS posture and enumerate specific attack paths an adversary could exploit, with severity, feasibility, steps, and mitigations.Reads text others writeNo findings
Why it is in this group
- The description's first verb is "analyze": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Analyze current DNS posture and enumerate specific attack paths an adversary could exploit, with severity, feasibility, steps, and mitigations.
Annotations the server declares
- title: Simulate Attack Paths
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
validate_fixRe-check a specific security control after applying a fix, to confirm the finding is now resolved.Reads text others writeNo findings
Why it is in this group
- The name "validate_fix" says "validate": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Re-check a specific security control after applying a fix, to confirm the finding is now resolved. Use only when a fix has already been applied and you want to verify or confirm the remediation was successful — not for initial inspection of a record.
Annotations the server declares
- title: Validate Fix
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

162 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 private-data tool breaks every one.

Reads private data1: Reads files, mail, messages, databases, secrets, calendars or repositories.; get_provider_insights
Reads text others write81: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; analyze_drift
assess_spoofability
batch_scan
batch_scan_findings
batch_scan_start
batch_scan_status
brand_audit_batch_start
brand_audit_get_report
brand_audit_single
brand_audit_status
check_agent_discovery
check_authoritative_dns_infra
and 69 more
Can send data out2: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; osint_investigate_email_start
register_brand_audit_watch

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__dns__get_provider_insights"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Looked at Oct 22, 2026, 14:28 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 200
tools/list served without credentials: yes
Tools that change things, listed without credentials: 55
Protocol version: 2025-06-18
WWW-Authenticate on 401: not observed
resource_metadata in WWW-Authenticate: none
RFC 9728 protected resource metadata: https://dns-mcp.blackveilsecurity.com/.well-known/oauth-protected-resource/mcp
Authorization servers: https://dns-mcp.blackveilsecurity.com
Legacy HTTP+SSE transport: no
Dynamic client registration: yes
Client ID metadata documents: no

HighThe whole server
The endpoint served tools/list without credentials, and the list has 55 tools that change things (1 destructive, 54 write). Whether a call also works without credentials was not tested: tools are never called.
Matched text
https://dns-mcp.blackveilsecurity.com/mcp: tools/list returned 81 tools to an anonymous client, including delete_brand_audit_watch (destructive), check_mx (write), check_spf (write), check_dmarc (write), check_dkim (write) and 50 more
What this check looks for

Install

Pinned to version 3.100.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http dns https://dns-mcp.blackveilsecurity.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__dns__check_svcb_https",
      "mcp__dns__batch_scan_status",
      "mcp__dns__batch_scan_findings",
      "mcp__dns__compare_domains",
      "mcp__dns__compare_baseline",
      "mcp__dns__check_shadow_domains",
      "mcp__dns__get_domain_rank",
      "mcp__dns__get_benchmark",
      "mcp__dns__get_provider_insights",
      "mcp__dns__explain_finding",
      "mcp__dns__analyze_drift",
      "mcp__dns__validate_fix",
      "mcp__dns__resolve_spf_chain",
      "mcp__dns__discover_subdomains",
      "mcp__dns__simulate_attack_paths",
      "mcp__dns__rdap_lookup",
      "mcp__dns__check_llms_txt",
      "mcp__dns__discover_brand_domains_status",
      "mcp__dns__discover_brand_domains_findings",
      "mcp__dns__brand_audit_status",
      "mcp__dns__brand_audit_get_report",
      "mcp__dns__list_brand_audit_watches",
      "mcp__dns__scan_buckets_status",
      "mcp__dns__scan_buckets_findings",
      "mcp__dns__osint_investigation_status",
      "mcp__dns__osint_investigation_report"
    ],
    "ask": [
      "mcp__dns__check_mx",
      "mcp__dns__check_spf",
      "mcp__dns__check_dmarc",
      "mcp__dns__check_dkim",
      "mcp__dns__check_dnssec",
      "mcp__dns__check_ssl",
      "mcp__dns__check_mta_sts",
      "mcp__dns__check_ns",
      "mcp__dns__check_caa",
      "mcp__dns__check_bimi",
      "mcp__dns__check_tlsrpt",
      "mcp__dns__check_http_security",
      "mcp__dns__check_dane",
      "mcp__dns__check_ptr",
      "mcp__dns__check_dane_https",
      "mcp__dns__check_lookalikes",
      "mcp__dns__check_subdomailing",
      "mcp__dns__scan_domain",
      "mcp__dns__batch_scan",
      "mcp__dns__batch_scan_start",
      "mcp__dns__check_txt_hygiene",
      "mcp__dns__check_mx_reputation",
      "mcp__dns__check_srv",
      "mcp__dns__check_zone_hygiene",
      "mcp__dns__generate",
      "mcp__dns__assess_spoofability",
      "mcp__dns__check_resolver_consistency",
      "mcp__dns__map_supply_chain",
      "mcp__dns__map_compliance",
      "mcp__dns__sge_quickscan",
      "mcp__dns__prioritize_portfolio_leads",
      "mcp__dns__check_dbl",
      "mcp__dns__check_rbl",
      "mcp__dns__cymru_asn",
      "mcp__dns__check_realtime_threat_feed",
      "mcp__dns__check_nsec_walkability",
      "mcp__dns__check_dnssec_chain",
      "mcp__dns__check_agent_discovery",
      "mcp__dns__check_dnskey_strength",
      "mcp__dns__check_fast_flux",
      "mcp__dns__check_subdomain_takeover",
      "mcp__dns__check_authoritative_dns_infra",
      "mcp__dns__check_root_server_set",
      "mcp__dns__discover_brand_domains",
      "mcp__dns__discover_brand_domains_start",
      "mcp__dns__brand_audit_single",
      "mcp__dns__brand_audit_batch_start",
      "mcp__dns__register_brand_audit_watch",
      "mcp__dns__scan_buckets_start",
      "mcp__dns__osint_investigate_domain_start",
      "mcp__dns__osint_investigate_infrastructure_start",
      "mcp__dns__osint_investigate_supply_chain_start",
      "mcp__dns__osint_investigate_username_start",
      "mcp__dns__osint_investigate_email_start"
    ],
    "deny": [
      "mcp__dns__delete_brand_audit_watch"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as dns. Review it before you use it.

Capability tags behind 81 rules

mcp__dns__check_mx untrusted-input
mcp__dns__check_spf untrusted-input
mcp__dns__check_dmarc untrusted-input
mcp__dns__check_dkim untrusted-input
mcp__dns__check_dnssec untrusted-input
mcp__dns__check_ssl untrusted-input
mcp__dns__check_mta_sts untrusted-input
mcp__dns__check_ns untrusted-input
mcp__dns__check_caa untrusted-input
mcp__dns__check_bimi untrusted-input
mcp__dns__check_tlsrpt untrusted-input
mcp__dns__check_http_security untrusted-input
mcp__dns__check_dane untrusted-input
mcp__dns__check_ptr untrusted-input
mcp__dns__check_dane_https untrusted-input
mcp__dns__check_svcb_https untrusted-input
mcp__dns__check_lookalikes untrusted-input
mcp__dns__check_subdomailing untrusted-input
mcp__dns__scan_domain untrusted-input
mcp__dns__batch_scan untrusted-input
mcp__dns__batch_scan_start untrusted-input
mcp__dns__batch_scan_status untrusted-input
mcp__dns__batch_scan_findings untrusted-input
mcp__dns__compare_domains untrusted-input
mcp__dns__compare_baseline untrusted-input
mcp__dns__check_shadow_domains untrusted-input
mcp__dns__check_txt_hygiene untrusted-input
mcp__dns__check_mx_reputation untrusted-input
mcp__dns__check_srv untrusted-input
mcp__dns__check_zone_hygiene untrusted-input
mcp__dns__generate untrusted-input
mcp__dns__get_domain_rank untrusted-input
mcp__dns__get_benchmark untrusted-input
mcp__dns__get_provider_insights private-data, untrusted-input
mcp__dns__assess_spoofability untrusted-input
mcp__dns__check_resolver_consistency untrusted-input
mcp__dns__explain_finding untrusted-input
mcp__dns__map_supply_chain untrusted-input
mcp__dns__analyze_drift untrusted-input
mcp__dns__validate_fix untrusted-input
mcp__dns__resolve_spf_chain untrusted-input
mcp__dns__discover_subdomains untrusted-input
mcp__dns__map_compliance untrusted-input
mcp__dns__sge_quickscan untrusted-input
mcp__dns__prioritize_portfolio_leads untrusted-input
mcp__dns__simulate_attack_paths untrusted-input
mcp__dns__check_dbl untrusted-input
mcp__dns__check_rbl untrusted-input
mcp__dns__cymru_asn untrusted-input
mcp__dns__rdap_lookup untrusted-input
mcp__dns__check_realtime_threat_feed untrusted-input
mcp__dns__check_nsec_walkability untrusted-input
mcp__dns__check_dnssec_chain untrusted-input
mcp__dns__check_agent_discovery untrusted-input
mcp__dns__check_llms_txt untrusted-input
mcp__dns__check_dnskey_strength untrusted-input
mcp__dns__check_fast_flux untrusted-input
mcp__dns__check_subdomain_takeover untrusted-input
mcp__dns__check_authoritative_dns_infra untrusted-input
mcp__dns__check_root_server_set untrusted-input
mcp__dns__discover_brand_domains untrusted-input
mcp__dns__discover_brand_domains_start untrusted-input
mcp__dns__discover_brand_domains_status untrusted-input
mcp__dns__discover_brand_domains_findings untrusted-input
mcp__dns__brand_audit_single untrusted-input
mcp__dns__brand_audit_batch_start untrusted-input
mcp__dns__brand_audit_status untrusted-input
mcp__dns__brand_audit_get_report untrusted-input
mcp__dns__list_brand_audit_watches untrusted-input
mcp__dns__register_brand_audit_watch untrusted-input, outbound
mcp__dns__delete_brand_audit_watch untrusted-input
mcp__dns__scan_buckets_start untrusted-input
mcp__dns__scan_buckets_status untrusted-input
mcp__dns__scan_buckets_findings untrusted-input
mcp__dns__osint_investigate_domain_start untrusted-input
mcp__dns__osint_investigate_infrastructure_start untrusted-input
mcp__dns__osint_investigate_supply_chain_start untrusted-input
mcp__dns__osint_investigate_username_start untrusted-input
mcp__dns__osint_investigate_email_start untrusted-input, outbound
mcp__dns__osint_investigation_status untrusted-input
mcp__dns__osint_investigation_report untrusted-input

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.blackveilsecurity/dns/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

55 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 17:51 UTC.

For agents: Markdown · JSON · report this listing