dev.domainee/domainee

by domainee.dev · remote · no sign-in to list tools · v1.0.2 · published by dev.domainee

Custom domains API for SaaS: connect, verify, and manage customer domains, SSL, and DNS

Changes · 11

Compare Registry entry

18 tools: 11 change things and 7 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things11Claude Code: ask: see these tools
Only reads7Claude Code: allow: see these tools

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http domainee https://mcp.domainee.dev/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

18 tools

Changes things 11Creates or changes something that can be changed back.Claude Code: ask

tools_dkim_record_checkerFree public API.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free public API. Look up the DKIM record at <selector>._domainkey.<domain>, parse the public key, flag issues.
Annotations the server declares
- title: DKIM Record Checker
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
tools_dmarc_record_checkerFree public API.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free public API. Look up the DMARC record at _dmarc.<domain>, parse policy/alignment/reporting tags, flag missing or too-permissive settings.
Annotations the server declares
- title: DMARC Record Checker
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
tools_dns_propagation_checkerFree public API.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free public API. Query the same hostname across ~10 public DNS resolvers worldwide and report which ones return the same answer. Useful right after a DNS change.
Annotations the server declares
- title: DNS Propagation Checker
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
tools_domain_age_checkerFree public API.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free public API. Returns a domain's registration date, age in days + years, last-updated date, and expiration.
Annotations the server declares
- title: Domain Age Checker
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
tools_domain_availability_checkerFree public API.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free public API. Check availability of a name across one or more TLDs. Pass a `name` (no TLD) and an optional `tlds` array.
Annotations the server declares
- title: Domain Availability Checker
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
tools_domain_connect_checkerFree public API.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free public API. Check whether a domain's DNS provider implements the Domain Connect protocol, read live from the _domainconnect TXT record and the provider's settings endpoint. Reports the provider and whether it offers the synchronous flow (a signed redirect with no token exchanged, the one that works in practice) or only the asynchronous OAuth flow. Note that provider support is necessary but not sufficient for one-click setup: the service being connected must also have a template the provider has synced and enabled, which many providers do only after a per-service onboarding. No Bearer required.
Annotations the server declares
- title: Domain Connect Checker
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
tools_http_header_checkerFree public API.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free public API. Fetch a URL and return its response headers + security grade based on common security headers.
Annotations the server declares
- title: HTTP Header Checker
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
tools_redirect_checkerFree public API.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free public API. Follow a URL's redirect chain and return every hop with status code, response time, final destination.
Annotations the server declares
- title: Redirect Checker
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
tools_spf_record_checkerFree public API.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free public API. Look up and validate the SPF record for a domain. Counts void/total DNS lookups, flags syntax issues, validates against RFC 7208's 10-lookup limit.
Annotations the server declares
- title: SPF Record Checker
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
tools_ssl_checkFree public API.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free public API. Check the TLS certificate of any public hostname. Returns issuer, subject, validity dates, days until expiry, full chain, cipher, protocol, and SAN list. No Bearer required.
Annotations the server declares
- title: SSL Certificate Check
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
tools_subdomain_finderFree public API.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free public API. Enumerate subdomains for a target domain via Certificate Transparency logs + DNS resolution.
Annotations the server declares
- title: Subdomain Finder
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

Only reads 7Looks things up and changes nothing.Claude Code: allow

tools_cname_lookupFree public API.No findings
Why it is in this group
- The name "tools_cname_lookup" says "lookup": a word for reading.
Description, as the server wrote it
Free public API. Resolve a hostname's CNAME chain. Useful for debugging custom-domain CNAME setups.
Annotations the server declares
- title: CNAME Lookup
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
tools_dns_provider_lookupFree public API.No findings
Why it is in this group
- The name "tools_dns_provider_lookup" says "lookup": a word for reading.
Description, as the server wrote it
Free public API. Identify which DNS provider actually serves a domain, fingerprinted from its public NS records. Returns the record name written the way that provider's form expects it (providers disagree about whether the apex is '@', blank, or the full domain, and getting it wrong is the most common way a correct record lands in the wrong place), whether the provider can point a zone apex at a hostname, where its record editor lives, and the provider-specific settings that silently break custom domain setups. Use this before telling someone what DNS record to add. No Bearer required.
Annotations the server declares
- title: DNS Provider Lookup
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
tools_dns_record_lookupFree public API.No findings
Why it is in this group
- The name "tools_dns_record_lookup" says "lookup": a word for reading.
Description, as the server wrote it
Free public API. Look up DNS records (A, AAAA, CNAME, MX, TXT, NS, SOA) for any domain.
Annotations the server declares
- title: DNS Record Lookup
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
tools_reverse_ip_lookupFree public API.No findings
Why it is in this group
- The name "tools_reverse_ip_lookup" says "lookup": a word for reading.
Description, as the server wrote it
Free public API. Reverse-DNS (PTR) lookup for an IP address. Returns one or more hostnames if configured.
Annotations the server declares
- title: Reverse IP Lookup
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
tools_txt_record_lookupFree public API.No findings
Why it is in this group
- The name "tools_txt_record_lookup" says "lookup": a word for reading.
Description, as the server wrote it
Free public API. Fetch all TXT records on a domain, classifying each as SPF, DKIM, DMARC, BIMI, verification token, or general.
Annotations the server declares
- title: TXT Record Lookup
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
tools_website_status_checkerFree public API.No findings
Why it is in this group
- The name "tools_website_status_checker" says "status": a word for reading.
Description, as the server wrote it
Free public API. Check if a website is up or down. Returns HTTP status, response time, final URL after redirects, basic SSL info.
Annotations the server declares
- title: Website Status Checker
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
tools_whois_lookupFree public API.No findings
Why it is in this group
- The name "tools_whois_lookup" says "lookup": a word for reading.
Description, as the server wrote it
Free public API. WHOIS / RDAP lookup for a domain — registrar, status, created/updated/expires dates, nameservers.
Annotations the server declares
- title: WHOIS Lookup
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.2. Values in angle brackets are yours to fill in.

claude mcp add --transport http domainee https://mcp.domainee.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__domainee__tools_dns_provider_lookup",
      "mcp__domainee__tools_dns_record_lookup",
      "mcp__domainee__tools_whois_lookup",
      "mcp__domainee__tools_cname_lookup",
      "mcp__domainee__tools_reverse_ip_lookup",
      "mcp__domainee__tools_txt_record_lookup",
      "mcp__domainee__tools_website_status_checker"
    ],
    "ask": [
      "mcp__domainee__tools_ssl_check",
      "mcp__domainee__tools_domain_connect_checker",
      "mcp__domainee__tools_http_header_checker",
      "mcp__domainee__tools_dns_propagation_checker",
      "mcp__domainee__tools_redirect_checker",
      "mcp__domainee__tools_spf_record_checker",
      "mcp__domainee__tools_domain_age_checker",
      "mcp__domainee__tools_subdomain_finder",
      "mcp__domainee__tools_dmarc_record_checker",
      "mcp__domainee__tools_dkim_record_checker",
      "mcp__domainee__tools_domain_availability_checker"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as domainee. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/dev.domainee/domainee/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

11 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 18:11 UTC.

For agents: Markdown · JSON · report this listing