MCP.Market

DNS MCP Server

by mclose·io.github.mclose/dns-mcp·v1.3.4·1 stars
No reviews yet

Real-time DNS security analysis — DNSSEC, email auth, and RDAP. Built for SOC investigations.

A88/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A88/100

full report

Adoption
New

1 stars

Reviews

Write one

Nobody has reviewed DNS MCP Server yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

DNS MCP Server tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • –Code scanpackage could not be scannedn/a
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 2 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How DNS MCP Server compares

Against every graded Email MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
88/100
higher than 82% of 916 Email servers
GitHub stars
1
more than 65% of 493 Email servers

Install DNS MCP Server in Claude Code, Cursor or VS Code

claude mcp add dns-mcp -- docker run -i --rm docker.io/mclose/dns-mcp:1.3.4
Add to Cursor

What the publisher says

From the DNS MCP Server repository's README, as published. We do not edit it. Read it on GitHub

DNS MCP Server

Real-time DNS security analysis for AI assistants via MCP. Gives your assistant the ability to investigate domains the way a practitioner would — DNSSEC chain validation, email authentication posture, and registration intelligence — without leaving your chat session.

Built by a cybersecurity professional for SOC investigation workflows. Not a toy — the same queries you would run at the command line, accessible through any MCP-compatible assistant in real time.

Architecture (2.0.0)

dns-mcp is a Streamable HTTP MCP server with OAuth via Pocket ID. Tool implementations are thin wrappers around the dns_tool Python library, which owns all DNS logic. The server itself is ~430 lines of code: auth bootstrap, tool registration, and prompt loading.

Claude.ai / Claude Code / any MCP client
              │
              │ Streamable HTTP + OAuth bearer (JWT)
              ▼
       Caddy reverse proxy           (TLS, DNS-01 / Let's Encrypt)
              │
              ▼
     dns-mcp container               (FastMCP, OAuth verifier)
              │
              ▼
        dns_tool library             (DoH client, validators, parsers)
              │
              ▼
   doh.lab.deflationhollow.net      (Unbound DoH resolver, optional)

Three benefits over the previous stdio-only architecture:

ones that can spawn a local subprocess.

  1. Network-accessible — hosted MCP servers can serve any client, not just

identity available to tools via whoami.

  1. OAuth-protected — bearer JWTs verified against Pocket ID JWKS; per-user

same code powers a CLI, this MCP server, and (eventually) a REST API.

  1. Library-first — dns_tool is published independently and reusable. The

The old stdio architecture lives at server.py.legacy for porting reference. The remote branch (mcp-shim Go bridge) is deprecated.

Tools

dns-mcp 2.0.0 currently exposes 19 tools. Ten additional tools from the 1.x stdio architecture are pending port into dns_tool — see Open work.

Meta

DNS

Email security

Threat intelligence

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

DNS MCP Server: common questions

Is DNS MCP Server safe?
Yes, by our scan: it is graded A (88/100). Read the DNS MCP Server safety report
How do I install DNS MCP Server?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does DNS MCP Server need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is DNS MCP Server maintained?
The last commit was 39 days ago (2026-09-26). The latest release is v1.3.4.
What can I use instead of DNS MCP Server?
Servers from other publishers that do the same job: Netintel MCP server, BlackVeil DNS & Email Security Scanner MCP server and IntoDNS.ai DNS & Email Security Scanner MCP server.
How does DNS MCP Server compare with other Email MCP servers?
safety score 88/100 (higher than 82% of 916 Email servers); github stars 1 (more than 65% of 493 Email servers). Full comparison.

Alternatives to DNS MCP Server

Same job from other publishers: the closest match first, then the best rated.

  • Netintel
    MCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments
    B
  • BlackVeil DNS & Email Security Scanner
    DNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.
    B
  • IntoDNS.ai DNS & Email Security Scanner
    DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools.
    B
  • OpenOSINT
    AI-powered OSINT agent & MCP server. 21 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.
    C
  • Atomic Mail
    Programmable email inbox for AI agents — JMAP, PoW auth, stdio MCP server.
    A