com.tamingdns/mcp

up checked 2026-11-10T18:37:31.947Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided title

TamingDNS

Publisher-provided description

Check SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT, BIMI, DANE and DNSSEC, and analyse email headers.

Summary by lookupd

Audits email DNS records like SPF, DKIM, DMARC, MX, DNSSEC and BIMI, and analyses raw email headers for spoofing signs.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http mcp https://tamingdns.com/mcp

Codex, remote (streamable-http)

codex mcp add mcp --url https://tamingdns.com/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "mcp": {
      "url": "https://tamingdns.com/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (13 tools)

Publisher-provided text

• check_spf Check the SPF record for a domain. Returns the raw record, grade (A-F), the terminal `all` qualifier (resolved through redirect= chains), structured findings (N
• check_dkim Look up a DKIM public key at <selector>._domainkey.<domain> and validate it. Detects key revocation (empty p=), RSA key length (KEY_TOO_SHORT below 1024, KEY_WE
• check_dmarc Check the _dmarc record for a domain with DUAL discovery: the RFC 7489 §6.6.3 organisational-domain ladder (what major receivers enforce today — grade/verdict a
• check_tls_rpt Check the TLS-RPT (SMTP TLS Reporting, RFC 8460) record at _smtp._tls.<domain>. Strict §3 classification: the record must BEGIN with the case-sensitive v=TLSRPT
• check_mta_sts Check MTA-STS (RFC 8461) for a domain: the _mta-sts TXT record (strict §3.1 selection — case-sensitive leading v=STSv1, exactly one record, required 1-32 alphan
• check_bimi Check default._bimi.<domain>: parses the BIMI record, validates the SVG Tiny-PS logo, inspects the VMC chain (expiry, EKU, SCT, issuer-accepted, SAN match, logo
• check_dane Check SMTP DANE / TLSA records for a domain (RFC 7672). Resolves the MX hosts (falls back to the apex when none), looks up the TLSA record at _25._tcp.<mx-host>
• check_dnssec Validate a domain's DNSSEC chain of trust. Pulls DS (at the parent), DNSKEY, and RRSIG over binary DoH, walks the chain zone-by-zone (root → TLD → domain) recom
• check_mx Inspect a domain's MX / mail-routing posture. Resolves the apex MX RRset (priority-sorted), and for each host the A/AAAA addresses, PTR + forward-confirmed reve
• check_m365 Audit a domain's DNS against what Microsoft 365 expects: SPF includes spf.protection.outlook.com, DKIM selector1/selector2 (CNAME target and key), DMARC policy
• check_google_workspace Audit a domain's DNS against what Google Workspace expects: MX to Google (smtp.google.com, or the legacy aspmx hosts Google still supports), SPF includes _spf.g
• check_dns_propagation Ask 14 public DoH resolvers in North and South America, Europe and Asia (Google, Cloudflare, Quad9, CIRA, Comcast, Mullvad, DNSPod, IIJ, DNS.SB and more) for on
• analyze_email_headers Analyse a pasted block of raw email headers for spoofing and phishing tells. Input is the raw headers (everything up to the first blank line — "Show original" /

Changes

Newest first, as lookupd saw them

• 2026-11-11: version 1.0.1 → 1.0.2

Details

• Version: 1.0.2
• Transports: streamable-http
• Uptime (7 days): 100%
• Median latency: 432 ms
• First indexed: 2026-11-06T16:17:29.959Z
• Last seen in registry: 2026-11-11T08:17:19.819Z
• Repository: https://github.com/PaulOgier/tamingdns-mcp
• Website: https://tamingdns.com/mcp

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/com.tamingdns/mcp.svg)](https://lookupd.com/servers/com.tamingdns/mcp)

• 62092 servers
• Last crawl: 2026-11-11T17:17:22.074Z
• API base: https://api.lookupd.com
• MCP URL: https://api.lookupd.com/mcp