net.softricks/idig-dns
up checked
Unclaimed · Unverified
Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.
Publisher-provided description
Professional DNS diagnostics: 14 tools for DNS, DNSSEC, email security, SSL, and propagation.
Summary by lookupd
Runs DNS, DNSSEC, email security, SSL, and propagation diagnostics for domains, plus blacklist, WHOIS, and zone transfer checks.
Install
Claude Code, remote (sse)
claude mcp add --transport sse idig-dns https://mcp.softricks.net/sse
Codex, remote (sse)
codex mcp add idig-dns --url https://mcp.softricks.net/sse
Cursor, remote (sse) → .cursor/mcp.json
{
"mcpServers": {
"idig-dns": {
"type": "sse",
"url": "https://mcp.softricks.net/sse"
}
}
}Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.
Tools (19 tools)
Publisher-provided text
dns_lookupLook up DNS records for a domain. Record types: a, aaaa, ns, mx, txt, soa, caa, srv, cname, ds, tlsa, https, svcb, any, all.email_security_auditFull SPF, DKIM, DMARC, and BIMI audit with A-F grade and prioritized fix recommendations.dnssec_validateValidate DNSSEC chain of trust. Returns: secure / insecure / bogus / indeterminate.dnssec_healthDNSSEC health report: key inventory, signature expiry, algorithm assessment, DS at parent, rollover readiness, full chain of trust (Root → TLD → Domain) with chresolve_checkDNS resolution diagnostics. Returns status: ok / nxdomain / nodata / servfail / refused / timeout / degraded.diagnoseFull diagnosis combining resolution + DNSSEC. Use first when something is broken.propagation_checkCheck DNS propagation across 16 global resolvers: Google, Cloudflare, Quad9, China, Korea, Russia.mx_checkMX health + provider detection: Google Workspace, M365, Proofpoint, Zoho, 35+ providers.domain_statusRegistrar lock and EPP status. Checks transfer lock, delete lock, serverHold, pendingDelete.geo_lookupGeolocation and hosting: country, city, ISP, ASN, CDN detection, is_hosting flag.ttl_checkTTL advisory: flags dangerous TTLs and gives step-by-step migration lowering plan.zone_consistencyCheck all authoritative nameservers return identical answers. Catches lame delegation and SOA mismatches.ssl_checkSSL certificate: validity, expiry countdown, domain match, issuer, chain completeness.subdomain_discoverDiscover subdomains by probing 75 common names plus crt.sh Certificate Transparency logs. Surfaces exposed dev/staging environments.blacklist_checkIP blacklist / DNSBL check. Tests A-record and MX IPs against Spamhaus, Barracuda, SpamCop, SORBS, and more.whois_lookupParsed WHOIS: registrar, creation/expiry dates, domain age, nameservers, EPP status, DNSSEC status.http_checkHTTP/HTTPS reachability: status codes, redirect chain, HSTS header, HTTP→HTTPS redirect detection.zone_axfrAXFR zone transfer vulnerability check. Tests whether any authoritative NS allows public zone transfers (critical misconfiguration).dane_validateDANE/TLSA validation: cross-validates TLSA DNS records against the live TLS certificate. Supports all four TLSA usage types.
Details
- Version: 1.0.0
- Transports: sse
- Uptime (7 days): 100%
- Median latency: 1035 ms
- First indexed:
- Last seen in registry:
- Repository: https://github.com/kbhave/MCP-Service-iDig
Badge for your README
Shows this live status and links here; updates hourly.
[](https://lookupd.com/servers/net.softricks/idig-dns)
- 62092 servers
- Last crawl: 2026-11-11T17:17:22.074Z
- API base:
https://api.lookupd.com - MCP URL:
https://api.lookupd.com/mcp