Dns Mcp

Lightweight health check. Returns server status and timestamp with no external dependencies — no DNS queries, no HTTP requests.

Show server configuration: dnspython version, configured nameservers, search domains, and default domain. Useful for understanding which resolver the server is using and debugging query behavior.

Return the source code of this MCP server. Reads and returns the contents of server.py via __file__. A diagnostic/introspection tool — no parameters, no external dependencies.

Return per-tool call statistics for this container session. Reports uptime, total calls, and per-tool count/errors/latency since container start. Stats reset on every container restart — in-process only, no persistence.

Reset all per-tool call statistics and restart the session clock. Use this to start a fresh measurement window without restarting the container. Returns a confirmation with the new session start time.

Audit the email security posture of a domain (SPF, DKIM, DMARC, MTA-STS, BIMI). Grades A–F.

Full DNSSEC chain-of-trust audit from the IANA root trust anchor down to a target domain.

Forensic phishing analysis of a raw email (.eml or pasted headers). Returns TRUSTABLE / SUSPICIOUS / PHISHING / FURTHER ANALYSIS REQUIRED.

Domain security posture audit aligned with NIST SP 800-81r3 (Secure DNS Deployment Guide, March 2026). Covers delegation, DNSSEC, CAA, email auth, reputation, and resolver integrity.

Field-by-field reference for interpreting dns-mcp tool outputs

Return code reference for all 8 RBLs queried by check_rbl

Live DNSSEC/NSEC test zones maintained on deflationhollow.net