Skip to main content
Glama

Full Domain Security Scan

security_scan
Read-onlyIdempotent

One-shot comprehensive audit of a domain: runs DNS, SSL, HTTP headers, email auth, port scan, DNS propagation, reverse DNS, and ASN/RDAP checks in parallel, then computes a 0-100 Health Score with an A-F grade and a prioritized action list. Use this as the default starting point for "is this domain healthy/secure?" questions. Call the individual tools (e.g., ssl_check, email_auth) instead when you need depth on one area. BEHAVIOR: this includes an ACTIVE port_scan of the domain's host, so only run it on domains you own or are authorized to test. Read-only otherwise; requires no API key; rate-limited (it makes multiple backend calls). Returns the score, per-area breakdown, top actions, and per-area summaries.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
domainYesDomain to audit end-to-end (e.g., 'example.com'). Scheme and path are stripped. NOTE: the host is also port-scanned, so use only targets you are authorized to test.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
areasYesPer-area verdicts (dns, ssl, http, email, port, propagation, rdap, reverseDns, asn)
gradeYesLetter grade A+ to F
scoreYesHealth Score 0-100
actionsNoTop recommended actions
reportUrlYesHuman-facing interactive report on dechonet.com

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description discloses behavioral traits beyond the annotations: it performs an ACTIVE port scan, is otherwise read-only, requires no API key, is rate-limited, and makes multiple backend calls. This is especially valuable because annotations alone do not reveal the active scanning behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense but every sentence contributes: purpose, output, usage guidance, behavioral warning, and return summary. The BEHAVIOR section is clearly marked and front-loaded enough, though the length is slightly above minimal and could be tightened.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity, the description covers when to use it, safety/authorization requirements, rate limiting, authentication, and the types of results returned. An output schema exists, so the description does not need to detail return fields, and the provided coverage is complete for an agent to invoke this tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the schema already documents the domain parameter with examples and the port-scan warning. The description adds context about the overall scan but does not meaningfully expand on parameter semantics beyond what the schema provides, so baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('runs') and a clear resource (domain), listing exactly which checks are performed (DNS, SSL, HTTP headers, email auth, port scan, etc.) and what output is produced (Health Score, grade, action list). It clearly distinguishes this comprehensive tool from the individual sibling tools by naming examples like ssl_check and email_auth.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use this tool ('default starting point for is this domain healthy/secure?') and when to use alternatives ('Call the individual tools ... when you need depth on one area'). It also includes an authorization caveat, making the usage boundaries clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A4.7/5.0
Disambiguation5/5

Each tool targets a clearly distinct diagnostic concern: DNS, SSL, HTTP headers, email auth, email headers, ASN, reverse DNS, WHOIS, ports, subnet math, and the caller IP. The overlapping tools (ssl_check vs http_security vs security_scan) are explicitly differentiated by scope and depth, with cross-references that remove ambiguity.

Naming Consistency5/5

All tool names use lowercase snake_case and follow a consistent noun_verb or noun_noun pattern built around the resource being inspected, such as dns_lookup, ssl_check, port_scan, and whois_lookup. There are no mixed conventions like camelCase or inconsistent verb styles.

Tool Count5/5

13 tools is a well-scoped size for a network/domain/security diagnostic server. Each tool covers a distinct diagnostic capability, and the count is substantial enough to feel complete without becoming bloated or redundant.

Completeness5/5

The tool surface provides broad read-only coverage of domain and network diagnostics: DNS, propagation, WHOIS, ASN, reverse DNS, SSL, HTTP security, email authentication, raw email headers, port scanning, subnet calculation, and an aggregate security scan. There are no obvious dead ends for the stated purpose of domain/network/security investigation.

Resources