ShieldDNS MCP serverofficial
A
licenseA
qualityB
maintenanceLets AI agents and assistants check domains or links for safety before opening them, returning verdicts, risk scores, advice, and DNS resolution details through DNS-over-HTTPS.
3
MIT
Front Sentinel
Server Details
Read-only security checks for dApp domains: registry lock, DNSSEC, CAA, SRI, SEAL DNS controls
Ownership verified
- Status
- Healthy
- Uptime
- 100.0% over the last 24 hours
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- ChatGPT
- –
- Claude
- –
TDQS
A3.7/5.0
Scored across 4 tools
Disambiguation3/5
scan_domain explicitly bundles registry locks, SRI, DNSSEC, CAA, expiry and nameserver consistency — i.e. the subject matter of check_registry_lock, check_sri and a good part of check_seal_dns_registrar. The descriptions do differentiate them as summary-vs-deep-dive-vs-certification-checklist, but an agent asking 'is this domain protected?' can plausibly land on any of three tools, and must know to chain them for full detail.
Naming Consistency4/5
Three tools follow a clean check_<subject> snake_case pattern; only scan_domain deviates with a different verb. The deviation is semantically justified (aggregate scoring vs single check) and the naming stays readable and predictable.
Tool Count4/5
Four tools is on the lean side but each is a dense, multi-check operation rather than a thin wrapper, so the surface feels deliberately scoped. It could arguably use one or two more (e.g. a standalone DNSSEC or email-auth check) without bloating.
Completeness4/5
Coverage spans registrar/registry locks, DNSSEC, CAA, SPF/DMARC/MTA-STS, expiry, nameserver consistency, SRI and CSP, plus a remediation aid (sha384 generation) and a scored aggregate. Gaps remain around TLS/certificate health, bulk or multi-domain scanning, and any re-check/monitoring or export of results, but these are workable around.
Available Tools
4 toolscheck_registry_lockRegistry lock checkARead-onlyIdempotentInspect
Reads the domain's EPP status codes from RDAP and tells whether registry lock (serverUpdateProhibited + serverTransferProhibited) is on, partly on or off, and which registrar-level locks are set.
Inputs: domain (required).
check_seal_dns_registrarSEAL DNS & Registrar self-checkARead-onlyIdempotentInspect
Goes through the 16 controls of the SEAL Security Frameworks certification for DNS & Registrar and marks what public data shows for each: ok, partial, gap, not visible from outside, or a process control the team has to document itself. Includes DNSSEC, CAA, SPF/DMARC/MTA-STS, locks, expiry and security.txt.
Inputs: domain (required).
check_sriSubresource Integrity checkARead-onlyIdempotentInspect
Loads a public page and lists every script, stylesheet and preload it pulls in. For third-party files, checks whether an integrity= hash is present and matches, and returns a ready sha384 hash for files that have none.
Inputs: url (required).
scan_domainDomain and frontend security scanARead-onlyIdempotentInspect
Scores how well a dApp or website domain is protected against hijacking: registrar transfer/update locks, registry lock, DNSSEC, CAA, expiry, nameserver consistency across resolvers, SRI on third-party scripts and the Content-Security-Policy header. Returns a 0-100 score, each check with pass/fail/unknown and advice. Results are cached for an hour.
Inputs: domain (required).
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Related MCP Connectors
Read-only crypto safety: token honeypot checks, EIP-712 signature decode, approval scans.
Check a site's TLS certificate and its domain registration expiry. Read-only, no sign-in.
DNS records, SSL certificate, WHOIS/RDAP and website tech scan for any domain
DNS monitoring and domain security: live DNS, propagation, WHOIS/RDAP, SSL and look-alike domains.
Related MCP Servers
- AlicenseAqualityDmaintenancePerforms domain security posture checks including SPF, DKIM, DMARC, TLS, and HTTP security headers.38 npmMIT
- AlicenseNot gradedqualityBmaintenancePerforms domain, email, and web audits in a single tool call, checking DNS, RDAP, TLS, SPF, DMARC, DKIM, MTA-STS, BIMI, security headers, and cookies, and returning reproducible findings with an A–F score. Also captures PNG screenshots of public URLs, working read-only against public records with no caching between calls.MIT
- AlicenseAqualityCmaintenanceProvides comprehensive tools for real-time DNS queries across 53 record types, global propagation checks, and SSL certificate analysis. It also enables domain security scans for SPF/DKIM/DMARC configurations and HTTP uptime monitoring.889 npm23Apache 2.0
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd
Glama MCP Gateway
Add one secure layer between your agents and this server.