x402 DNS Email Auth Checker
Server Details
Audit SPF, DKIM, DMARC, MX, BIMI, MTA-STS for a domain; score + grade. $0.003 USDC/call via x402.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- Repository
- shaimaiiee-design/x402-dns-auth-checker
- GitHub Stars
- 0
- Server Listing
- x402 DNS Auth Checker
TDQS
Scored across 2 tools
The two tools are clearly distinct: domain_auth_check performs the actual audit while health only reports service status. There is no scenario where an agent would confuse the two.
domain_auth_check follows a readable snake_case action_noun pattern, and health is also snake_case. The only minor deviation is that health is a bare noun rather than a parallel verb_noun name, but it remains predictable as an operational endpoint.
Two tools is thin for a dedicated server, though one is a comprehensive multi-record audit and the other is a standard free health check. It is defensible for such a narrow purpose but leaves little room for finer-grained operations.
The audit tool covers SPF, DMARC, DKIM, MX, BIMI, MTA-STS and TLS-RPT with scoring and grades, which is strong lifecycle coverage for DNS email-auth checking. Gaps are minor, such as no batch/multi-domain checking or historical comparison.
Available Tools
2 toolsdomain_auth_checkAInspect
Audit a domain's email authentication DNS: SPF (record count, all qualifier, includes, ~DNS lookups vs 10 limit), DMARC (p, sp, pct, rua/ruf, adkim/aspf), DKIM (common or given selectors, key type and length), MX, plus BIMI / MTA-STS / TLS-RPT presence. Returns per-check status, issues, recommendations, score 0-100 and grade A-F. Costs $0.003 USDC per call via x402.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Domain to check, e.g. example.com | |
| selectors | No | DKIM selectors to try. Default: google, selector1, selector2, default, k1, s1, s2, mail, dkim |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does disclose two non-obvious traits: it is a paid operation ('$0.003 USDC per call via x402') and it returns per-check status, issues, recommendations, a 0-100 score and A-F grade. 'Audit'/'check' implies read-only, but it never explicitly confirms no side effects, nor does it mention rate limits, lookup timeouts, or whether failed DNS lookups surface as errors.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, both front-loaded: the first defines the audit scope, the second covers output and cost. The dense parenthetical enumerations are informative rather than filler, so every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a two-parameter, read-only audit tool with no output schema and no annotations, the description covers scope, return shape, and payment requirement well. What is missing is an explicit statement of read-only safety and any error/edge behavior (e.g., domains with no records), which matters given the absence of annotations.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and both parameters are self-documenting, so the schema already does the heavy lifting. The description's '(common or given selectors)' and 'key type and length' add only marginal meaning over the selectors default list already present in the schema, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (audit) and resource (a domain's email authentication DNS) and then enumerates exactly what is inspected: SPF qualifier/lookups, DMARC policy fields, DKIM selectors, MX, BIMI/MTA-STS/TLS-RPT. An agent can tell this apart from a generic 'health' sibling purely from the description, since the enumerated DNS records make the scope unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied by the domain-audit framing, but the description never states when to reach for this versus alternatives (e.g., the 'health' sibling) or any prerequisites such as needing a resolvable, owned domain. No explicit when-to-use or when-not-to-use guidance is provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
healthBInspect
Free health check. Returns service status, price and network.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. It discloses the return contents (service status, price, network) and that the call is free, which is useful, but says nothing about auth requirements, rate limits, or whether failures return errors versus degraded status.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences, zero waste, with the purpose ('Free health check') front-loaded ahead of the return-value summary. Adequately sized for a trivial endpoint.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter tool with no output schema, the description does sketch the return payload, but terms like 'price' and 'network' are undefined and there is no indication of response shape or failure behavior. Just enough to call it, not enough to interpret the result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so per the rubric the baseline is 4. There is nothing parameter-related the description could add.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clarifies that 'health' is a free health check that returns service status, price and network, which is more than the bare name conveys. However it never distinguishes this from the sibling domain_auth_check, and 'health check' remains somewhat vague about which service is being checked.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The only usage signal is the word 'Free', implying it can be called without cost or credentials. There is no statement of when to use this versus domain_auth_check, no prerequisites, and no exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
2 tool updates
- First observed
domain_auth_check - First observed
health
Related MCP Connectors
Check a domain's email authentication: SPF, DKIM, DMARC, BIMI, MX, MTA-STS, TLS-RPT. Score + fixes.
Check a domain's DNS, SPF/DMARC and TLS before trusting it. $0.003/call via x402.
Complete domain email-auth audit in one call: SPF with RFC 7208 lookup counting, DKIM selector pr...
Check if a domain can be email-spoofed: SPF, DMARC, DKIM, MX graded from public DNS. Authless.
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceAudits email deliverability configuration for a domain, checking SPF, DKIM, DMARC, and MX records, returning a score and recommendations.MIT
- AlicenseAqualityAmaintenanceEnables auditing any domain's email deliverability and DNS health, including SPF, DKIM, DMARC, MX, mail provider, DNS blacklist status, catch-all, domain age, and a deliverability score.1121 npm1MIT
- AlicenseAqualityAmaintenanceEnables AI agents to audit email and domain security (SPF, DKIM, DMARC, etc.) for any domain without requiring API keys.1951 npm1MIT
- AlicenseAqualityCmaintenancePerforms domain security posture checks including SPF, DKIM, DMARC, TLS, and HTTP security headers.34 npmMIT
Glama MCP Gateway
Add one secure layer between your agents and this server.