Outside-in DNS, email security, SEO, GEO and app-link checks plus developer utilities.
Scored across 13 tools
Most tools have clearly distinct purposes: Apple pass generation/inspection/repair, DNS tracing, CORS diagnosis, CIDR calculation, regex/Caddy transpilation, favicon generation, App Links validation, and SEO/GEO audits. Minor overlap exists between analyze_geo_readiness and audit_website_seo, and between inspect_domain_security and trace_dns_delegation, but descriptions make the intended targets distinguishable.
All tool names use snake_case and begin with a clear verb (analyze, audit, calculate, diagnose, generate, inspect, repair, trace, transpile, validate). The pattern is predictable throughout, with only natural phrasal differences such as transpile_to_caddyfile.
13 tools is within the ideal 3-15 range and each tool represents a distinct utility in a broad web-engineering toolkit. The count does not feel bloated or artificially thin for the apparent scope.
Several domains are covered only diagnostically or one-way: SEO, CORS, domain security, DNS delegation, and CIDR analysis have no corresponding repair/generation tools, while only Apple pkpass provides a generate-inspect-repair lifecycle. Agents would need external tools for remediation or broader web infrastructure coverage.
Analyze Generative Engine Optimization (GEO) signals and AI crawler readiness for a web page (schema, citations, provenance, answer structure, llms.txt, AI bot robots rules).
Inputs: url (required).
Run a deterministic technical SEO audit for a public website URL. Checks canonicals, title tags, headings, robots.txt, sitemaps, redirects, crawl traps, and indexability.
Inputs: url (required).
Analyze IPv4/IPv6 CIDR subnets for range collisions, full containment, 2D bit-tree matrix partition, and available free subnet allocation.
Inputs: cidrs (required), parent_cidr, requested_free_prefix.
Analyze CORS HTTP request and response headers for wildcard/credential security violations, missing Vary: Origin, preflight OPTIONS handling, and header exposure.
Inputs: request_origin (required), response_headers (required), with_credentials.
Generate a production-ready, fully compliant Apple Wallet pass.json specification based on pass type, metadata, colors, barcode, and field values.
Inputs: pass_type (required), description (required), organization_name (required), label_color, +8 more.
Generate modern multi-platform favicon bundle (adaptive dark-mode SVG, multi-resolution ICO, Apple Touch Icon, Android PWA icons, webmanifest) and minimal HTML tags from SVG or image input.
Inputs: svg_content (required), dark_mode_strategy.
Inspect and validate Apple Wallet .pkpass JSON structure (pass.json) or package manifests: checks required keys, pass styles, dates, ISO 8601 timezones, transit types, barcodes, and color contrast.
Inputs: pass_json (required).
Inspect domain email security and deliverability standards: DMARC (BIMI compliance), BIMI DNS & SVG reachability, MTA-STS (RFC 8461), SMTP TLS-RPT (RFC 8460), SPF and MX records.
Inputs: domain (required).
Automatically repair and sanitize broken Apple Wallet pass.json manifests: fixes missing formatVersion, prefixes passTypeIdentifier, ensures 10-character team ID, normalizes dates to ISO 8601 with timezones, and auto-corrects low contrast.
Inputs: pass_json (required).
Query live DNS records and inspect the authoritative nameservers returned for a domain.
Inputs: domain (required), query_type.
Transpile and analyze regular expressions across engines (PCRE, Go RE2, JavaScript, Python re, Rust regex) with compatibility checks and ReDoS safety analysis.
Inputs: pattern (required), source_engine, target_engine.
Transpile Nginx (nginx.conf, server blocks) or Apache (.htaccess, VirtualHost) web server configuration to clean, idiomatic Caddyfile with migration advisories.
Inputs: config_content (required), server_type.
Inspect and validate Apple App Site Association (apple-app-site-association) and Android Digital Asset Links (assetlinks.json) files, HTTPS hosting rules, and test URL path routing, and compare the origin AASA with the copy on Apple's CDN.
Inputs: domain (required), test_url.
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
HTTP, DNS, SSL, WHOIS, ping, security-header, SEO and AI-readiness checks for any website.
DNS, WHOIS, SSL, IP geolocation, email validation, DNSBL blacklist, HTTP headers, subnet calc.
DNS lookups, health reports, SSL certs, security scans, GEO scoring, uptime checks
DNS, email auth, TLS, BGP/RPKI, WHOIS and subnet tools with plain-English fixes, plus webhook URLs.
Add one secure layer between your agents and this server.
