Domain Trust Check (DNS, Email Auth, TLS, Headers)
Server Details
Live domain trust checks: DNS, MX, SPF, DMARC, DNSSEC, TLS certificate and HTTPS headers. x402.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
TDQS
Scored across 1 tool
There is only one tool, so there is no possibility of misselection between tools. Its purpose (aggregate live domain trust verification) is stated clearly and unambiguously.
The single name `domain_check` is readable snake_case with a clear noun_verb form. With only one tool there is no pattern to validate against, so full consistency cannot be demonstrated.
A single tool for a service spanning DNS, email auth, TLS and headers is borderline thin — an agent cannot request a subset of checks (e.g. TLS only) and every call pays for the full battery. The monolithic aggregate is defensible for a per-call paid service, but granularity is limited.
Coverage of the stated domain is broad: A/AAAA, NS, MX, SPF, DMARC, DNSSEC DS, CAA, TLS validity/hostname match and common security headers. Gaps exist (DKIM, MTA-STS/BIMI, blacklist/reputation data, redirect/HTTP-status detail) but are workarounds or secondary for a trust sanity-check.
Available Tools
1 tooldomain_checkAInspect
Live technical checks of a domain, measured by us at request time: A/AAAA, NS, MX records, SPF and DMARC policies, DNSSEC presence (DS), CAA, TLS certificate issuer, validity dates and hostname match on port 443, and HTTPS security headers (HSTS, CSP, X-Frame-Options). Returns a simple risk flag list. Use when an agent must sanity-check a company's or vendor's domain before trusting an email, link or supplier: does it resolve, receive mail, publish SPF/DMARC, and serve a valid TLS certificate. Paid per call via x402 (USDC on Base).
| Name | Required | Description | Default |
|---|---|---|---|
| domain | No | Domain name, e.g. example.com (no scheme or path) | |
| payment_signature | No | x402 v2 PAYMENT-SIGNATURE header value. Omit to receive payment requirements. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does well: it discloses that checks are performed live at request time, that the call is paid per invocation via x402 (USDC on Base), and that omitting the payment signature yields payment requirements rather than a result. It does not mention rate limits, latency, or failure modes, so it is not fully complete.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the core purpose, then the enumerated checks, then the use case, then the payment model — a sensible priority order. It is dense but each clause adds information; the long record list is the only part that could be tightened.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description must indicate what comes back, and it does ('Returns a simple risk flag list'), which is enough to set expectations for a 2-param read-only diagnostic tool. It stops short of describing the flag vocabulary or response shape, leaving a minor gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so both parameters are already documented in the schema, including the 'no scheme or path' domain constraint and the omit-to-receive-requirements behavior of payment_signature. The description adds the pricing context behind the payment field but no syntax or format detail beyond the schema, matching the baseline for fully documented params.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb and resource ('Live technical checks of a domain') and then enumerates exactly what is checked: A/AAAA, NS, MX, SPF, DMARC, DNSSEC, CAA, TLS certificate details, and HTTPS security headers. An agent knows precisely what capability this exposes without opening the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It states a concrete usage scenario: sanity-check a company's or vendor's domain before trusting an email, link, or supplier, with the specific questions it answers (does it resolve, receive mail, publish SPF/DMARC, serve valid TLS). There are no sibling tools, so no alternative to route against, but no explicit when-not condition is given either.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
- First observed
domain_check
Related MCP Connectors
Domain checks: SPF, DKIM, DMARC, BIMI, MTA-STS, SSL/TLS and HTTP security headers.
Pay-per-call x402 DNS, WHOIS/RDAP, availability, email security, SSL check, CT subdomains.
Check a domain's email authentication: SPF, DKIM, DMARC, BIMI, MX, MTA-STS, TLS-RPT. Score + fixes.
Email posture for any domain: can it receive mail, can it be spoofed? MX, SPF and DMARC.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables DNS and email security analysis through passive and active scanning capabilities. Provides comprehensive domain security checks including SPF, DMARC, DNSSEC validation, MX record analysis, and SMTP connectivity testing.MIT
- AlicenseAqualityCmaintenancePerforms domain security posture checks including SPF, DKIM, DMARC, TLS, and HTTP security headers.34 npmMIT
- AlicenseAqualityBmaintenanceProvides comprehensive email deliverability and domain registration analysis, evaluating SPF, DKIM, DMARC, DNS records, and expiry to identify issues and suggest fixes.5MIT
- AlicenseAqualityFmaintenanceProvides comprehensive tools for real-time DNS queries across 53 record types, global propagation checks, and SSL certificate analysis. It also enables domain security scans for SPF/DKIM/DMARC configurations and HTTP uptime monitoring.879 npm22Apache 2.0
Glama MCP Gateway
Add one secure layer between your agents and this server.