Skip to main content
Glama

Domain Trust Check (DNS, Email Auth, TLS, Headers)

Server Details

Live domain trust checks: DNS, MX, SPF, DMARC, DNSSEC, TLS certificate and HTTPS headers. x402.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Last Tested
Transport
Streamable HTTP · MCP 2025-11-25
URL

TDQS

A4.1/5.0

Scored across 1 tool

Disambiguation5/5

There is only one tool, so there is no possibility of misselection between tools. Its purpose (aggregate live domain trust verification) is stated clearly and unambiguously.

Naming Consistency4/5

The single name `domain_check` is readable snake_case with a clear noun_verb form. With only one tool there is no pattern to validate against, so full consistency cannot be demonstrated.

Tool Count3/5

A single tool for a service spanning DNS, email auth, TLS and headers is borderline thin — an agent cannot request a subset of checks (e.g. TLS only) and every call pays for the full battery. The monolithic aggregate is defensible for a per-call paid service, but granularity is limited.

Completeness4/5

Coverage of the stated domain is broad: A/AAAA, NS, MX, SPF, DMARC, DNSSEC DS, CAA, TLS validity/hostname match and common security headers. Gaps exist (DKIM, MTA-STS/BIMI, blacklist/reputation data, redirect/HTTP-status detail) but are workarounds or secondary for a trust sanity-check.

Available Tools

1 tool
domain_checkAInspect

Live technical checks of a domain, measured by us at request time: A/AAAA, NS, MX records, SPF and DMARC policies, DNSSEC presence (DS), CAA, TLS certificate issuer, validity dates and hostname match on port 443, and HTTPS security headers (HSTS, CSP, X-Frame-Options). Returns a simple risk flag list. Use when an agent must sanity-check a company's or vendor's domain before trusting an email, link or supplier: does it resolve, receive mail, publish SPF/DMARC, and serve a valid TLS certificate. Paid per call via x402 (USDC on Base).

ParametersJSON Schema
NameRequiredDescriptionDefault
domainNoDomain name, e.g. example.com (no scheme or path)
payment_signatureNox402 v2 PAYMENT-SIGNATURE header value. Omit to receive payment requirements.

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does well: it discloses that checks are performed live at request time, that the call is paid per invocation via x402 (USDC on Base), and that omitting the payment signature yields payment requirements rather than a result. It does not mention rate limits, latency, or failure modes, so it is not fully complete.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core purpose, then the enumerated checks, then the use case, then the payment model — a sensible priority order. It is dense but each clause adds information; the long record list is the only part that could be tightened.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description must indicate what comes back, and it does ('Returns a simple risk flag list'), which is enough to set expectations for a 2-param read-only diagnostic tool. It stops short of describing the flag vocabulary or response shape, leaving a minor gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters are already documented in the schema, including the 'no scheme or path' domain constraint and the omit-to-receive-requirements behavior of payment_signature. The description adds the pricing context behind the payment field but no syntax or format detail beyond the schema, matching the baseline for fully documented params.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb and resource ('Live technical checks of a domain') and then enumerates exactly what is checked: A/AAAA, NS, MX, SPF, DMARC, DNSSEC, CAA, TLS certificate details, and HTTPS security headers. An agent knows precisely what capability this exposes without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states a concrete usage scenario: sanity-check a company's or vendor's domain before trusting an email, link, or supplier, with the specific questions it answers (does it resolve, receive mail, publish SPF/DMARC, serve valid TLS). There are no sibling tools, so no alternative to route against, but no explicit when-not condition is given either.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 1 tool update
    • First observeddomain_check

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables DNS and email security analysis through passive and active scanning capabilities. Provides comprehensive domain security checks including SPF, DMARC, DNSSEC validation, MX record analysis, and SMTP connectivity testing.
    MIT
  • A
    license
    A
    quality
    F
    maintenance
    Provides comprehensive tools for real-time DNS queries across 53 record types, global propagation checks, and SSL certificate analysis. It also enables domain security scans for SPF/DKIM/DMARC configurations and HTTP uptime monitoring.
    8
    79 npm
    22
    Apache 2.0
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources