Skip to main content
Glama

Domain Trust Check (DNS, Email Auth, TLS, Headers)

domain_check

Live technical checks of a domain, measured by us at request time: A/AAAA, NS, MX records, SPF and DMARC policies, DNSSEC presence (DS), CAA, TLS certificate issuer, validity dates and hostname match on port 443, and HTTPS security headers (HSTS, CSP, X-Frame-Options). Returns a simple risk flag list. Use when an agent must sanity-check a company's or vendor's domain before trusting an email, link or supplier: does it resolve, receive mail, publish SPF/DMARC, and serve a valid TLS certificate. Paid per call via x402 (USDC on Base).

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
domainNoDomain name, e.g. example.com (no scheme or path)
payment_signatureNox402 v2 PAYMENT-SIGNATURE header value. Omit to receive payment requirements.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does well: it discloses that checks are performed live at request time, that the call is paid per invocation via x402 (USDC on Base), and that omitting the payment signature yields payment requirements rather than a result. It does not mention rate limits, latency, or failure modes, so it is not fully complete.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core purpose, then the enumerated checks, then the use case, then the payment model — a sensible priority order. It is dense but each clause adds information; the long record list is the only part that could be tightened.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description must indicate what comes back, and it does ('Returns a simple risk flag list'), which is enough to set expectations for a 2-param read-only diagnostic tool. It stops short of describing the flag vocabulary or response shape, leaving a minor gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters are already documented in the schema, including the 'no scheme or path' domain constraint and the omit-to-receive-requirements behavior of payment_signature. The description adds the pricing context behind the payment field but no syntax or format detail beyond the schema, matching the baseline for fully documented params.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb and resource ('Live technical checks of a domain') and then enumerates exactly what is checked: A/AAAA, NS, MX, SPF, DMARC, DNSSEC, CAA, TLS certificate details, and HTTPS security headers. An agent knows precisely what capability this exposes without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states a concrete usage scenario: sanity-check a company's or vendor's domain before trusting an email, link, or supplier, with the specific questions it answers (does it resolve, receive mail, publish SPF/DMARC, serve valid TLS). There are no sibling tools, so no alternative to route against, but no explicit when-not condition is given either.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources