dns_change_review
Review proposed DNS changes BEFORE applying them. Compares a domain's current public DNS with a proposed future state, returns a diff, deterministic rule-based findings (SPF/DMARC/MX/CAA/DNSSEC pitfalls, dangling records, mail breakage, etc.) with suggested fixes, and an overall 0-100 risk score. Stateless — nothing is stored.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Domain whose current public DNS will be compared against the proposed records (e.g. example.com) | |
| server | No | DNS server to use when fetching the current records. Default: cloudflare. | |
| records | Yes | The proposed (future) DNS state: either BIND zone-file text or an array of {type, name?, value, ttl?, priority?} records. This is the COMPLETE desired state for the zone — records present now but omitted here are treated as deletions. |