Skip to main content
Glama

Server Details

Free anonymous website, DNS, email and TLS checks, plus monitor read and opt-in write access.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Uptime
100.0% over the last 24 hours
Last Tested
Transport
Streamable HTTP · MCP 2025-11-25
URL
ChatGPT
–
Claude
Uptimeify

TDQS

A4.1/5.0

Scored across 20 tools

Disambiguation4/5

Most tools have a clear niche, and the descriptions explicitly disambiguate overlapping pairs such as check_dns vs dns_propagation, whois vs domain_expiry, and asn_lookup vs ip_geolocation. However, several adjacent tools like ping_test/port_check and whois/domain_expiry could still be confused by an agent, so the boundary is good but not perfect.

Naming Consistency3/5

All names are lowercase snake_case and readable, but conventions are mixed: verb-first names like check_dns/check_ssl, noun-first action names like dkim_check/port_check, lookup-suffixed names like asn_lookup/mx_lookup, and bare noun phrases like website_status/response_time/whois. The inconsistency is stylistic rather than chaotic, but it prevents a strong predictable pattern.

Tool Count4/5

Twenty tools is on the high side, but appropriate for a broad network diagnostics suite covering DNS, TLS, HTTP, email authentication, IP intelligence, and WHOIS. A few tools could be consolidated, but each covers a distinct diagnostic dimension rather than being redundant.

Completeness4/5

Core coverage is strong: DNS, TLS, HTTP status/headers/redirects, SPF/DKIM/DMARC, WHOIS, blocklists, ports, ping, reverse DNS, ASN, and geolocation are all present. Gaps are minor but real: no traceroute/path analysis, no SMTP or UDP testing, no DNSSEC validation, and no historical uptime/monitoring despite the product name.

Available Tools

20 tools
asn_lookupASN lookupA
Read-only
Inspect

Resolves a public IP address, or a domain, to the autonomous system that announces it: AS number and name, announced prefix, country code, registry and allocation date. Distinguishes hosting providers, CDNs and corporate networks; it does not identify the site owner. Private and reserved addresses have no announcing AS. ip_geolocation returns the same AS data plus country and PTR. Anonymous, rate-limited per IP.

Inputs: query (required). Returns: cc, ip, ok, asns, +4 more

check_dnsCheck DNSA
Read-only
Inspect

Resolves a domain's DNS records in one call (A, AAAA, CNAME, MX, TXT, NS, SOA and more) and returns each record type with its values, or a per-type error where a lookup failed. Answers come from a single resolver; dns_propagation compares several. Reads records only and never connects to the host. Anonymous, rate-limited per IP.

Inputs: domain (required). Returns: ok, found, domain, records, +1 more

check_sslCheck SSLA
Read-only
Inspect

Fetches and evaluates a host's TLS certificate over a live handshake: subject, issuer, validity window, days until expiry, hostname match, chain trust, self-signed and expired flags, SANs, serial and SHA-256 fingerprint. Takes a hostname (not an IP address) and an optional port (default 443). A single sample taken now; HTTP behaviour is covered by website_status and the HSTS policy by hsts_check. Anonymous, rate-limited per IP; private and reserved addresses are refused.

Inputs: host (required), port. Returns: ip, ok, san, host, +16 more

dkim_checkDKIM checkA
Read-only
Inspect

Fetches and validates the DKIM public key at ._domainkey.: parsed tags, key type, key size and warnings such as a revoked or malformed key. The selector is required and cannot be derived from the domain; it appears in a message's DKIM-Signature header (common provider values: google, selector1, default, k1). An unused selector returns found=false. Anonymous, rate-limited per IP.

Inputs: domain (required), selector (required). Returns: ok, bits, tags, error, +7 more

dmarc_checkDMARC checkA
Read-only
Inspect

Fetches a domain's DMARC record from _dmarc. and evaluates it: raw record, parsed tags, policy and subdomain policy, percentage, and warnings for records that parse but offer no protection (p=none, missing rua). Reports the published policy, not whether real mail passes it; spf_check and dkim_check cover the mechanisms it aligns against. Anonymous, rate-limited per IP.

Inputs: domain (required). Returns: ok, pct, tags, error, +6 more

dnsbl_checkDNSBL checkA
Read-only
Inspect

Checks a public IP address against common DNS blocklists and returns, per list, whether it is listed, the list's reason code and delisting URL, plus totals and a clean flag. Takes an IP address, not a domain (mx_lookup or check_dns resolve one). Slow lists are skipped rather than awaited, so partial=true marks a provisional verdict; lists that could not answer are counted in zonesFailed and keep clean false. One call reflects only the current moment. Anonymous, with the strictest per-IP rate limit of the anonymous tools.

Inputs: ip (required). Returns: ip, ok, clean, total, +5 more

dns_propagationDNS propagationA
Read-only
Inspect

Queries one domain against several public resolvers and compares the answers, which tells a recent record change apart from a stale cache. Returns each resolver with its values and a consistent flag that stays false while the answers differ. check_dns is the cheaper call for a single reading of all record types. Anonymous, rate-limited per IP.

Inputs: domain (required). Returns: ok, type, domain, results, +1 more

domain_expiryDomain expiryA
Read-only
Inspect

Reports a domain's registration expiry from WHOIS with the remaining days, plus registrar, creation and update dates and the EPP status codes that reveal redemption or pending delete. Covers the registration, not the TLS certificate (check_ssl). tldSupported=false means the TLD has no queryable WHOIS server, not that the domain is unregistered. Anonymous, rate-limited per IP.

Inputs: domain (required). Returns: ok, tld, error, found, +8 more

hsts_checkHSTS checkA
Read-only
Inspect

Checks a domain's HTTP Strict Transport Security setup: header presence and raw value, max-age, includeSubDomains and preload flags, whether plain HTTP redirects to HTTPS, preload-list eligibility, and warnings for ineffective values. Reports the advertised policy only; the certificate is check_ssl and the redirect chain redirect_check. Anonymous, rate-limited per IP; private and reserved addresses are refused.

Inputs: domain (required). Returns: ok, raw, domain, maxAge, +6 more

http_headersHTTP headersA
Read-only
Inspect

Fetches a URL and returns its HTTP response headers verbatim as a name/value map, with the status line and every redirect hop. The response body is never returned. website_status gives a plain up/down verdict and redirect_check the redirect chain alone. Anonymous, rate-limited per IP; private and reserved addresses are refused.

Inputs: url (required). Returns: ok, url, status, headers, +2 more

ip_geolocationIP geolocationA
Read-only
Inspect

Locates a public IP address, or a domain resolved to one, at network level: country code, registry, announced prefix, PTR hostname and autonomous systems. Registry-based, so it names the network operator's country, which for hosted or CDN addresses differs from where a visitor or business is located; it is not a street address. Private and reserved addresses have no answer. Anonymous, rate-limited per IP.

Inputs: query (required). Returns: cc, ip, ok, ptr, +6 more

mx_lookupMX lookupA
Read-only
Inspect

Looks up a domain's MX records and resolves each mail exchanger to its IPv4 and IPv6 addresses, ordered by priority, flagging hosts that resolve into private address space. Shows where mail is delivered; it does not connect to the servers or test SMTP, and sender authorisation is covered by spf_check, dkim_check and dmarc_check. Anonymous, rate-limited per IP.

Inputs: domain (required). Returns: ok, found, domain, servers

ping_testPing testA
Read-only
Inspect

Measures reachability and round-trip time with repeated TCP connections to a host port (default 443), returning every attempt, sent and received counts, packet loss and min/avg/max milliseconds. A TCP handshake, not an ICMP echo, so hosts that drop ICMP still answer. website_status gives a one-shot verdict for a website. Anonymous, rate-limited per IP; private and reserved addresses are refused.

Inputs: host (required), port. Returns: ip, ok, host, port, +7 more

port_checkPort checkA
Read-only
Inspect

Opens TCP connections to one port or a list of up to 10 ports on a host and reports each as open, closed or filtered, with the time taken. partial=true means the time budget ran out, and portsNotChecked lists the ports that were never probed; filtered means no answer arrived, not that the port is certainly closed. TCP only, no UDP. Anonymous, rate-limited per IP; hosts resolving to private or reserved addresses are refused.

Inputs: host (required), port (required). Returns: ip, ok, host, port, +6 more

redirect_checkRedirect checkA
Read-only
Inspect

Follows a URL's redirect chain hop by hop and returns each step's status, source and target, the final URL and status, the hop count, and warnings for loops, HTTPS-to-HTTP downgrades and overly long chains. Body and headers of the destination are not returned (http_headers covers headers). Anonymous, rate-limited per IP; private and reserved addresses are refused.

Inputs: url (required). Returns: ok, hops, start, finalUrl, +4 more

response_timeResponse timeA
Read-only
Inspect

Measures how fast a URL answers over several samples, returning each sample plus min, average and max milliseconds, the HTTP status and an up flag. partial=true means fewer samples returned than requested. Measures the HTTP response only: no browser runs, so JavaScript, assets and Core Web Vitals are not reflected. A snapshot, not a trend. Anonymous, rate-limited per IP; private and reserved addresses are refused.

Inputs: url (required). Returns: ok, up, avg, max, +6 more

reverse_dnsReverse DNSA
Read-only
Inspect

Resolves a public IP address to the PTR hostnames published for it, or returns the resolver's error where there is none. A PTR is set by whoever controls the address block, so it names the host rather than necessarily the site; a missing PTR is common and not a fault. Forward and reverse records need not agree, and this call does not check that they do. Anonymous, rate-limited per IP.

Inputs: ip (required). Returns: ip, ok, error, hostnames

spf_checkSPF checkA
Read-only
Inspect

Fetches a domain's SPF record and evaluates it: raw record, parsed terms with qualifiers, DNS lookups counted against the RFC 7208 limit of ten, the final all qualifier, and warnings for common silent failures. A domain without a record returns found=false. Alignment and reporting belong to dmarc_check, signing keys to dkim_check. Anonymous, rate-limited per IP.

Inputs: domain (required). Returns: ok, all, error, found, +5 more

website_statusWebsite statusA
Read-only
Inspect

Checks whether a website is up right now: up/down verdict, HTTP status and text, response time, server header and number of redirects followed. The usual first call for any is-the-site-down question. A single sample from one location, not uptime; response_time, http_headers and redirect_check go deeper. Anonymous, rate-limited per IP; private and reserved addresses are refused.

Inputs: url (required). Returns: ok, up, url, server, +4 more

whoisWHOISA
Read-only
Inspect

Retrieves WHOIS registration data for a domain: registrar, creation, update and expiry dates, EPP status codes, nameservers and the contact roles the registry still publishes (personal data is usually redacted). tldSupported=false means the TLD has no queryable WHOIS server, which differs from an unregistered domain (found=false). domain_expiry returns the expiry with the remaining days computed. Anonymous, rate-limited per IP.

Inputs: domain (required). Returns: ok, tld, error, found, +9 more

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Related MCP Connectors

    Related MCP Servers

    • A
      license
      Not graded
      quality
      C
      maintenance
      Free SSL/TLS scanning and Let's Encrypt certificate issuance (private key stays local), plus certificate-expiry monitoring via one MCP server. Public scan and cert tools need no account.
      3
      MIT
    • A
      license
      A
      quality
      C
      maintenance
      Provides comprehensive tools for real-time DNS queries across 53 record types, global propagation checks, and SSL certificate analysis. It also enables domain security scans for SPF/DKIM/DMARC configurations and HTTP uptime monitoring.
      8
      89 npm
      23
      Apache 2.0
    • A
      license
      Not graded
      quality
      B
      maintenance
      Enables AI agents to run read-only network and domain diagnostics without an account or API key, covering DNS lookups and propagation, SPF/DKIM/DMARC and BIMI/MTA-STS email authentication checks, TLS certificates and CAA, WHOIS, IP/ASN and blacklist data, plus ping, traceroute and port checks from internet-facing servers. It also produces graded domain health and full DNS reports with reasons and fixes for each failed check.
      1
      MIT
    • A
      license
      Not graded
      quality
      B
      maintenance
      Performs domain, email, and web audits in a single tool call, checking DNS, RDAP, TLS, SPF, DMARC, DKIM, MTA-STS, BIMI, security headers, and cookies, and returning reproducible findings with an A–F score. Also captures PNG screenshots of public URLs, working read-only against public records with no caching between calls.
      MIT
    Try in Browser

    Glama MCP Gateway

    Add one secure layer between your agents and this server.

    Resources