Skip to main content
Glama
Sign In

isitdns

by net.isitdns
OverviewDiscussionsAdmin

Sweep a zone's nameservers

sweep_domain
Read-onlyIdempotent

Sweep a zone's nameservers: the same names and types asked at a sample of its authoritative addresses, reporting disagreements, lame or silent servers, serial and TTL differences, the CAA in effect, and each _acme-challenge TXT or CNAME. Not for a public resolver's answer: dig. Asked with RD=0 over TCP from the isitdns edge or a probe, named on each answer. Every question not asked is listed with why, and an answer past 22,000 bytes is trimmed with counts, the whole sweep at its api: URL. names are labels under domain (@ for domain itself), 16 at most, and types 8 at most.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "domain": "<domain>"
    },
    "name": "sweep_domain"
  }
}

Input Schema

NameRequiredDescriptionDefault
namesNoLabels under domain, "@" for domain itself. Default: @, www, _dmarc, _acme-challenge
typesNoRecord types. Default: SOA, NS, A, AAAA, MX, TXT, CAA
domainYesThe zone or name to sweep, e.g. example.com. Also as "name"; a URL is read as its host.

Output Schema

NameRequiredDescriptionDefault
apiYesThe /api GET that asks it again, as a new reading
zoneNoThe zone swept
resultsNoOne row per name and type: flags, answers, not asked
serversNoEach nameserver address: name, address, family
holdbackNoThe sample: addresses known, addresses asked, and each address not asked with why
receiptsNoOne per DNS read: what, of whom, from where, when, rcode, flags, EDE, ms, answer
notPrintedNoCounts trimmed to fit, all at api
certReadinessNoPer name: the CAA set that governs it and its _acme-challenge TXT and CNAME

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed2 schema fields changed
    • changedInput schema / properties / names / description
      Previous value: -"Relative labels to ask, \"@\" for the apex. Default: @, www, _dmarc, _acme-challenge"New value: +"Labels under domain, \"@\" for domain itself. Default: @, www, _dmarc, _acme-challenge"
    • changedOutput schema / properties / certReadiness / description
      Previous value: -"Per name: CAA and ACME readiness"New value: +"Per name: the CAA set that governs it and its _acme-challenge TXT and CNAME"
  2. Changed1 schema field changed
    • changedOutput schema / (root)
      Previous value: -nullNew value: +{
+  "properties": {
+    "api": {
+      "description": "The /api GET that asks it again, as a new reading",
+      "type": "string"
+    },
+    "certReadiness": {
+      "description": "Per name: CAA and ACME readiness",
+      "type": "array"
+    },
+    "holdback": {
+      "description": "The sample: addresses known, addresses asked, and each address not asked with why",
+      "type": "object"
+    },
+    "notPrinted": {
+      "description": "Counts trimmed to fit, all at api",
+      "type": "object"
+    },
+    "receipts": {
+      "description": "One per DNS read: what, of whom, from where, when, rcode, flags, EDE, ms, answer",
+      "type": "array"
+    },
+    "results": {
+      "description": "One row per name and type: flags, answers, not asked",
+      "type": "array"
+    },
+    "servers": {
+      "description": "Each nameserver address: name, address, family",
+      "type": "array"
+    },
+    "zone": {
+      "description": "The zone swept",
+      "type": "string"
+    }
+  },
+  "required": [
+    "api"
+  ],
+  "type": "object"
+}
  3. Changed1 schema field changed
    • changedInput schema / properties / domain / description
      Previous value: -"The zone or name to sweep, e.g. example.com. Also accepted as \"name\"; a URL is reduced to its host."New value: +"The zone or name to sweep, e.g. example.com. Also as \"name\"; a URL is read as its host."
  4. Changed1 schema field changed
    • changedInput schema / properties / domain / description
      Previous value: -"The zone or name to sweep, e.g. example.com"New value: +"The zone or name to sweep, e.g. example.com. Also accepted as \"name\"; a URL is reduced to its host."
  5. Added

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover read-only/idempotent/non-destructive, and the description adds genuinely new behavioral context: queries are sent with RD=0 over TCP from the isitdns edge or a probe, every unasked question is listed with a reason, and responses over 22,000 bytes are truncated with counts, with the full sweep available at an api: URL.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and scope are front-loaded in the first clause, and the closing sentence packs the hard limits efficiently. The middle is written in clipped, subject-less fragments ('Asked with RD=0 over TCP...', 'named on each answer') that cost readability for a marginal word saving.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return formatting need not be explained, and the description still covers scope, exclusions, transport behavior, per-question omission reasons, truncation, and where to fetch the full result. Nothing material for correct invocation appears missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds constraints the schema omits: names are labels under domain with '@' meaning the zone apex, capped at 16 names and 8 types. That cap information is only available in the description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

It names a specific verb (sweep) and resource (a zone's nameservers) and spells out exactly what is compared and reported: disagreements, lame/silent servers, serial and TTL differences, CAA, and _acme-challenge records. It also explicitly separates itself from the sibling 'dig' by stating it is not a public-resolver answer.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The exclusion 'Not for a public resolver's answer: dig' gives a clear negative trigger and names the alternative tool. However, it never states positively when to reach for a sweep (e.g. auditing delegation consistency or pre-migration checks), so the agent must infer the positive case from the capability list.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All isitdns toolsInspect
Try in Browser
Claude Code, inside the Godot 4 editorFlockbay puts an AI agent in the real Godot 4 editor: it writes GDScript, runs your game and fixes what breaks. Free, or bring your own Claude Code or Codex.flockbay.comAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources