Skip to main content
Glama

Check Domain Verification

check_domain_verification
Idempotent

Check whether a monitored domain's DNS Doctor ownership TXT record is published yet and mark the domain verified when found. Reports which nameservers were queried so pending, wrong-value, and transient lookup failures stay distinct.

Instructions

Use this only for DNS Doctor's own ownership TXT challenge on a domain the user already added to their DNS Doctor account (add_monitored_domain). For a TXT record another service asked for (Google Workspace, Microsoft 365, Shopify or any site verification), use check_record instead. Check whether the ownership TXT record for a domain the user has added is visible yet, and mark it verified when it is. The result says WHICH outcome occurred and which nameservers were asked, so you can tell 'not published yet' from 'published with the wrong value' from 'our lookup did not complete' — a lookup that did not complete is TRANSIENT, never a verdict about their DNS. On success the result also carries the DMARC reporting record that turns monitoring on. Print every record host and value EXACTLY as returned — never rewrite, reformat or improve a record string. Nothing here is applied to anyone's DNS: a human publishes every record, and you must show them what you are about to add and get their approval before using any DNS tool of your own. When guidance.note is present, relay it as given: it covers edge cases such as a domain on Automatic DMARC.

Input Schema

NameRequiredDescriptionDefault
domainYesThe domain, e.g. example.com. For add_monitored_domain: any registrable domain the linked account owns (re-adding one it already monitors returns that row). For check_domain_verification and get_domain_records: a domain this account already monitors, verified or still pending. Any other name — another account's, or one nobody monitors — is refused as not found; ownership is never disclosed.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changedv1.10.1
    • changedInput schema / properties / domain / description
      Previous value: -"One of the token account's VERIFIED monitored domains, e.g. example.com. Any other name — another account's, or one nobody monitors — is refused as not found; ownership is never disclosed."New value: +"The domain, e.g. example.com. For add_monitored_domain: any registrable domain the linked account owns (re-adding one it already monitors returns that row). For check_domain_verification and get_domain_records: a domain this account already monitors, verified or still pending. Any other name — another account's, or one nobody monitors — is refused as not found; ownership is never disclosed."
  2. Addedv1.9.0

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well past the annotations: it discloses the three distinguishable outcomes (not published, published with the wrong value, lookup did not complete), flags the incomplete-lookup case as TRANSIENT and never a verdict, and notes the success payload carries the DMARC reporting record. It also states the human-approval and exact-printing constraints, which cannot be inferred from readOnlyHint=false/idempotentHint=true. No contradiction with annotations — marking a domain verified is a state write, consistent with readOnlyHint=false, while 'nothing is applied to anyone's DNS' correctly describes the external world.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded correctly: the scoping rule and the alternative come first, and the return-value guidance follows. It is on the long side for a one-parameter tool — the 'a human publishes every record / get their approval before using any DNS tool of your own' clause is somewhat verbose and only loosely coupled to this read-and-mark operation.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, and the description compensates fully by describing the outcome discrimination, the nameservers field, the DMARC reporting record on success, and the guidance.note relay obligation. An agent has everything needed to call it and to interpret or refuse to over-interpret the result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the single `domain` parameter is already well documented, including the not-found/ownership-disclosure behavior, so the baseline is 3. The description reinforces the precondition ('a domain the user already added to their DNS Doctor account') but adds no format, edge-case, or syntax detail beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Uses a specific verb+resource ('check whether the ownership TXT record for a domain ... is visible yet, and mark it verified') and immediately scopes it to DNS Doctor's own ownership challenge. It explicitly names the sibling tools it is not (check_record, add_monitored_domain), so an agent can separate it from the many other record-checking tools without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Opens with an explicit exclusivity clause ('Use this only for DNS Doctor's own ownership TXT challenge') and gives the counter-case with the exact alternative: a TXT record another service asked for (Google Workspace, Microsoft 365, Shopify, any site verification) routes to check_record. The precondition (domain already added via add_monitored_domain) is stated up front.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.