iDig DNS MCP Server
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
iDig DNS MCP Server
A remote MCP server exposing 19 professional DNS diagnostic tools from the iDig API — built by Kedar Bhave ( Softricks ).
Connect any MCP-compatible AI client (Claude Desktop, Cursor, Windsurf, and more) to real DNS infrastructure. Diagnose outages, audit email security, validate DNSSEC, check SSL certificates, trace propagation across 16 global resolvers, and more — all in plain English.
Live endpoint: https://mcp.softricks.net/sse
Quickstart
Claude Desktop
Edit ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"idig-dns": {
"command": "npx",
"args": [
"mcp-remote",
"https://mcp.softricks.net/sse"
]
}
}
}Restart Claude Desktop. You'll see idig-dns appear under Connectors.
Cursor / Windsurf
Add to your MCP settings:
{
"mcpServers": {
"idig-dns": {
"command": "npx",
"args": [
"mcp-remote",
"https://mcp.softricks.net/sse"
]
}
}
}Authentication
All tools require a token parameter. Get your token at api.softricks.net/idig/docs.
Related MCP server: mcp-network-tools
Tools
Tool | Description |
| Look up any DNS record type: A, AAAA, MX, NS, TXT, SOA, CAA, SRV, CNAME, DS, TLSA, HTTPS, SVCB |
| Resolution diagnostics — returns ok / nxdomain / servfail / timeout / degraded |
| Full diagnosis combining resolution + DNSSEC — start here when something is broken |
| SPF, DKIM, DMARC, and BIMI audit with A–F grade and prioritized fix recommendations |
| MX health + provider detection (Google Workspace, M365, Proofpoint, 35+ providers) |
| DNSSEC chain of trust — returns secure / insecure / bogus / indeterminate |
| Key inventory, signature expiry, algorithm assessment, rollover readiness |
| Check propagation across 16 global resolvers: Google, Cloudflare, Quad9, China, Korea, Russia |
| Certificate validity, expiry countdown, domain match, issuer, chain completeness |
| TTL advisory with step-by-step migration lowering plan |
| Compare all authoritative nameservers — catches lame delegation and SOA mismatches |
| Probe 75 common subdomains + crt.sh Certificate Transparency logs — surfaces exposed dev/staging environments |
| Geolocation, ISP, ASN, CDN detection, hosting flag |
| EPP registrar lock status — transfer-ready, delete lock, serverHold, pendingDelete |
| IP blacklist / DNSBL check — Spamhaus, Barracuda, SpamCop, SORBS, and more |
| Parsed WHOIS data — registrar, expiry, domain age, nameservers, EPP status |
| HTTP/HTTPS reachability — status codes, redirect chain, HSTS, HTTP→HTTPS redirect |
| AXFR zone transfer vulnerability check — tests if any NS allows public zone transfers |
| DANE/TLSA validation — cross-validates TLSA records against live TLS certificate |
Example prompts
My emails are going to spam for example.com — token is YOUR_TOKENDid my DNS changes propagate yet for example.com? token: YOUR_TOKENRun a full security audit on example.com, token YOUR_TOKENIs the SSL cert for example.com about to expire? token YOUR_TOKENWe're migrating example.com to a new host next week — are the TTLs safe? token YOUR_TOKENWhat subdomains does example.com have exposed? token YOUR_TOKENAre any of example.com's IPs on a blacklist? token YOUR_TOKENGet WHOIS info for example.com — token YOUR_TOKENIs example.com reachable over HTTPS? token YOUR_TOKENCheck if example.com is vulnerable to zone transfers — token YOUR_TOKENValidate DANE/TLSA records for example.com — token YOUR_TOKENArchitecture
Claude Desktop / Cursor / Windsurf
│
│ MCP over SSE
▼
mcp.softricks.net ← Railway (always-on Python/FastMCP server)
│
│ HTTPS
▼
api.softricks.net/idig ← AWS Lambda (iDig REST API)
│
│ DNS queries
▼
Live DNS infrastructureSelf-hosting
Clone this repo and deploy your own instance:
git clone https://github.com/kbhave/MCP-Service-iDig
cd MCP-Service-iDig
pip install -r requirements.txt
python mcp_server.pyOr deploy to Railway in one click — connect your GitHub repo and Railway handles the rest.
Requirements:
Python 3.11+
mcp==1.26.0httpx
Related
iDig REST API docs: https://api.softricks.net/idig/docs
DNS Doctor AI Agent: https://agent.softricks.net
iOS App: https://apps.apple.com/us/app/softricks-idig/id522550738
License
MIT
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
This server cannot be deployed
Maintenance
Related MCP Connectors
29 DNS, SEO, SSL, security, WHOIS & mail tools for AI agents. Pay per call (x402) or card API key.
Free, no-API-key network lookups for AI agents — IP geolocation, DNS, WHOIS, HTTP and SSL/TLS certificate checks, and full domain health reports.
DNS, email auth, TLS, BGP/RPKI, WHOIS and subnet tools with plain-English fixes, plus webhook URLs.
IP intelligence, network diagnostics, and AI service availability tools for AI agents.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenancePerform DNS lookups, WHOIS queries, connectivity testing, TLS certificate analysis, HTTP endpoint monitoring, and hostname resolution, all from your trusty AI.10MIT
- AlicenseAqualityDmaintenanceNetwork diagnostics tool for AI agents that provides DNS lookup, IP geolocation, SSL certificate inspection, WHOIS queries, and HTTP latency testing.567 npm1MIT
- AlicenseAqualityDmaintenanceEnables AI agents to perform real-time WHOIS and RDAP lookups, domain availability checks, and TLD infrastructure exploration using native protocols without API keys.8MIT
- FlicenseAqualityDmaintenanceProvides DNS lookup and email authentication diagnostic tools (SPF, DKIM, DMARC, MX, etc.) for use with MCP-compatible clients. Enables natural language queries to check DNS records and email health.7-