x402 DNS Auth Checker (MCP on Cloudflare Workers)

Remote MCP server (Streamable HTTP at /mcp) that audits a domain's email-authentication DNS.

Tools

• domain_auth_check (paid, $0.003 USDC per call via x402, Base mainnet eip155:8453, USDC 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913): input domain, optional selectors[] (DKIM). Returns SPF (record count, all qualifier, includes, ~DNS lookups vs 10 limit, void includes), DMARC (p/sp/pct/rua/ruf/alignment), DKIM (selector probing, key type/bits, revoked/testing), MX (incl. null MX), BIMI / MTA-STS / TLS-RPT presence, issues, recommendations, score 0-100, grade A-F.

• health (free): status, price, network.

Related MCP server: domain-security-mcp-server

Config

wrangler.jsonc vars: X402_NETWORK, X402_FACILITATOR_URL. Secret: MCP_ADDRESS (or X402_RECIPIENT) = payout address (see .dev.vars.example).

Develop

export PATH=~/.local/node22/bin:$PATH
npm install
npm run typecheck     # tsc --noEmit
npm run smoke         # live DNS checks (google.com, github.com, example.com, NXDOMAIN, invalid)
npm run deploy:dry    # wrangler deploy --dry-run
npm run dev           # local at http://localhost:8787/mcp
npm run deploy        # set MCP_ADDRESS secret first: wrangler secret put MCP_ADDRESS