# x402 DNS Auth Checker (MCP on Cloudflare Workers)

Remote MCP server (Streamable HTTP at `/mcp`) that audits a domain's email-authentication DNS.

## Tools
- `domain_auth_check` (paid, **$0.003 USDC** per call via x402, Base mainnet `eip155:8453`, USDC `0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913`): input `domain`, optional `selectors[]` (DKIM). Returns SPF (record count, `all` qualifier, includes, ~DNS lookups vs 10 limit, void includes), DMARC (p/sp/pct/rua/ruf/alignment), DKIM (selector probing, key type/bits, revoked/testing), MX (incl. null MX), BIMI / MTA-STS / TLS-RPT presence, issues, recommendations, score 0-100, grade A-F.
- `health` (free): status, price, network.

## Config
`wrangler.jsonc` vars: `X402_NETWORK`, `X402_FACILITATOR_URL`. Secret: `MCP_ADDRESS` (or `X402_RECIPIENT`) = payout address (see `.dev.vars.example`).

## Develop
```
export PATH=~/.local/node22/bin:$PATH
npm install
npm run typecheck     # tsc --noEmit
npm run smoke         # live DNS checks (google.com, github.com, example.com, NXDOMAIN, invalid)
npm run deploy:dry    # wrangler deploy --dry-run
npm run dev           # local at http://localhost:8787/mcp
npm run deploy        # set MCP_ADDRESS secret first: wrangler secret put MCP_ADDRESS
```