DNS MCP Server

A comprehensive DNS query server built with FastMCP that provides tools to query all types of DNS records and gather complete domain information.

Features

DNS Record Query Tools

• A Records - Query IPv4 addresses

• AAAA Records - Query IPv6 addresses

• MX Records - Query mail exchange servers with priorities

• TXT Records - Query text records (SPF, DKIM, DMARC, verification)

• NS Records - Query authoritative nameservers

• CNAME Records - Query canonical name aliases

• SOA Records - Query Start of Authority information

• PTR Records - Reverse DNS lookups

• SRV Records - Query service location records

• CAA Records - Query Certificate Authority Authorization

• DS/DNSKEY Records - Check DNSSEC configuration

Advanced Tools

• Query All Records - Get all DNS records for a domain in one call

• DNSSEC Check - Verify DNSSEC configuration

• WHOIS-style Lookup - Comprehensive domain information via DNS

• Domain Availability Check - Check if domain has DNS configured

• DNS Delegation Trace - Trace delegation chain from root to authoritative nameservers

Installation

Local Development

1. Install dependencies:

pip install -r requirements.txt

2. Run the server locally:

python dns_server.py

The server will start on http://localhost:8000 by default.

Deploy to FastMCP Cloud

1. Install FastMCP CLI if you haven't already:

pip install fastmcp

2. Login to FastMCP Cloud:

fastmcp login

3. Deploy the server:

fastmcp deploy dns_server.py

4. The CLI will provide you with a public URL where your MCP server is accessible.

Usage Examples

Using with MCP Client

import asyncio
from fastmcp import Client

# Replace with your deployed URL
client = Client("https://your-server.fastmcp.app/mcp")

async def main():
    async with client:
        # Query A records
        result = await client.call_tool("query_a_record", {"domain": "google.com"})
        print(result)
        
        # Query all records
        result = await client.call_tool("query_all_records", {"domain": "example.com"})
        print(result)
        
        # Reverse DNS lookup
        result = await client.call_tool("query_ptr_record", {"ip_address": "8.8.8.8"})
        print(result)
        
        # Check DNSSEC
        result = await client.call_tool("check_dnssec", {"domain": "cloudflare.com"})
        print(result)

asyncio.run(main())

Available Tools

Basic DNS Queries

• query_a_record(domain: str) - Get IPv4 addresses

• query_aaaa_record(domain: str) - Get IPv6 addresses

• query_mx_record(domain: str) - Get mail servers

• query_txt_record(domain: str) - Get TXT records

• query_ns_record(domain: str) - Get nameservers

• query_cname_record(domain: str) - Get CNAME alias

• query_soa_record(domain: str) - Get SOA information

• query_caa_record(domain: str) - Get CAA records

Advanced Queries

• query_ptr_record(ip_address: str) - Reverse DNS lookup

• query_srv_record(service: str, protocol: str, domain: str) - Service location

• query_all_records(domain: str) - Get all DNS records at once

• check_dnssec(domain: str) - Check DNSSEC status

• whois_lookup(domain: str) - Comprehensive domain info

• check_domain_availability(domain: str) - Check if domain is configured

• trace_dns_delegation(domain: str) - Trace delegation chain

DNS Resolver Configuration

The server uses the following public DNS resolvers:

• Google DNS: 8.8.8.8, 8.8.4.4

• Cloudflare DNS: 1.1.1.1

Timeout: 5 seconds Lifetime: 10 seconds

Response Format

All tools return structured JSON responses with:

• success: Boolean indicating if query succeeded

• domain/ip_address: The queried domain or IP

• record_type: Type of DNS record

• records: Array of record data with TTL information

• nameserver: The nameserver that provided the response

• error: Error message if query failed

Example Response

{
  "domain": "example.com",
  "record_type": "A",
  "records": [
    {
      "data": "93.184.216.34",
      "ttl": 86400,
      "type": "A"
    }
  ],
  "nameserver": "8.8.8.8",
  "success": true
}

Use Cases

• Domain Investigation - Research domain DNS configuration

• Email Configuration - Check MX and SPF/DKIM/DMARC records

• Security Analysis - Verify DNSSEC, CAA records

• Network Troubleshooting - Reverse lookups, delegation tracing

• Domain Monitoring - Track DNS changes and availability

• Migration Planning - Document current DNS setup

Error Handling

The server gracefully handles DNS query failures and returns structured error responses:

{
  "domain": "nonexistent.example",
  "record_type": "A",
  "error": "The DNS query name does not exist: nonexistent.example.",
  "success": false
}

License

MIT License

Contributing

Contributions are welcome! Please feel free to submit issues or pull requests.