Checks Dockerfiles for build-breaking mistakes, validates base image tags and digests, supports multi-platform builds, and flags end-of-life base images.
Checks GitHub Actions workflows for outdated actions, old Node runtimes, retired runners, and injection vulnerabilities.
Checks Kubernetes manifests for removed APIs, unknown fields, Pod Security issues, and other risks based on your Kubernetes version.
Runs SQL on real PostgreSQL in memory, validating your schema and returning the database's own errors and results.
Provides open source license answers including SPDX identifiers, copyleft analysis, and license compatibility checks.
Runs SQL on real SQLite in memory, validating your schema and returning the database's own errors and results.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@Domain Health Check SPF, DKIM, and DMARC records for example.com"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Model Context Protocol servers, each built to be the best available in its niche, and each proven by measurement against the best existing server before it ships.
Every server here:
installs with one command (npx), one click (Claude Desktop bundle, signed), or Docker;
keeps its tool list small and byte-stable, so it costs few tokens and caches well;
returns compact JSON with an output schema, and says when a list was cut;
reaches only the hosts it declares, over HTTPS, with deadlines, size caps and bounded retries;
is tested on recorded upstream responses, and checked weekly against the live upstream;
is published from CI with npm provenance and a Sigstore-signed bundle.
Server | What it does | Run |
Checks GitHub Actions workflows: outdated actions, old Node runtimes, retired runners, injection. |
| |
Validates config files against their official schemas: tsconfig, compose, workflows, 1,400+ more. |
| |
Explains cron expressions, lists next run times in any time zone, converts between cron dialects. |
| |
Checks Dockerfiles: build-breaking mistakes, base image tags that exist, digests, platforms, EOL. |
| |
Email and domain checks: SPF lookup limits, DKIM keys, DMARC, DNS records, registration expiry. |
| |
Is this version still supported? EOL dates, latest patch and upgrade target for 470+ products. |
| |
RFC sections, status, obsoleted-by chains, errata and IANA registries for coding agents. |
| |
Checks Kubernetes manifests for your version: removed APIs, unknown fields, Pod Security, risks. |
| |
Open source license answers: SPDX ids, copyleft, and whether a dependency's license fits yours. |
| |
Checks packages exist before install: version, deprecation, vulnerabilities, licence. 7 ecosystems. |
| |
Tests regexes on real engines: JavaScript, Python, PCRE2, RE2 (Go). Matches, groups, ReDoS. |
| |
What changed between two versions of a package: breaking changes, deprecations, security fixes. |
| |
Runs SQL on real PostgreSQL and SQLite in memory: your schema, the database's own errors, results. |
|
Server | What it does | Run |
Verifies citations: finds fabricated or mismatched references and retractions, returns clean BibTeX. |
|
Server | What it does | Run |
FDA drug label answers with section citations, RxNorm name resolution, recalls and shortages. |
|
Server | What it does | Run |
Find the clearest Sentinel-2, Landsat, Sentinel-1 or NAIP scene for any place, with band links. |
|
Server | What it does | Run |
One recall check across CPSC, FDA and NHTSA: match by name, model number, UPC or VIN. |
|
Server | What it does | Run |
Which vulnerabilities to fix first: CISA KEV, EPSS, CVSS and CISA's SSVC decisions in one ranking. |
|
Server | What it does | Run |
Validates and formats phone numbers, email addresses and postal addresses for any country. |
|
Server | What it does | Run |
Reads web pages and PDFs as clean Markdown: main content, the sections that answer a query. |
| |
Time anywhere, DST-safe conversions, holidays for 200+ countries, business days and meeting slots. |
|
Related MCP server: domain-security-mcp-server
docs/SPEC.md describes the production line: scout, build, gate, benchmark, ship. The gate
(gate/) is the same for every server and runs in CI on Node 20, 22 and 24.
npm ci
npm test # kit tests + the gate on every server
npm run new -- <name> --title "..." --description "..." --host api.example.org --instructions "..."
npm run sync # after changing kit/, a tool, or adding a server
node scripts/check-standalone.mjs # each server as its own repository: install, test, start
node scripts/publish-repos.mjs [name] # push committed servers to their own repositoriesEach server lives in its own repository (linked above); this repository is where they are built and
checked. catalog.json lists every server and its tools.
MIT, Copyright (c) 2026 Arhan Canli.
This server cannot be deployed
One-call domain audit: MX receiving, SPF/DMARC/DKIM spoofing protection, disposable-address risk.
Email-domain intelligence: MX capability, provider, disposable status, SPF, DMARC, and MTA-STS.
Monitor and manage email authentication (SPF, DKIM, DMARC, MTA-STS, BIMI) for your domains.
Complete domain email-auth audit in one call: SPF with RFC 7208 lookup counting, DKIM selector pr...
