"dns security mcp" matching MCP servers:

Autonomous AppSec & DAST code and website security scanner across 12 security domains (260+ controls) with 3-Layer Triage.

Site, email and agent safety — SPF/DKIM/DMARC, AI/SEO audit, page-change monitor, free hidden-AI scanner (7 MCP tools).

A domain security and privacy checker MCP server that runs locally, performing DNS, TLS, HTTP, and RDAP lookups to generate a scored report covering certificates, email authentication, DNS, and web security headers.

Offers a control surface for AI agent security with four independent checks: source-code scanning, tenant isolation, LLM content verification, and deploy gating. Currently in pre-release, with no functional scanning engines yet.

AI-powered VMware NSX DFW microsegmentation and security. Manage distributed firewall policies, security groups, Traceflow, and IDPS with 20 MCP tools.

Checks and fixes a domain's email authentication (SPF, DKIM, DMARC), DNS health, propagation, blacklists and domain/SSL expiry, returning copy-paste fix records from a validating engine, never a model guess. Local stdio server (npx -y @dnsdoctor/mcp) with the same 27 tools as the hosted https://dnsdoctor.dev/mcp.

Provides passive OSINT reconnaissance for domains and IPs using public sources, with tools for WHOIS/RDAP, DNS, subdomain enumeration, Wayback Machine, HTTP headers, Shodan InternetDB, email security, TLS certificates, and ASN lookups, all without requiring API keys.

MCP server that lets AI coding agents (Claude Code, Cursor, Cline) audit Supabase projects for security misconfigurations AND apply the fixes — without leaving the agent. Tools: audit_project, list_findings, preview_fix (BEGIN/ROLLBACK safety), apply_fix (with confirmation), apply_all_fixes (transactional bulk). Closes the audit-fix loop entirely in the agent — other Supabase scanners only report.

An MCP server for managing Hetzner DNS zones and RRSets via the Hetzner Cloud API. It enables listing, creating, updating, deleting, importing/exporting zone files, and managing protection and TTLs from MCP clients.

Enables passive subdomain enumeration from certificate transparency logs and DNS, with host resolution, certificate history, and attack-surface summaries for authorized security reconnaissance.

An MCP server for domain intelligence — WHOIS, DNS records, SSL certificate inspection, SPF/DMARC validation, security-header audits, and blacklist/reputation checks, callable by AI agents. Powered by domainintel.app; runs server-side, no local setup.

Model Context Protocol (MCP) server for deep DNS resolution, nameserver propagation, and DNSSEC validation

Domain security reconnaissance for AI agents — 13 tools (DNS+DNSSEC, SSL/TLS, HTTP security headers, SPF/DKIM/DMARC email auth, port scan, ASN, RDAP/WHOIS) plus a one-shot security_scan returning a 0–100 Health Score (A–F). Free, no API key.

Enables AI assistants to retrieve Social Security COLA and yearly limits, calculate benefit increases and earnings-test withholding, and determine full retirement ages and claiming-age benefits from SSA-sourced data.

Security for the MCP servers you use: detects tool poisoning, rug pulls, shadowing, secrets and supply-chain risk (OWASP MCP Top 10), with runtime guards and approved-server policy. Runs locally.

Vulnerability intelligence for AI agents that enables CVE lookup, package vulnerability checks, and dependency auditing without API keys.

Enables AI assistants to manage Domeneshop domains, DNS records, HTTP forwards, dynamic DNS, and invoices through the Domeneshop API.

Enables users to deterministically audit MCP servers for security issues across manifests, source, runtime responses, multi-call state, identity, and install scripts, and to run an inline gateway that gates tool calls and scans responses before returning them.

Enables auditing a Supabase project's security beyond the dashboard's Security Advisor, checking anonymous access, RLS policies, and cross-tenant data leaks via read-only probes and a two-account test.

MCP server for Appwrite security audits that scans permissions and provides structured fix proposals, with active live leak confirmation via anonymous fetch.

MCP server for DNS lookups, reverse DNS, WHOIS, and domain checks. Zero auth, zero config.

Zero-trust safety & settlement rail for autonomous AI agents. Sub-10ms deterministic guardrails, secret leak defense, bounded wallet controls, and on-chain Proof-of-Safety attestations via x402.

Enables users to audit EVM, Solana, and Move smart contracts and assess Web3 security risks through tools for honeypot detection, SPL token risk, MEV sandwich exposure, address poisoning, HTTP 402 invoice fraud, UTXO consolidation planning, and cross-chain bridge quotes.

Provides a security proxy that sits between MCP clients and servers to inspect and filter traffic. Guards MCP sessions against leaked secrets, vulnerable dependencies, misconfigured DNS/TLS, and non-compliant data exposure.

MCP server for the Cloudflare API v4, written in Go. Exposes 28 read tools across zones, DNS, WAF/firewall, rate limits, HTTP request logs, Security Center, and threat intelligence.

Connects compatible AI clients to registered Windows or macOS computers, allowing users to inspect systems, work with files, run supported commands, and automate workflows through authorized remote access.

Security Scanner AI - MCP server providing AI-powered tools and automation by MEOK AI Labs

A cross-chain bridge security auditing toolkit that exposes tools for analyzing, fuzzing, and simulating bridge contracts via natural language, enabling users to detect vulnerabilities like centralization risks and replay attacks.

A lightweight MCP server for security reviews that injects security requirements before code generation, scans dependencies for CVEs, and verifies generated code without disrupting workflow.

Zero-key security toolkit for your AI assistant: grade any website's security A+ to F, check if CVEs are actively exploited via CISA KEV and EPSS, and get MITRE ATT&CK defenses explained in plain English. No API keys, no signup.

Enables managing and observing Technitium DNS Server through MCP, including read-only or read-write tool surfaces, scoped bearer authentication, audit logging, and confirmation gates for destructive operations.

Enables AI agents to monitor, trace, query, and manage local DNS resolver chains using MCP, with health checks, packet tracing, Pi-hole log access, and automated failover via natural language.

InvokeWorks is an open-source MCP server for useful paid agent tools. Its flagship, site_audit, combines DNS, TLS, HTTP, redirect, and security-header checks into one structured result for 5 sats per call.

Official Model Context Protocol server exposing static AST security tools (audit_mcp_repository, audit_local_directory) to scan MCP tools for vulnerabilities before connecting them to Claude or Cursor.

Enables agents to run domain scans, DNS/DNSSEC and propagation lookups, WHOIS/RDAP, SPF/DKIM/DMARC/BIMI/MTA-STS and blacklist diagnostics through a keyless API. Also supports local DMARC report and raw-email parsing plus security-header generation.

29 pay-per-call DNS, SEO, SSL, security, and dev tools for AI agents. x402, no API key.

Enables comprehensive management of Tailscale networks including device management, DNS configuration, file sharing via Taildrop, security monitoring, and network automation with built-in Grafana/Prometheus observability stack.

Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner.

Enables AI assistants to audit company domains for Trust Center platforms, compliance certifications, disclosed sub-processors, DNS identity and security records, email hardening, and live status-page health. It supports single-domain and parallel batch audits with structured risk scores and GRC summaries.

Enables enterprise MCP security auditing through 12 deterministic no-LLM tools for evidence-gated claims, skill/prompt supply-chain audits, token profiling, and server auth-mode checks.