"Using Windsurf and Claude Tools or Technologies" matching MCP servers:

Enables AI agents to inspect any public domain’s web technology stack, email deliverability and DNS health (MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI), and HTTPS security posture with typed JSON scores and remediation-ready findings, plus history, bulk checks, monitoring alerts, and reverse technology lookups.

Network diagnostics tool for AI agents that provides DNS lookup, IP geolocation, SSL certificate inspection, WHOIS queries, and HTTP latency testing.

Enables coding agents to inspect and change Cloudflare zones, DNS, settings, analytics, Workers, Pages, storage, tunnels, and Email Routing. Read tools run without prompting, while write tools are gated by the host's permission rules.

Provides MCP servers for VPN control (NordVPN) and torrent lifecycle management via Jackett search and qBittorrent operations, plus a unified CLI.

Enables agents to call paid utilities for DNS/SSL checks, site status, summarization, keyphrase extraction, decision advice, data cleanup, claim verification, and grounding via per-call USDC payments over x402, with free discovery tools and no signup or API key.

Wraps the Remnawave API to provide per-operation MCP tools with mutation safety and data redaction, enabling secure interaction with Remnawave panel.

Provides 9 utility APIs for AI agents covering DNS, email, IP, QR, WHOIS, URL health, headers, text extraction, and tech detection, with x402 micropayments on Base.

Enables Claude to run safe, read-only diagnostics against servers and websites — certificate chains and expiry, HTTP status/redirects/security headers, DNS records, email authentication (SPF, DKIM, DMARC, MTA-STS, TLS-RPT) and sitemaps. Every check returns severity-tagged findings with concrete fixes, plus a 0-100 score and A-F grade, without any ability to modify the target.

Enables domain investors, webmasters, and autonomous agents to perform comprehensive domain audits including brand scoring, TLD tier analysis, and DNS connectivity checks, and to generate strategic brand suffixes and industry compound variations for portfolio expansion.

Enables querying an F5 BIG-IP lab through read-only iControl REST calls, letting Claude inspect system and HA status, virtual servers, pool member health, monitors, and other objects via natural language. All tools are GET-only and paired with a read-only BIG-IP user role so nothing on the device can be changed.

Enables AI agents to run privacy-first network diagnostics (egress IP, proxies, DNS, port checks, security-header audits), handle authentication primitives like TOTP and disposable inboxes, and use developer utilities such as URL-to-markdown reading, webhook inspection, hashing, file/paste sharing, and read-only EVM RPC calls. All tools are free, require no API keys, and operate under a zero-log policy with automatic expiry.

MCP server for email deliverability: validate SPF/DKIM/DMARC/BIMI, check blacklists, test SMTP/IMAP, look up DNS, and generate ready-to-deploy records for any major email provider. Ships with two one-click prompts (audit-deliverability, setup-dns). Public, no auth.

A secure MCP server for network diagnostics, providing tools like ping, traceroute, whois, nslookup, dig, nmap, curl, and netstat through natural language interfaces.

Diagnoses a domain's email authentication — SPF, DMARC, DKIM, MX, blacklists and domain or SSL expiry - and returns copy-paste fix records generated by a validating engine, never a language model. The MCP server is hosted remotely; this repository carries the plugin manifest, connector config and bundled skill.

MCP server that lets AI agents use the Online Cyber Tools catalogue as a set of native MCP tools.

Governed reverse-proxy operations for Traefik, Caddy, and HAProxy — backend-health, cert-expiry, 5xx, and route-conflict RCA, with unbypassable audit logging (MCP + CLI), budget/runaway guards, dry-run, and undo/rollback.

An MCP server for OpenShift Baremetal IPI cluster provisioning, allowing users to generate and validate install-config.yaml files, test BMC connectivity, validate networks, and manage cluster installation lifecycle.

Enables MCP clients to query proxy sub-accounts, traffic, pricing, and inventory, and to place orders, renew, and modify configurations after user confirmation.

Governed OPNsense + pfSense firewall operations — gateway-health, rule-shadow, and blocked-traffic RCA, with guarded rule/alias writes, unbypassable audit logging (MCP + CLI), budget/runaway guards, dry-run, and undo/rollback.

Governed network controller-layer operations (Cisco Meraki, plus Catalyst Center / Arista CVP / UniFi) — uplink loss/latency RCA, fleet health scoring, and config-template drift, with unbypassable audit logging (MCP + CLI), budget/runaway guards, and rollback.

Provides MCP tools for governed multi-vendor network device operations, including configuration management (backup, diff, merge, replace, rollback) and read-only queries (facts, interfaces, BGP, LLDP, ARP) via NAPALM, with optional NetBox source-of-truth integration.

Enables governed BIND 9 DNS operations and diagnostics through 23 MCP tools for zone validation, status checks, DNS queries, SOA comparison, and guarded write actions with auditing and budgets. It executes fixed rndc, named-checkconf, and dig commands without a shell and surfaces ambiguous write outcomes.

Provides 40 governed read tools for querying tenant and connector health, applications, access policies, shared objects, collections, DNS, identities, cloud integrations, and audit logs.

MCP server for managing IoT devices and network infrastructure, supporting 135 tools across 17 device types via SSH, REST API, and Serial protocols.

Enables a chat session's owner to reach any host through arbitrary HTTP methods with custom headers and bodies, raw TCP sockets, outbound WebSockets, and browser-grade scraping that solves challenges and discloses explicit failover routing.

Operate packet-radio digipeater nodes from Claude and other MCP clients.

Enables Claude to query an F5 BIG-IP over read-only iControl REST, retrieving system/version and failover state, virtual server and pool member health, and any other readable /mgmt/tm/ object through natural-language questions. Every tool issues GET requests only, with paging for large object lists and both server-side path blocking and BIG-IP RBAC guarding against changes.

Enables Claude Desktop to run tshark queries and statistics against packet capture files and to queue GUI display-filter, highlighting, column, and frame-navigation actions for the packet analyzer.

Enables Claude to query and manage NetApp ONTAP storage clusters directly, with read-only mode by default and optional provisioning/deletion tools when enabled.

A read-only MCP server that enables Claude to audit Firewalla network security configurations and monitor network activity. It provides tools to inspect devices, rules, alarms, and traffic flows without making any changes to the Firewalla system.

Enables an LLM to read and write NetBox data through its REST API, supporting listing endpoints, inspecting schemas, and creating, updating, or deleting objects.

Uptime monitoring for websites, APIs, SSL certificates, domain expiry, ping and TCP/UDP ports. 15 tools to list, create, pause and delete monitors, pull incident timelines with error codes, and read hourly or daily uptime and response-time statistics.

A Model Context Protocol (MCP) server that exposes the full WhoisFreaks API suite as AI-callable tools. Works with Claude Desktop, Cursor, Windsurf, VS Code, Continue, Zed, and any other MCP-compatible AI client.

MCP (Model Context Protocol) server for rustunnel. Lets AI agents (Claude Code, Cursor, Windsurf) create and manage public tunnels to local services from inside an agent session.

Enables interaction with OPNsense firewalls through MCP tools for managing firewall rules, interfaces, DHCP leases, and system monitoring.

Enables an LLM agent to investigate a Kong Gateway through fourteen read-only, schema-validated tools and a deterministic diagnostic engine, so it can trace routes, services, plugins and upstream health and explain faults such as why authentication is failing on a path. Every fact comes from the gateway itself, and the model only selects tools and writes the evidence-backed explanation.

Enables agents to run SEO and AI-search readiness audits (llms.txt, crawler access, sitemaps, structured data, redirects, indexability, and more), look up startup revenue listings and leaderboards, and check a domain's SPF, DKIM, DMARC, and MX records with concrete fixes. Runs locally over stdio with no account or API key, and frames all third-party responses as untrusted data.

Enables AI apps to inspect and manage a NextDNS account in plain language — profiles, analytics, query logs, blocklists, security and parental control settings — with every change saved and reversible via undo. It runs self-hosted on your own computer or server, keeps per-profile read/write/hidden permissions, and requires double confirmation for deletions or overwrites.

Enables AI assistants to view devices on a Portveil account and move, rotate, reconnect, or disconnect them across VPN locations, with verified successful moves.

Enables LLMs to configure Tencent Cloud resources such as DNSPod DNS records and CVM/Lighthouse security group rules by controlling a locally logged-in Edge browser over CDP, leveraging existing login state without needing API keys or credentials.