Check if a domain's nameserver allows AXFR zone transfers, revealing all DNS records and exposing a critical security misconfiguration.
MIT
776,791 tools. Updated 2026-11-13 14:38
"dns security mcp" matching MCP tools:
- Detect wildcard DNS records to prevent false positives in subdomain enumeration. Resolves random subdomains to identify *.domain misconfigurations and improve security assessment accuracy.MIT
- Reveal DNS server type and version by querying CHAOS TXT records to identify potential security risks.MIT
- Identifies DNS TTL anomalies across record types (fast-flux, stale cache, inconsistency) to expose security and operational risks.MIT
- Tests DNS-over-TLS connectivity and security, reporting TLS version, cipher suite, certificate validity, and DNS response to validate encrypted DNS transport configuration.MIT
- Test if a DNS nameserver is an open recursive resolver to detect risks such as DNS amplification DDoS and cache poisoning.MIT
Matching MCP Servers
- AlicenseAqualityCmaintenanceComprehensive DNS security toolkit for AI agents: 103 tools across 13 categories including DNSSEC validation, subdomain takeover detection, email security audit, and more, all running locally with no external API calls required.100147 npm9MIT
- AlicenseNot gradedqualityBmaintenanceMCP server for Technical SEO DNS record auditing, SOA expiry health checks, SSL/TLS inspection, and HTTP security header analysis. Enables comprehensive security audits and scoring via 10 tools.MIT
Matching MCP Connectors
DNS and email security scanner with 82 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.
DNS MCP — DNS and network lookup tools
- Run a full DNS security audit covering DNSSEC, email security, subdomain takeover, certificate transparency, blocklists, and infrastructure. Returns executive summary and per-category findings.MIT
- Run a fresh DNS security audit and compare with a baseline to reveal new, resolved, and unchanged findings.MIT
- Identify DNS rebinding vulnerabilities by resolving a domain repeatedly to detect IP changes with low TTL values, flagging potential browser security bypasses.MIT
- Inspect live DNS, email deliverability (SPF/DMARC/MX), security headers (HSTS/CSP), and SaaS verification TXT records via Cloudflare DNS-over-HTTPS to audit domain infrastructure and email security.MIT
- Run a full DNS security audit and get findings in JSON, Markdown, or SARIF format for integration with analysis tools.MIT
- Remove a DNS security profile by its UUID from Palo Alto Networks Strata Cloud Manager firewall configurations. Specify the profile ID and optional TSG ID to delete outdated or unused security settings.-
- Connects a generic DNS provider to a domain using provider-specific credentials, enabling DNS-based domain verification and configuration.MITDestructive
- Retrieve metadata for supported DNS providers, including required credential fields and documentation links, to configure DNS verification in Proof.MIT
- Connect a Cloudflare API token with DNS edit permissions to a domain to manage DNS records automatically.MITDestructive
- Run a fresh, full DNS and email-authentication report for a real domain, covering SPF, DKIM, DMARC, MX, DNS hardening, expiry, blacklists, and generated fix records.Apache 2.0
- Query VirusTotal for domain threat intelligence including reputation, WHOIS, DNS, and detection results from 90+ security vendors. Investigate suspicious domains in incident response.MIT
- Fetch current DNS records for a domain via Cloudflare DNS over HTTPS. Specify record types like A, MX, or TXT to get live resolution data for the domain.Business Source 1.1
- Retrieve a custom domain's stored state and DNS setup instructions by its dom_ id or hostname. See status, mode, default flag, and next-step guidance without a live DNS check.MIT
- Trigger DNS validation for a custom domain after its DNS records are configured; check the domain later to get the asynchronous verdict.MIT
- Register a sending domain and get the DNS records to publish at your DNS provider. It stays pending until verified, so publish each returned record, then verify.MIT