net.softricks/idig-dns
net.softricks/idig-dns · v1.0.0 · MCP 2025-11-25
Professional DNS diagnostics: 14 tools for DNS, DNSSEC, email security, SSL, and propagation.
Reachability
reachable
checked 2026-07-14 04:35 UTC
Registry status active
Tools pinned 19
e64890d8d7a7
Tools last changed
unchanged since first capture 2026-07-14
Provenance
Registry namespace net.softricks
(domain verified by the official registry)
Repository
github.com/kbhave/mcp-service-idig
Remote endpoints
https://mcp.softricks.net/sse (sse)
Observed changes
| When (UTC) | Event | Detail |
|---|---|---|
| 2026-07-14 03:29 | first capture | 19 tools pinned |
Pinned tool definitions (19)
| Tool | Description |
|---|---|
| dns_lookup | Look up DNS records for a domain. Record types: a, aaaa, ns, mx, txt, soa, caa, srv, cname, ds, tlsa, https, svcb, any, all. |
| email_security_audit | Full SPF, DKIM, DMARC, and BIMI audit with A-F grade and prioritized fix recommendations. |
| dnssec_validate | Validate DNSSEC chain of trust. Returns: secure / insecure / bogus / indeterminate. |
| dnssec_health | DNSSEC health report: key inventory, signature expiry, algorithm assessment, DS at parent, rollover readiness, full chain of trust (Root → TLD → Domain) with chain_intact flag and broken-link identification, warnings, and recommendations. |
| resolve_check | DNS resolution diagnostics. Returns status: ok / nxdomain / nodata / servfail / refused / timeout / degraded. |
| diagnose | Full diagnosis combining resolution + DNSSEC. Use first when something is broken. |
| propagation_check | Check DNS propagation across 16 global resolvers: Google, Cloudflare, Quad9, China, Korea, Russia. |
| mx_check | MX health + provider detection: Google Workspace, M365, Proofpoint, Zoho, 35+ providers. |
| domain_status | Registrar lock and EPP status. Checks transfer lock, delete lock, serverHold, pendingDelete. |
| geo_lookup | Geolocation and hosting: country, city, ISP, ASN, CDN detection, is_hosting flag. |
| ttl_check | TTL advisory: flags dangerous TTLs and gives step-by-step migration lowering plan. |
| zone_consistency | Check all authoritative nameservers return identical answers. Catches lame delegation and SOA mismatches. |
| ssl_check | SSL certificate: validity, expiry countdown, domain match, issuer, chain completeness. |
| subdomain_discover | Discover subdomains by probing 75 common names plus crt.sh Certificate Transparency logs. Surfaces exposed dev/staging environments. |
| blacklist_check | IP blacklist / DNSBL check. Tests A-record and MX IPs against Spamhaus, Barracuda, SpamCop, SORBS, and more. |
| whois_lookup | Parsed WHOIS: registrar, creation/expiry dates, domain age, nameservers, EPP status, DNSSEC status. |
| http_check | HTTP/HTTPS reachability: status codes, redirect chain, HSTS header, HTTP→HTTPS redirect detection. |
| zone_axfr | AXFR zone transfer vulnerability check. Tests whether any authoritative NS allows public zone transfers (critical misconfiguration). |
| dane_validate | DANE/TLSA validation: cross-validates TLSA DNS records against the live TLS certificate. Supports all four TLSA usage types. |
Status badge
[](https://toolpin.dev/servers/net.softricks/idig-dns)
Maintain this server? Add the badge to your README — it links your users to this live status page.