{
  "name": "io.github.RoscoNL/intodns-mcp-server",
  "description": "IntoDNS.ai is a DNS and email-security scanner exposed as an MCP server with 45 tools and no signup. It answers the question every other server in this category leaves open: after the agent changed the zone, is the domain actually correct? Propagation across resolvers, DNSSEC chain validation, SPF lookup budgets, DKIM selector discovery, DMARC policy strength, MTA-STS, TLS on every MX, and blacklist status.",
  "status": "active",
  "version": "latest",
  "_meta": {
    "com.top-mcps/lastVerified": "2026-09-17",
    "com.top-mcps/score": {
      "value": 66,
      "rubricVersion": "2026-09",
      "lastComputed": "2026-10-15T10:09:13.489Z",
      "methodology": "https://top-mcps.com/about/methodology"
    },
    "com.top-mcps/stats": {
      "fetchedAt": "2026-10-15T10:09:13.488Z",
      "githubStars": 2,
      "lastCommitAt": "2026-09-07T08:01:36Z",
      "npmWeeklyDownloads": 262,
      "githubFetchedAt": "2026-10-15T10:09:13.488Z",
      "npmFetchedAt": "2026-10-15T10:09:13.488Z",
      "githubRepo": "RoscoNL/intodns-mcp-server",
      "npmPackage": "intodns-mcp"
    }
  },
  "repository": {
    "url": "https://github.com/RoscoNL/intodns-mcp-server",
    "source": "github"
  },
  "homepage": "https://intodns.ai/",
  "author": {
    "name": "IntoDNS.ai"
  },
  "packages": [
    {
      "registryType": "npm",
      "registryBaseUrl": "https://registry.npmjs.org",
      "identifier": "intodns-mcp@latest",
      "version": "latest",
      "transport": {
        "type": "stdio"
      }
    }
  ],
  "capabilities": {
    "tools": [
      {
        "name": "scan_domain",
        "description": "Fast DNS and email-security scan returning a letter grade and structured issues.",
        "sideEffect": "network"
      },
      {
        "name": "lookup_dns",
        "description": "DNS record lookup over DNS-over-HTTPS for one or many record types.",
        "sideEffect": "network"
      },
      {
        "name": "check_dns_propagation",
        "description": "Compare answers across nine resolvers to detect propagation lag.",
        "sideEffect": "network"
      },
      {
        "name": "validate_dnssec",
        "description": "Walk the DS/DNSKEY chain from root and check signatures and algorithm strength.",
        "sideEffect": "network"
      },
      {
        "name": "check_spf",
        "description": "Parse SPF recursively and count the include/redirect lookup budget.",
        "sideEffect": "network"
      },
      {
        "name": "flatten_spf",
        "description": "Resolve an SPF graph to literal ip4/ip6 addresses.",
        "sideEffect": "network"
      },
      {
        "name": "discover_dkim",
        "description": "Probe common DKIM selectors and report which resolve.",
        "sideEffect": "network"
      },
      {
        "name": "check_dmarc",
        "description": "Fetch and parse the _dmarc TXT record and rate policy strength.",
        "sideEffect": "network"
      },
      {
        "name": "check_smtp_tls",
        "description": "Open TCP 25 on every MX, run EHLO + STARTTLS, and validate the certificate.",
        "sideEffect": "network"
      },
      {
        "name": "whois_lookup",
        "description": "WHOIS/RDAP lookup returning registrar, EPP status codes and nameservers.",
        "sideEffect": "network"
      },
      {
        "name": "generate_dns_fix",
        "description": "Return a copy-pasteable record that fixes one named issue.",
        "sideEffect": "read"
      },
      {
        "name": "generate_dmarc",
        "description": "Build a DMARC record from a chosen policy and reporting addresses.",
        "sideEffect": "read"
      }
    ],
    "toolsListedCount": 12,
    "toolsReportedTotal": 45,
    "security": {
      "scope": "read-only",
      "sandbox": "Diagnostics only — no tool writes to a zone or a registrar account.",
      "gotchas": [
        "Every tool sends the domain you ask about to the public intodns.ai API. Do not scan hostnames you consider confidential.",
        "`check_smtp_tls` opens real TCP connections to the target's MX hosts. On a domain you do not own, that is an unsolicited connection.",
        "The free public API is rate-limited; a bulk loop over a portfolio will be throttled."
      ]
    }
  },
  "_links": {
    "html": "https://top-mcps.com/mcp/intodns",
    "markdown": "https://top-mcps.com/mcp/intodns.md",
    "methodology": "https://top-mcps.com/about/methodology"
  }
}