Domain Health

{
  "mcpServers": {
    "com.modernmustardseed/domain-health": {
      "url": "https://mcp.modernmustardseed.com/domain-health"
    }
  }
}

Indexed tools

Tool metadata and schemas come from the remote server and are untrusted. Indexing only lists tools; it never calls them.

5 shown · authentication unknown

• Check domain registration

  check_domain_registration

  Read a domain's public registration record from its registry over RDAP (no WHOIS scraping): registrar, creation, expiry and last-change dates, status locks such as clientTransferProhibited, danger states such as redemption period or hold, and nameservers. Also compares the registry's nameservers with the live zone and checks DNSSEC. Subdomains are checked as their registered domain. Some country-code registries do not publish RDAP; the tool says so.

  Schema valid · SHA-256 1ccbe7eebd48…

  View input schema

  {
    "type": "object",
    "properties": {
      "domain": {
        "type": "string",
        "minLength": 3,
        "maxLength": 2048,
        "description": "The domain to check, such as example.com. A website address (https://www.example.com/page) or an email address (jo@example.com) also works; the domain is taken from it."
      },
      "detail": {
        "default": "summary",
        "description": "\"summary\" (default) lists only findings that need action; \"full\" also lists every passing check.",
        "type": "string",
        "enum": [
          "summary",
          "full"
        ]
      }
    },
    "required": [
      "domain"
    ],
    "$schema": "https://json-schema.org/draft/2020-12/schema"
  }

• Check email authentication

  check_email_auth

  Explain in plain words whether email from a domain will reach the inbox and whether others can forge it. Checks MX, SPF with every include expanded and counted against the 10-lookup limit, DMARC policy, alignment and report permissions, DKIM keys at about 40 common selectors plus any you name (with key size), BIMI, MTA-STS and TLS-RPT, and the DNS rules Google, Yahoo and Microsoft set for bulk senders. Every finding has a severity, a one-sentence fix and the RFC or provider document behind it. Reads public DNS only.