Agent Preflight: OFAC, DNS, Email Auth, Domain, Email & URL

{
  "mcpServers": {
    "dev.workers.sdnscreen.sdn-screen-x402/agent-preflight": {
      "url": "https://sdn-screen-x402.sdnscreen.workers.dev/mcp"
    }
  }
}

Indexed tools

Tool metadata and schemas come from the remote server and are untrusted. Indexing only lists tools; it never calls them.

6 shown · authentication unknown

• DNS Records Lookup

  dns_lookup

  Resolves live DNS records for any domain or hostname via 1.1.1.1: A, AAAA, CNAME, MX, NS, TXT, SOA and CAA in one call (type=ALL), or a single type incl. SRV, PTR, DS, DNSKEY, HTTPS. Clean JSON with TTLs, NXDOMAIN flag and DNSSEC-authenticated bit. A URL or email address is reduced to its host. Use when an agent needs to verify a domain, find mail servers or nameservers, or read TXT/SPF records. $0.01 USDC on Base. Paid tool: call it once to get the x402 PaymentRequired object, then retry with params._meta["x402/payment"].

  Schema valid · SHA-256 b1f7a274c655…

  View input schema

  {
    "type": "object",
    "properties": {
      "name": {
        "type": "string",
        "minLength": 3,
        "maxLength": 253,
        "description": "Domain or hostname, e.g. example.com. A full URL or email address is accepted and reduced to its host. Alias: domain.",
        "examples": [
          "example.com"
        ]
      },
      "type": {
        "type": "string",
        "enum": [
          "ALL",
          "A",
          "AAAA",
          "CNAME",
          "MX",
          "NS",
          "TXT",
          "SOA",
          "CAA",
          "SRV",
          "PTR",
          "DS",
          "DNSKEY",
          "HTTPS"
        ],
        "default": "ALL",
        "description": "ALL (default: A, AAAA, CNAME, MX, NS, TXT, SOA, CAA) or one record type."
      }
    },
    "required": [
      "name"
    ],
    "additionalProperties": false
  }

• Email Auth Check (SPF/DMARC/DKIM)

  email_auth_check

  Checks a domain's email authentication: parses SPF (+all, ?all, multiple records, over 10 DNS lookups), DMARC (p, sp, pct, rua), DKIM keys (your selector or 15 common ones) and MX, then returns an A-F grade, 0-100 score and coded issues (spf_missing, dmarc_p_none, ...). Use when an agent must judge if a domain can be spoofed, debug deliverability, or vet a sender/vendor domain. $0.01 USDC on Base. Paid tool: call it once to get the x402 PaymentRequired object, then retry with params._meta["x402/payment"].