# OksigeniaSL/checker-mcp [Health: Active]

**Category:** 🔒 Security  
**Repository:** https://github.com/OksigeniaSL/checker-mcp  
**GitHub Stars:** 0  
**npm Downloads (last month):** 178  
**Views:** 2  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/oksigeniasl-checker-mcp

## Description
Domain security & privacy checker: 17 live checks (SPF, DMARC, DKIM, DNSSEC, TLS, CAA, security headers) scored 0-100 with remediation. Local-first, zero telemetry. In the official MCP Registry as com.oksigenia/checker-mcp; npm @oksigenia/checker-mcp.

## Tools
Capabilities this server exposes over MCP:

- **check_domain** — Run the Oksigenia Checker against a domain and return a scored security report from real live checks (SSL/TLS, email authentication, DNS & infrastructure, web security). Accepts a bare domain or a URL. Optionally restrict to specific categories.
- **list_checks** — List every check the Oksigenia Checker performs, grouped by category, with the reason each one matters. Useful to know what check ids exist.
- **explain_check** — Given a check id (see list_checks), explain what it verifies, why it matters, and how to remediate a failure.

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "checker-mcp": {
    "command": "npx",
    "args": ["-y","@oksigenia/checker-mcp"],
    "env": {
      "OKSIGENIA_LANG": ""
    }
  }
}
```

**Requires environment variables:** `OKSIGENIA_LANG` — the values above are empty placeholders; fill in real credentials before running (see the repository for what each one is for).

## Documentation

## What OksigeniaSL/checker-mcp MCP server does

OksigeniaSL/checker-mcp MCP server provides an MCP interface for evaluating the security and privacy configuration of a domain or URL. Its scan combines 17 checks in four groups: SSL, email authentication and delivery, DNS and infrastructure, and web security. Results are weighted into a score from 0 to 100, and failed checks include plain remediation guidance.

The checks cover certificate validity and expiry, SPF, DMARC, DKIM, MTA-STS, MX, BIMI, DNSSEC, PTR records, CAA, malware or phishing reputation, registration expiry, WHOIS/RDAP redaction, HTTP security headers, CSP quality, detected web technology and API exposure, and HSTS preload status.

## How it works

The process runs locally and communicates with an MCP client through stdio. Network requests are made only as part of the requested checks. DNS queries use Cloudflare DNS-over-HTTPS, while reputation data uses Cloudflare's security resolver. Other lookups can contact public RDAP services, the HSTS preload API, and the target site over HTTPS to inspect its certificate and headers.

No analytics, telemetry, or third-party scoring service is used. The scanned domain is the information sent to those external services; the project states that query details are not otherwise stored or transmitted.

Three MCP tools are available:

- `check_domain` accepts a bare domain or full URL. It can run all checks or selected categories, return a report or JSON, and render the result in English or Spanish.
- `list_checks` groups the available checks by category and explains why each matters.
- `explain_check` takes a check ID and returns its purpose and remediation guidance.

## Setup and configuration

Run the package through npm with `npx @oksigenia/checker-mcp`, then register that command in an MCP client configuration. The documented setup includes Claude Desktop and Claude Code; the server uses the standard stdio transport. It can also run in Docker when attached to the client process with interactive stdin rather than exposed on a port.

Set `OKSIGENIA_LANG` to `en` or `es` to choose the default report language. A `lang` argument on an individual tool call can override that default. English is used when no language is specified.

## Tools and capabilities

The OksigeniaSL/checker-mcp MCP server is useful for automated domain reviews, email authentication checks, DNS configuration audits, certificate inspection, and web-header assessments. Category selection lets callers limit a scan, while `list_checks` and `explain_check` provide context without running a complete report. The package is licensed under GPL-3.0-or-later and can be built or self-hosted from source.

## Limitations and notes

Results depend on live DNS, RDAP, HTTPS, reputation, and HSTS-preload responses. DKIM checks probe common selectors rather than guaranteeing discovery of every selector in use. The server does not expose a network port in its documented Docker mode; it expects stdin and stdout to remain connected to the MCP client. Supported report languages are limited to English and Spanish.

_Full upstream README: https://allmcps.com/mcp/oksigeniasl-checker-mcp/readme_