Professional DNS diagnostics: 14 tools for DNS, DNSSEC, email security, SSL, and propagation.
Copy the AI prompt to install this server into Claude Code, Cursor, or another agent β or use 1-click editor setup below.
π‘ Paste the JSON block into your client's configuration file under mcpServers, then restart the application.
A remote MCP server exposing 19 professional DNS diagnostic tools from the iDig API β built by Kedar Bhave ( Softricks ).
Connect any MCP-compatible AI client (Claude Desktop, Cursor, Windsurf, and more) to real DNS infrastructure. Diagnose outages, audit email security, validate DNSSEC, check SSL certificates, trace propagation across 16 global resolvers, and more β all in plain English.
Live endpoint: https://mcp.softricks.net/sse
Edit ~/Library/Application Support/Claude/claude_desktop_config.json:
Restart Claude Desktop. You'll see idig-dns appear under Connectors.
Add to your MCP settings:
All tools require a token parameter. Get your token at api.softricks.net/idig/docs.
| Tool | Description |
|---|---|
dns_lookup | Look up any DNS record type: A, AAAA, MX, NS, TXT, SOA, CAA, SRV, CNAME, DS, TLSA, HTTPS, SVCB |
resolve_check | Resolution diagnostics β returns ok / nxdomain / servfail / timeout / degraded |
diagnose | Full diagnosis combining resolution + DNSSEC β start here when something is broken |
email_security_audit | SPF, DKIM, DMARC, and BIMI audit with AβF grade and prioritized fix recommendations |
mx_check | MX health + provider detection (Google Workspace, M365, Proofpoint, 35+ providers) |
dnssec_validate | DNSSEC chain of trust β returns secure / insecure / bogus / indeterminate |
dnssec_health | Key inventory, signature expiry, algorithm assessment, rollover readiness |
propagation_check | Check propagation across 16 global resolvers: Google, Cloudflare, Quad9, China, Korea, Russia |
ssl_check | Certificate validity, expiry countdown, domain match, issuer, chain completeness |
ttl_check | TTL advisory with step-by-step migration lowering plan |
zone_consistency | Compare all authoritative nameservers β catches lame delegation and SOA mismatches |
subdomain_discover | Probe 75 common subdomains + crt.sh Certificate Transparency logs β surfaces exposed dev/staging environments |
geo_lookup | Geolocation, ISP, ASN, CDN detection, hosting flag |
domain_status | EPP registrar lock status β transfer-ready, delete lock, serverHold, pendingDelete |
blacklist_check | IP blacklist / DNSBL check β Spamhaus, Barracuda, SpamCop, SORBS, and more |
whois_lookup | Parsed WHOIS data β registrar, expiry, domain age, nameservers, EPP status |
http_check | HTTP/HTTPS reachability β status codes, redirect chain, HSTS, HTTPβHTTPS redirect |
zone_axfr | AXFR zone transfer vulnerability check β tests if any NS allows public zone transfers |
dane_validate | DANE/TLSA validation β cross-validates TLSA records against live TLS certificate |
Clone this repo and deploy your own instance:
Or deploy to Railway in one click β connect your GitHub repo and Railway handles the rest.
Requirements:
mcp==1.26.0httpxMIT
No reviews yet β be the first to share how this listing worked for you.
Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.
[](https://allmcps.com/mcp/idig-dns)<a href="https://allmcps.com/mcp/idig-dns"><img src="https://allmcps.com/api/badge/idig-dns?style=directory" alt="Idig Dns on AllMCPs" /></a>