securitydnstlsnetwork-diagnosticsthreat-intelligence
Audits DNS, TLS, email security, network exposure, web technologies, and threat indicators through MCP tools.
Quick Install
Automated & IDE SetupCopy the AI prompt to install this server into Claude Code, Cursor, or another agent — or use 1-click editor setup below.
One-click editor setup isn’t available for this listing yet — we don’t have a confirmed install command, and we’d rather show nothing than point your editor at the wrong package or host. Follow the project’s own setup instructions, linked above.
Manual Client & Custom JSON ConfigExpand JSON â–¾
No confirmed setup config for this listing yet. We only publish a config block when the install details come from the project itself — its README, its docs, or a verified owner. We haven’t found those for kent-tokyo/shohei, and we’d rather show nothing than a guess you’d paste into your client. Follow the project’s own setup instructions for the current steps.
Overview
Use cases
Audit a domain’s DNSSEC, TLS, and email security posture
Check DNS propagation and resolver latency across global services
Investigate exposed ports, IPv6 reachability, and redirect chains
Fingerprint web technologies and look up related CVEs
Find live typosquatting domains and possible subdomain takeovers
Key features
DNS, DNSSEC, DoH, DoT, and DoQ diagnostics
TLS certificate and DANE/TLSA inspection
SPF, DKIM, DMARC, BIMI, and MTA-STS checks
Port, IPv6, DNSBL, and delegation analysis
Technology fingerprinting and NVD CVE lookup
Typosquatting and redirect-chain detection
Capabilities & Tool Schemas
Inspect callable tools, capabilities, and parameters exposed to AI agents by Shohei.
Extracted Tool Capabilities
DNS, DNSSEC, DoH, DoT, and DoQ diagnostics
TLS certificate and DANE/TLSA inspection
SPF, DKIM, DMARC, BIMI, and MTA-STS checks
Port, IPv6, DNSBL, and delegation analysis
Technology fingerprinting and NVD CVE lookup
Typosquatting and redirect-chain detection
How Shohei works
What kent-tokyo/shohei MCP server does
The kent-tokyo/shohei MCP server brings infrastructure and security diagnostics into MCP-compatible agent workflows. Its scope covers DNS operations, TLS and certificate inspection, email authentication, IP reputation, HTTP analysis, web reconnaissance, and selected threat-intelligence checks. The README describes 168 MCP tools organized across 62 modules, along with a Rust library that can also be used outside MCP.
Use it to investigate a domain’s operational and security posture rather than to modify infrastructure. Checks can produce findings such as DNS inconsistencies, certificate-chain details, missing email controls, exposed ports, redirect behavior, detected technologies, or known CVEs associated with a fingerprinted technology.
How it works
An MCP client can call diagnostic tools and receive serializable result types intended for agent processing. The server performs checks against DNS resolvers, domain and network endpoints, and free or open APIs. No API keys are required according to the project documentation.
DNS functions include queries against multiple global resolvers, iterative resolution tracing, DNSSEC chain inspection, reverse DNS, propagation checks, resolver comparisons, and latency tests over system DNS, DoH, DoT, and DoQ. Network-oriented checks can test TCP reachability, inspect banners, trace hops, assess IPv6 support, and examine DNS amplification or wildcard behavior.
The project is implemented in Rust and requires Rust 1.85 or later for the documented release. It is also described as usable as a library in Rust projects, CI/CD pipelines, and automation frameworks.
Tools and capabilities
The kent-tokyo/shohei MCP server supports the following diagnostic areas:
- Inspect TLS versions, cipher suites, certificate chains, OCSP behavior, DANE/TLSA, and IPv6 connectivity.
- Score email security controls including MX, SPF, DKIM, DMARC, BIMI, MTA-STS, TLS-RPT, and ARC records.
- Check IP blocklists, reverse DNS, forward-confirmed reverse DNS, CDN or WAF indicators, and DNS delegation.
- Audit security headers such as CSP, HSTS, X-Frame-Options, Referrer-Policy, and Permissions-Policy.
- Enumerate common subdomains, test 15 common TCP ports, detect parked domains, and identify possible subdomain takeovers.
- Fingerprint web technologies, query the NVD for CVEs, generate typosquatting variants, and trace URL redirects.
- Validate RPKI/ROA data, inspect DNSSEC trust paths, perform AXFR checks, and identify HTTP protocol versions.
The repository also documents batch input, JSON output, watch mode, and an optional terminal interface for command-line use. These features complement the MCP interface but are not necessarily separate MCP tools.
Limitations and notes
Results depend on the reachability and responses of the inspected domains, resolvers, services, and external APIs. The documentation describes diagnostics and analysis capabilities; it does not describe remediation or infrastructure changes. The project reports fixes for SSRF-related issues and other bugs in version 2.5.1, so deployments should use an appropriate current release. The stated license is MIT.
Related MCP Servers
- 🔒 Security3 viewsCompare vs MCP Shodan →
- Verified
- text_scan_v1 — free Scans a text string for invisible Unicode characters, homoglyphs, and normalization issues. Returns a risk score, a list of flagged characters, and detected homoglyphs. Never modifies the input text.
- text_purge_v1 — $0.01 per call Removes invisible Unicode characters and replaces homoglyphs in a text string, then normalizes the result. Returns the cleaned text plus a before-and-after risk comparison.
- domain_check_score_v1 — free Overall score, per-category scores, and how many findings each category raised. Use it to triage: rank a list of domains, confirm one is healthy, or decide whether the full report is worth pulling. It tells you which categories are weak and how many issues they hold, but not what the issues are.
- domain_check_score_batch_v1 — free The same triage scores for up to 100 domains in a single call. One score summary per distinct domain: overall score, per-category scores, and how many findings each category raised. Never the findings themselves.
- domain_check_v1 — $0.01 per call Full report for one domain: weighted score out of 100, per-category breakdown, and every individual finding with a prioritised remediation order.
-
domain_check_batch_v1 — from $0.005 per domain
The same full report for up to 100 domains in a single call, with one payment for the whole batch instead of one per domain. Both cheaper per domain and much faster than calling
domain_check_v1in a loop.
🔒 Security3 viewsCompare vs Feranor Resilience → - 🔒 Security2 viewsCompare vs MCP Virustotal →
- 🔒 Security2 viewsCompare vs MCP Dnstwist →
Adoption & maintenance
Factual signals from GitHub, npm, and our automated checks — not a rating.
GitHub stars
3
Stargazers on the source repository.
Last commit
3mo ago
Most recent push to the default branch.
Directory activity
4 views
Config copies, upvotes, and views on AllMCPs.
Reviews
No reviews yet — be the first to share how this listing worked for you.
Frequently Asked Questions about Shohei
AllMCPs Directory Badge
Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.
Badge Style:
Live Dynamic SVG Preview
Markdown (GitHub README)
[](https://allmcps.com/mcp/kent-tokyo-shohei)HTML Embed
<a href="https://allmcps.com/mcp/kent-tokyo-shohei"><img src="https://allmcps.com/api/badge/kent-tokyo-shohei?style=directory" alt="Shohei on AllMCPs" /></a>Technical Specs & Signals
CategorySecurity
PricingFree
11/11 checks healthy over the last 33d
43Quality signal: Fair · 43/100How this signal is calculated ▾
Server availabilityNot measured
Not scored for repo-hosted servers — we can't reach the running server, only its GitHub page. Hosted MCP endpoints are health-checked live.
Verified ownership10/20
Documentation & tools19/30
Adoption & activity2/15
Community engagement1/10
A guidance signal from public completeness & health data — not a user rating. New listings start lower and rise as they add docs, get verified, and grow adoption. Signals we can't observe for a listing are skipped, not counted against it.
Own this project?
This directory is pre-filled from public sources. Claim via GitHub README, site badge, or DNS TXT to unlock edit access and the Official badge — proof is checked automatically, then reviewed by our team.
Free dofollow backlink: add your website and place the AllMCPs badge on it — no claim needed. We detect it automatically and keep it verified as long as the badge stays live.
Claim & get free dofollowShare & Embed
Add our SVG badge (dark/light directory styles) or embeddable widget to your site.