Checker MCP logo

Checker MCP

by OksigeniaSL

Scans domains with 17 live security and privacy checks, producing scores and remediation guidance over local stdio.

Install Checker MCP

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "oksigeniasl-checker-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@oksigenia/checker-mcp"
      ],
      "env": {
        "OKSIGENIA_LANG": "YOUR_VALUE_HERE"
      }
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Values are written into the snippet above so you can paste it as is. They never leave your browser.

Automated check passed— started and listed 3 tools correctly (1mo ago).

Overview

OksigeniaSL/checker-mcp MCP server scans domains or URLs with 17 live security and privacy checks across SSL, email, DNS, and web categories. It runs locally over stdio, performs its own DNS-over-HTTPS, HTTP, RDAP, and TLS lookups, and does not send telemetry. Use it when an agent needs a scored 0–100 domain report, a catalog of available checks, or remediation guidance for a specific failure. Reports support English and Spanish, with category filtering available for scans.

Use cases

  • Scan a domain’s email authentication and DNS posture
  • Review TLS certificates and HTTP security headers
  • Explain a failed DMARC, DNSSEC, or CSP check
  • Generate a scored security report for a domain

Key features

  • 17 live checks across SSL, email, DNS, and web categories
  • 0–100 weighted scoring with remediation guidance
  • MCP tools for scans, check catalogs, and explanations
  • Local stdio execution with no telemetry
  • English and Spanish report rendering
  • Optional category filtering and JSON output

Tools3

What Checker MCP lets your agent do. Expand a tool for its parameters.

Verified live~460 tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 1d ago

Recent health check succeeded.

21/22 checks healthy over the last 90d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 5d ago via OSV.dev · @oksigenia/checker-mcp (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

npm downloads178Package downloads in the last 30 days.
Last commit3mo agoMost recent push to the default branch.
Availability100%Our rolling endpoint + install checks that succeeded.
Install checkPassedOur sandbox started it and listed its tools.
Tools exposed3Callable tools this server registers over MCP.
Directory activity2 viewsConfig copies, upvotes, and views on AllMCPs.

How Checker MCP works

What OksigeniaSL/checker-mcp MCP server does

OksigeniaSL/checker-mcp MCP server provides an MCP interface for evaluating the security and privacy configuration of a domain or URL. Its scan combines 17 checks in four groups: SSL, email authentication and delivery, DNS and infrastructure, and web security. Results are weighted into a score from 0 to 100, and failed checks include plain remediation guidance.

The checks cover certificate validity and expiry, SPF, DMARC, DKIM, MTA-STS, MX, BIMI, DNSSEC, PTR records, CAA, malware or phishing reputation, registration expiry, WHOIS/RDAP redaction, HTTP security headers, CSP quality, detected web technology and API exposure, and HSTS preload status.

How it works

The process runs locally and communicates with an MCP client through stdio. Network requests are made only as part of the requested checks. DNS queries use Cloudflare DNS-over-HTTPS, while reputation data uses Cloudflare's security resolver. Other lookups can contact public RDAP services, the HSTS preload API, and the target site over HTTPS to inspect its certificate and headers.

No analytics, telemetry, or third-party scoring service is used. The scanned domain is the information sent to those external services; the project states that query details are not otherwise stored or transmitted.

Three MCP tools are available:

  • check_domain accepts a bare domain or full URL. It can run all checks or selected categories, return a report or JSON, and render the result in English or Spanish.
  • list_checks groups the available checks by category and explains why each matters.
  • explain_check takes a check ID and returns its purpose and remediation guidance.

Setup and configuration

Run the package through npm with npx @oksigenia/checker-mcp, then register that command in an MCP client configuration. The documented setup includes Claude Desktop and Claude Code; the server uses the standard stdio transport. It can also run in Docker when attached to the client process with interactive stdin rather than exposed on a port.

Set OKSIGENIA_LANG to en or es to choose the default report language. A lang argument on an individual tool call can override that default. English is used when no language is specified.

Tools and capabilities

The OksigeniaSL/checker-mcp MCP server is useful for automated domain reviews, email authentication checks, DNS configuration audits, certificate inspection, and web-header assessments. Category selection lets callers limit a scan, while list_checks and explain_check provide context without running a complete report. The package is licensed under GPL-3.0-or-later and can be built or self-hosted from source.

Limitations and notes

Results depend on live DNS, RDAP, HTTPS, reputation, and HSTS-preload responses. DKIM checks probe common selectors rather than guaranteeing discovery of every selector in use. The server does not expose a network port in its documented Docker mode; it expects stdin and stdout to remain connected to the MCP client. Supported report languages are limited to English and Spanish.

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Checker MCP

OksigeniaSL/checker-mcp is an MCP server that connects AI clients to live domain security and privacy checks. Its main tools are `check_domain` for scored scans, `list_checks` for the complete categorized check list, and `explain_check` for check-specific rationale and remediation. It runs locally over stdio without telemetry.

Install it by running `npx @oksigenia/checker-mcp` or by adding `npx -y @oksigenia/checker-mcp` as the command and argument in an MCP client configuration.

Yes, OksigeniaSL/checker-mcp works with Claude Desktop through its stdio MCP configuration. Add the server with `npx -y @oksigenia/checker-mcp` and optionally set `OKSIGENIA_LANG` to `en` or `es`.

Pass category names in the `categories` argument to `check_domain`; if omitted, all categories run. The documented categories include `ssl`, `email`, `dns`, and `web`, and the tool can also return either a report or JSON.

It sends the domain being scanned to services needed for live checks, including Cloudflare DNS-over-HTTPS and reputation services, public RDAP, the HSTS preload API, and the target site over HTTPS.

Related MCP servers

Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewChecker MCP AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/oksigeniasl-checker-mcp?style=directory)](https://allmcps.com/mcp/oksigeniasl-checker-mcp)
HTML Embed
<a href="https://allmcps.com/mcp/oksigeniasl-checker-mcp"><img src="https://allmcps.com/api/badge/oksigeniasl-checker-mcp?style=directory" alt="Checker MCP on AllMCPs" /></a>