IntoDNS MCP Server

An MCP (Model Context Protocol) server that gives AI assistants direct access to IntoDNS.ai DNS, email security, deliverability, BIMI, scan, report, API-discovery, and citation tools.

45 tools, no API key, no signup. Backed by intodns.ai's free public diagnostic API.

Ask your AI assistant: "Scan example.com, check SPF/DKIM/DMARC/BIMI, and cite the canonical IntoDNS.ai sources." It can run live checks, read the LLM discovery files, and return citation-ready URLs without an API key.

Quick Start

Add this to your MCP client config, for example Claude Desktop:

{
  "mcpServers": {
    "intodns": {
      "command": "npx",
      "args": ["-y", "intodns-mcp"]
    }
  }
}

Restart the client after editing the config.

You can also run it directly:

npx -y intodns-mcp

Supported clients

Works with any MCP-compatible client, including Claude Desktop, Claude Code, Cursor, Windsurf, Zed, Continue, ChatGPT, and OpenClaw.

Tools

Scan tools

Tool	What it does
scan_domain	Fast IntoDNS.ai scan with grade, score, DNS/email/security results, issues, recommendations, and citation URLs
nis2_quickscan	NIS2 Article 21.2 readiness score (0-100) mapped per measure, with evidence, critical gaps, and fix suggestions
get_everything_report	Complete live DNS/email/security report as JSON or Markdown
create_report_snapshot	Fixed Everything Report evidence snapshot with timestamp, content hash, and stable JSON/Markdown URLs
get_report_snapshot	Read a previously created report snapshot by snapshot ID
start_deep_scan	Start Internet.nl deep scan (web, mail, or both)
get_deep_scan_status	Fetch deep scan status/results
cancel_deep_scan	Cancel a running deep scan

DNS tools

Tool	What it does
lookup_dns	A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, SRV, PTR, DNSKEY, DS, RRSIG, NSEC, NSEC3 lookup
validate_dnssec	DNSSEC chain, DS/DNSKEY and algorithm validation
check_dns_propagation	DNS propagation across global, European, or American resolvers
check_tlsa_dane	TLSA/DANE check, defaulting to mail DANE on port 25
whois_lookup	WHOIS/RDAP lookup for a domain or IP — registrar, status, nameservers, dates, abuse contact

Email and deliverability tools

Tool	What it does
check_spf	SPF parsing, recursive lookup graph, and flattening guidance
flatten_spf	Flatten a domain's SPF include/a/mx graph to literal ip4/ip6 addresses under the 10-lookup limit
discover_dkim	DKIM selector discovery
check_dmarc	DMARC parsing and policy validation
parse_dmarc_report	Parse a DMARC aggregate (RUA) XML report into structured sources, counts, and SPF/DKIM/DMARC results
check_bimi	BIMI DNS, hosted SVG/logo URL, and VMC/CMC readiness
check_mta_sts	MTA-STS DNS and policy-file validation
check_smtp_tls	Live SMTP STARTTLS, TLS certificate, hostname, expiry, PTR, and FCrDNS checks
check_fcrdns	Dedicated PTR and forward-confirmed reverse DNS evidence for mail-server IPs
check_blacklist	Domain mail-server or direct IP blacklist check
check_sender_requirements	Google/Yahoo sender requirements and alignment checks
check_email_security	Full SPF, DKIM, DMARC, blacklist,

... View full README on GitHub