io.github.Mewnah/stack-and-dns-mcp

stack-and-dns-mcp

Inspect any domain: tech stack, SPF/DKIM/DMARC/MX email health and security posture, for AI agents

100/wk GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 9d ago

Works with most clients

Transport: http, stdio

0 tools

Grade F

MCPpedia last refreshed this data 22h ago

Edit this pageView history

io.github.Mewnah/stack-and-dns-mcp is an MCP server that inspect any domain: tech stack, SPF/DKIM/DMARC/MX email health and security posture, for AI agents. Its tool list has not been published yet over http and stdio, requires no API key, and scores 63/100 on MCPpedia's security, maintenance and efficiency rubric.

AI / ML Communication

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp, stdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "stack-and-dns": {
      "env": {
        "STACKDNS_DB_FILE": "/absolute/path/to/stack-and-dns-mcp/data/stackdns.db",
        "STACKDNS_LOG_LEVEL": "warn",
        "STACKDNS_USAGE_FILE": "/absolute/path/to/stack-and-dns-mcp/data/usage.json"
      },
      "args": [
        "/absolute/path/to/stack-and-dns-mcp/dist/index.js"
      ],
      "command": "node"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-mewnah-stack-and-dns-mcp)](https://mcppedia.org/s/io-github-mewnah-stack-and-dns-mcp)

Read me

What io.github.Mewnah/stack-and-dns-mcp does

Inspect any domain: tech stack, SPF/DKIM/DMARC/MX email health and security posture, for AI agents

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y 'stack-and-dns-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

63/100across 5 weighted dimensions

How we score →

0255075100

−37

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked stack-and-dns-mcp against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.Mewnah/stack-and-dns-mcp safe to use?: io.github.Mewnah/stack-and-dns-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.github.Mewnah/stack-and-dns-mcp?: io.github.Mewnah/stack-and-dns-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.Mewnah/stack-and-dns-mcp?: io.github.Mewnah/stack-and-dns-mcp is compatible with claude-desktop, cursor, claude-code. It uses http and stdio transport.
Is io.github.Mewnah/stack-and-dns-mcp actively maintained?: io.github.Mewnah/stack-and-dns-mcp is actively maintained - last commit was 9 days ago.

Similar servers

Others in ai-ml / communication

View all →

Vibe Assistant95

A cross-platform desktop application for managing AI Agents and MCP Servers. 一款用于管理AI智能体与MCP服务器的跨平台桌面应用程序。

169 3

Codebase Memory Mcp95

Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.

48.6k 6

Gemini Cli95

An open-source AI agent that brings the power of Gemini directly into your terminal.

108.8k 8

Bla95

🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.

5.5k 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.Mewnah/stack-and-dns-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

{ "mcpServers": { "stack-and-dns": { "env": { "STACKDNS_DB_FILE": "/absolute/path/to/stack-and-dns-mcp/data/stackdns.db", "STACKDNS_LOG_LEVEL": "warn", "STACKDNS_USAGE_FILE": "/absolute/path/to/stack-and-dns-mcp/data/usage.json" }, "args": [ "/absolute/path/to/stack-and-dns-mcp/dist/index.js" ], "command": "node" } } }

stack-and-dns-mcp

A monetized Model Context Protocol server that inspects any public domain for AI agents. Give it a domain and it returns the company's web technology stack, its email deliverability and DNS health (MX / SPF / DKIM / DMARC / MTA-STS / TLS-RPT / BIMI), and its HTTPS security posture, all as strictly-typed JSON with 0-100 scores and remediation-ready findings.

Built for Cursor, Claude Desktop, Claude Code, autonomous SDR bots and research agents. Runs locally over stdio with zero configuration, or as a hosted Streamable HTTP / SSE service that meters usage per API key and can sell prepaid credits through HTTP 402 payment challenges (Stripe hosted checkout or x402 / Machine Payments Protocol stablecoin payments) or API key subscriptions through a self-serve signup page.

Every scan is remembered, so it can also tell you what changed: domain_history shows when a company adopted or dropped a tool or weakened its DMARC policy, bulk checks work through whole lead lists (as MCP tools or a CSV-friendly REST API), watched domains raise alerts, by poll or signed webhook, when their email posture or stack changes, and find_domains_using answers "who runs Klaviyo?" from a robots.txt-respecting crawl of a domain list you supply.

What the tools return

Tool	What it does	Cost
`inspect_tech_stack`	Fetches the homepage (3 s per attempt, at most 6 s with its TLS and `http://` fallbacks, transparent bot UA, redirect and WAF aware) and matches it against 450+ regex signatures covering CMS, e-commerce, JS frameworks, CDNs, hosting, WAFs, analytics, tag managers, marketing automation, CRM, live chat, payments, ad pixels, consent tools and more. Also inspects the TLS certificate and grades security headers.	1 credit
`verify_email_infrastructure`	Live DNS: MX with provider identification, SPF with recursive include expansion and lookup counting, DKIM discovery across 86 common selectors (key type/length), DMARC with org-domain fallback and report-destination authorization, MTA-STS policy fetch, TLS-RPT, BIMI, disposable-domain detection. Returns severity-sorted risks and a deliverability score.	1 credit
`comprehensive_audit`	Runs both concurrently and aggregates an overall health score (email 40 %, security 35 %, infrastructure maturity 25 %) with merged findings and highlights.	2 credits
`domain_history`	Returns what earlier scans recorded about a domain without scanning again: current and past technologies with first-seen and last-seen dates, the latest email posture, and a dated change log (tool added or removed, DMARC weakened, DKIM key lost, MX provider changed). Available when storage is enabled.	1 credit
`start_bulk_check` + `get_bulk_check`, `list_bulk_checks`, `cancel_bulk_check`	Checks a whole lead list (email, tech or audit per domain) as a background job with paged results and CSV export. Also available as a REST API.	per accepted domain, at the single-domain price; polling is free
`watch_domain` + `get_alerts`, `list_watches`, `unwatch_domain`	Re-checks watched domains on a schedule and raises alerts when their email posture or technology stack changes, readable with `get_alerts` or pushed to a signed webhook.	included in plans; prepaid callers pay per scheduled check
`fin

Tool

What it does

Cost

inspect_tech_stack

Fetches the homepage (3 s per attempt, at most 6 s with its TLS and http:// fallbacks, transparent bot UA, redirect and WAF aware) and matches it against 450+ regex signatures covering CMS, e-commerce, JS frameworks, CDNs, hosting, WAFs, analytics, tag managers, marketing automation, CRM, live chat, payments, ad pixels, consent tools and more. Also inspects the TLS certificate and grades security headers.

1 credit

verify_email_infrastructure

Live DNS: MX with provider identification, SPF with recursive include expansion and lookup counting, DKIM discovery across 86 common selectors (key type/length), DMARC with org-domain fallback and report-destination authorization, MTA-STS policy fetch, TLS-RPT, BIMI, disposable-domain detection. Returns severity-sorted risks and a deliverability score.

1 credit

comprehensive_audit

Runs both concurrently and aggregates an overall health score (email 40 %, security 35 %, infrastructure maturity 25 %) with merged findings and highlights.

2 credits

domain_history

Returns what earlier scans recorded about a domain without scanning again: current and past technologies with first-seen and last-seen dates, the latest email posture, and a dated change log (tool added or removed, DMARC weakened, DKIM key lost, MX provider changed). Available when storage is enabled.

1 credit

start_bulk_check + get_bulk_check, list_bulk_checks, cancel_bulk_check

Checks a whole lead list (email, tech or audit per domain) as a background job with paged results and CSV export. Also available as a REST API.

per accepted domain, at the single-domain price; polling is free

watch_domain + get_alerts, list_watches, unwatch_domain

Re-checks watched domains on a schedule and raises alerts when their email posture or technology stack changes, readable with get_alerts or pushed to a signed webhook.

included in plans; prepaid callers pay per scheduled check

`fin

Frequently Asked Questions

Is io.github.Mewnah/stack-and-dns-mcp safe to use?

io.github.Mewnah/stack-and-dns-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.

How do I install io.github.Mewnah/stack-and-dns-mcp?

io.github.Mewnah/stack-and-dns-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.Mewnah/stack-and-dns-mcp?

io.github.Mewnah/stack-and-dns-mcp is compatible with claude-desktop, cursor, claude-code. It uses http and stdio transport.

Is io.github.Mewnah/stack-and-dns-mcp actively maintained?

io.github.Mewnah/stack-and-dns-mcp is actively maintained - last commit was 9 days ago.

stack-and-dns-mcp

What the tools return

Tool	What it does	Cost
`inspect_tech_stack`	Fetches the homepage (3 s per attempt, at most 6 s with its TLS and `http://` fallbacks, transparent bot UA, redirect and WAF aware) and matches it against 450+ regex signatures covering CMS, e-commerce, JS frameworks, CDNs, hosting, WAFs, analytics, tag managers, marketing automation, CRM, live chat, payments, ad pixels, consent tools and more. Also inspects the TLS certificate and grades security headers.	1 credit
`verify_email_infrastructure`	Live DNS: MX with provider identification, SPF with recursive include expansion and lookup counting, DKIM discovery across 86 common selectors (key type/length), DMARC with org-domain fallback and report-destination authorization, MTA-STS policy fetch, TLS-RPT, BIMI, disposable-domain detection. Returns severity-sorted risks and a deliverability score.	1 credit
`comprehensive_audit`	Runs both concurrently and aggregates an overall health score (email 40 %, security 35 %, infrastructure maturity 25 %) with merged findings and highlights.	2 credits
`domain_history`	Returns what earlier scans recorded about a domain without scanning again: current and past technologies with first-seen and last-seen dates, the latest email posture, and a dated change log (tool added or removed, DMARC weakened, DKIM key lost, MX provider changed). Available when storage is enabled.	1 credit
`start_bulk_check` + `get_bulk_check`, `list_bulk_checks`, `cancel_bulk_check`	Checks a whole lead list (email, tech or audit per domain) as a background job with paged results and CSV export. Also available as a REST API.	per accepted domain, at the single-domain price; polling is free
`watch_domain` + `get_alerts`, `list_watches`, `unwatch_domain`	Re-checks watched domains on a schedule and raises alerts when their email posture or technology stack changes, readable with `get_alerts` or pushed to a signed webhook.	included in plans; prepaid callers pay per scheduled check
`fin

Tool

What it does

Cost

inspect_tech_stack

1 credit

verify_email_infrastructure

1 credit

comprehensive_audit

Runs both concurrently and aggregates an overall health score (email 40 %, security 35 %, infrastructure maturity 25 %) with merged findings and highlights.

2 credits

domain_history

1 credit

start_bulk_check + get_bulk_check, list_bulk_checks, cancel_bulk_check

Checks a whole lead list (email, tech or audit per domain) as a background job with paged results and CSV export. Also available as a REST API.

per accepted domain, at the single-domain price; polling is free

watch_domain + get_alerts, list_watches, unwatch_domain

Re-checks watched domains on a schedule and raises alerts when their email posture or technology stack changes, readable with get_alerts or pushed to a signed webhook.

included in plans; prepaid callers pay per scheduled check

`fin

io.github.Mewnah/stack-and-dns-mcp

Install in your client