官方说明7 个来源MCP 服务8 天前
kent-tokyo/shohei
Infrastructure diagnostics: DNS checks
在 GitHub 查看 ↗直链 · 无中转页
配置模板（请按你的客户端调整）
claude mcp add shohei -- npx -y shohei
这是根据仓库名生成的可粘贴骨架，命令行参数与包名请以该项目 README 为准。
- ★ 数取值
- 3 ★ · kent-tokyo/shohei · 取自 GitHub 搜索 API · （2026-10-16 20:00:20 核对）
- 来源明细
- 收录自 punkpeye/awesome-mcp-servers 榜单（我们从中收集的条目之一） · 条目类型：MCP 服务
- 收录与活跃
- 收录于 2026-10-09 · 最近见到 2026-10-16 · 共见到 32 次 · 被 7 个来源列出
- 评分构成
- 综合分 703 · 3 ★ · 7 个来源 · mcp
常见问题（答案都来自我们的记录）
怎么安装？
我们【没有】从该仓库取到安装命令（我们的 install 覆盖率只有约 4%）。请看它的 README 或 releases 页。
它适合谁 / 用来做什么？
我们把它归在这些标签下: MCP 服务。标签来自条目自身，不是我们强加的分类。
谁维护它、还在更新吗？
仓库
kent-tokyo/shohei；我们收录于 2026-10-09；最近见到 2026-10-16。这里没有"官方认证"或"质量评级"——我们只记录来源与时间。第三方质量标记
shohei
以下摘录自该仓库的 README（片段） · 在 GitHub 读完整 README →
日本語 | 中文
> **SHOHEI** — **S**ecurity **H**ost **O**bservation & **H**ealthy **E**valuation **I**nstrument
**shohei** v2.5.1 — **Rust infrastructure diagnostics library with 168 MCP tools across 62 modules**. Comprehensive security, OSINT, threat intelligence, and governance coverage. DNSSEC chain validation, DANE/TLSA, modern protocols, IPv6 dual-stack, security headers, technology fingerprinting, CVE lookup, typosquatting detection, and redirect analysis built in. **0 API keys required — all free/open APIs. Use in Rust projects or hand to Claude for autonomous diagnosis.**
Core Diagnostics (v1.0+)
- **MCP server for Claude** — 168 diagnostic tools; ask "Check example.com's TLS certificate, DNSBL status, IPv6 support, technology stack, CVE vulnerabilities, typosquatting variants, and redirect chain" for autonomous analysis
- **TLS certificate inspection** — DANE/TLSA validation (RFC 6698), chain analysis, OCSP responder detection, IPv6 support, OCSP stapling detection, TLS version probing (1.0–1.3), cipher suite enumeration
- **Email security scoring** — MX records, SPF, DKIM, DMARC, BIMI, MTA-STS, TLS-RPT validation with 0–100 compliance score + issue linting
- **IP reputation** — DNSBL checks against Spamhaus, Barracuda, SORBS; reverse DNS (PTR) + forward-confirmed reverse DNS (FCrDNS)
- **CDN/WAF detection** — Identify Cloudflare, AWS CloudFront, Fastly, Akamai, Vercel, Netlify, Imperva via HTTP headers
- **DNS delegation audit** — SOA serial consistency check, lame delegation detection across authoritative NS
- **Domain health report** — Composite scoring across MX, SPF, DMARC, TLS, DNSSEC
- **Security headers audit** — CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy with risk scoring
DNS & Network (v1.0+)
- **DNS propagation checker** — Verify domain consistency across 6 global resolvers (Google, Cloudflare, Quad9, OpenDNS, 1.1.1.1, 8.8.8.8)
- **DNSSEC chain tree** — see every DS, DNSKEY, and trust step from . to your domain; per-zone validation runs in parallel; add -v for key tags and algorithm names
- **Iterative resolution trace** — watch queries travel from root servers to TLD to authoritative NS
- **Latency benchmarking** — Multi-transport timing: System, DoH, DoT, DoQ across multiple rounds
- **Reverse DNS** — PTR lookups for IPv4/IPv6 with FCrDNS validation
- **Subdomain enumeration** — Check common subdomains (www, mail, api, staging, dev, etc.) with DNS resolution + HTTP status + TLS validity
- **Port reachability** — TCP connectivity test for 15 common ports (SSH/22, HTTP/80, HTTPS/443, SMTP/25, MySQL/3306, etc.) with banner grab
- **IPv6 dual-stack checker** — Verify AAAA records, IPv6 TCP/TLS/HTTP reachability, dual-stack completeness
- **DNS amplification potential** — Measure UDP query/response size ratio, DDoS attack risk assessment
- **Wildcard DNS detection** — Probe random subdomains to detect misconfigured *.domain records
- **Traceroute / hop analysis** — Multi-platform hop-by-hop latency measurement (Linux/macOS/Windows)
Advanced Features (v1.0+)
- **DoH, DoT, and DoQ** — DNS-over-HTTPS, DNS-over-TLS, and DNS-over-QUIC built in
- **Zone transfer (AXFR)** — dump an entire zone from an authoritative server; detect critical misconfiguration
- **N-way server comparison** — diff any number of resolvers simultaneously with --compare
- **Multiple record types** — --type a --type aaaa --type mx queries all types concurrently in a single invocation
- **Stdin and file batch mode** — pipe a list of domains or use -f domains.txt
- **JSON output** — pipe-friendly for scripting and automation
- **Watch mode** — auto-refresh at a set interval with --watch
- **Interactive TUI** — browse records, DNSSEC chain, and trace in a single terminal window (--features tui)
- **HTTP protocol detection** — Automatically detect HTTP/1.1, HTTP/2, HTTP/3 version in responses
- **RPKI/ROA validation** — BGP origin authorization checks via Cloudflare API
- **ARC authentication** — Email chain authentication record validation (DNS-level)
- **TLS-RPT checking** — SMTP TLS Reporting Policy record discovery and parsing
Web Reconnaissance & Threat Intelligence (v1.3–1.4)
- **Technology stack fingerprinting** — Identify web server, language runtime, CMS (WordPress/Drupal), frameworks from HTTP headers
> **SHOHEI** — **S**ecurity **H**ost **O**bservation & **H**ealthy **E**valuation **I**nstrument
**shohei** v2.5.1 — **Rust infrastructure diagnostics library with 168 MCP tools across 62 modules**. Comprehensive security, OSINT, threat intelligence, and governance coverage. DNSSEC chain validation, DANE/TLSA, modern protocols, IPv6 dual-stack, security headers, technology fingerprinting, CVE lookup, typosquatting detection, and redirect analysis built in. **0 API keys required — all free/open APIs. Use in Rust projects or hand to Claude for autonomous diagnosis.**
Core Diagnostics (v1.0+)
- **MCP server for Claude** — 168 diagnostic tools; ask "Check example.com's TLS certificate, DNSBL status, IPv6 support, technology stack, CVE vulnerabilities, typosquatting variants, and redirect chain" for autonomous analysis
- **TLS certificate inspection** — DANE/TLSA validation (RFC 6698), chain analysis, OCSP responder detection, IPv6 support, OCSP stapling detection, TLS version probing (1.0–1.3), cipher suite enumeration
- **Email security scoring** — MX records, SPF, DKIM, DMARC, BIMI, MTA-STS, TLS-RPT validation with 0–100 compliance score + issue linting
- **IP reputation** — DNSBL checks against Spamhaus, Barracuda, SORBS; reverse DNS (PTR) + forward-confirmed reverse DNS (FCrDNS)
- **CDN/WAF detection** — Identify Cloudflare, AWS CloudFront, Fastly, Akamai, Vercel, Netlify, Imperva via HTTP headers
- **DNS delegation audit** — SOA serial consistency check, lame delegation detection across authoritative NS
- **Domain health report** — Composite scoring across MX, SPF, DMARC, TLS, DNSSEC
- **Security headers audit** — CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy with risk scoring
DNS & Network (v1.0+)
- **DNS propagation checker** — Verify domain consistency across 6 global resolvers (Google, Cloudflare, Quad9, OpenDNS, 1.1.1.1, 8.8.8.8)
- **DNSSEC chain tree** — see every DS, DNSKEY, and trust step from . to your domain; per-zone validation runs in parallel; add -v for key tags and algorithm names
- **Iterative resolution trace** — watch queries travel from root servers to TLD to authoritative NS
- **Latency benchmarking** — Multi-transport timing: System, DoH, DoT, DoQ across multiple rounds
- **Reverse DNS** — PTR lookups for IPv4/IPv6 with FCrDNS validation
- **Subdomain enumeration** — Check common subdomains (www, mail, api, staging, dev, etc.) with DNS resolution + HTTP status + TLS validity
- **Port reachability** — TCP connectivity test for 15 common ports (SSH/22, HTTP/80, HTTPS/443, SMTP/25, MySQL/3306, etc.) with banner grab
- **IPv6 dual-stack checker** — Verify AAAA records, IPv6 TCP/TLS/HTTP reachability, dual-stack completeness
- **DNS amplification potential** — Measure UDP query/response size ratio, DDoS attack risk assessment
- **Wildcard DNS detection** — Probe random subdomains to detect misconfigured *.domain records
- **Traceroute / hop analysis** — Multi-platform hop-by-hop latency measurement (Linux/macOS/Windows)
Advanced Features (v1.0+)
- **DoH, DoT, and DoQ** — DNS-over-HTTPS, DNS-over-TLS, and DNS-over-QUIC built in
- **Zone transfer (AXFR)** — dump an entire zone from an authoritative server; detect critical misconfiguration
- **N-way server comparison** — diff any number of resolvers simultaneously with --compare
- **Multiple record types** — --type a --type aaaa --type mx queries all types concurrently in a single invocation
- **Stdin and file batch mode** — pipe a list of domains or use -f domains.txt
- **JSON output** — pipe-friendly for scripting and automation
- **Watch mode** — auto-refresh at a set interval with --watch
- **Interactive TUI** — browse records, DNSSEC chain, and trace in a single terminal window (--features tui)
- **HTTP protocol detection** — Automatically detect HTTP/1.1, HTTP/2, HTTP/3 version in responses
- **RPKI/ROA validation** — BGP origin authorization checks via Cloudflare API
- **ARC authentication** — Email chain authentication record validation (DNS-level)
- **TLS-RPT checking** — SMTP TLS Reporting Policy record discovery and parsing
Web Reconnaissance & Threat Intelligence (v1.3–1.4)
- **Technology stack fingerprinting** — Identify web server, language runtime, CMS (WordPress/Drupal), frameworks from HTTP headers
- 来源
- awesome · https://github.com/kent-tokyo/shohei
- 按领域浏览
- MCP 服务
- Traction
- 3 ★
- 收录于
- 昨天
更多MCP 服务
所属领域与标签
每个标签都能点进去看同类的全部条目。数字是当前库里的真实条数。