M
MadaBurns/bv-mcp
DNS, email-authentication, TLS and exposure scanning for AI agents: 81 MCP tools, scored 0–100
在 GitHub 查看 ↗链接已于 2026-11-12 核查 · HTTP 200 · 打开的是厂商自己的官网
安装与配置
远端端点（Claude Desktop / Cursor / Windsurf 共用 mcpServers）
{
"mcpServers": {
"madaburns-bv-mcp": {
"url": "https://dns-mcp.blackveilsecurity.com/mcp"
}
}
}把这段粘进 Claude Desktop / Cursor 的 mcpServers 配置即可。端点来自公开证据，我们没有替你安装或托管它。 官方 Registry 记录：这个端点没有列出任何请求头。这不等于免密 —— 以项目文档为准。
VS Code（.vscode/mcp.json —— 键名是 servers，远程要 type: http）
{
"servers": {
"madaburns-bv-mcp": {
"type": "http",
"url": "https://dns-mcp.blackveilsecurity.com/mcp"
}
}
}VS Code 的配置文件和另外三家不同：顶层键是 <code>servers</code>，远程端点还要写 <code>"type": "http"</code>。复制到 .vscode/mcp.json。
Claude Code（命令行）
claude mcp add --transport http madaburns-bv-mcp https://dns-mcp.blackveilsecurity.com/mcp
Claude Code 不收 JSON 文件，用这条命令直接加。
配置项的键名以你的客户端为准：客户端与 CLI
- ★ 数取值
- 9 ★ · MadaBurns/bv-mcp · 取自 GitHub 搜索 API · （2026-11-13 20:00:50 核对）
- 来源明细
- 从该仓库的 GitHub 页面直接读取 · 条目类型：开源项目
- 收录与活跃
- 收录于 2026-10-29 · 最近见到 2026-11-14 · 共见到 17 次 · 被 1 个来源列出
- 评分构成
- 综合分 103 · 9 ★ · 1 个来源 · repo
常见问题（答案都来自我们的记录）
怎么安装？
我们【没有】从该仓库取到安装命令（我们的 install 覆盖率只有约 4%）。请看它的 README 或 releases 页。
它适合谁 / 用来做什么？
我们把它归在这些标签下: 开源项目。标签来自条目自身，不是我们强加的分类。
谁维护它、还在更新吗？
仓库
MadaBurns/bv-mcp；我们收录于 2026-10-29；最近见到 2026-11-14。这里没有"官方认证"或"质量评级"——我们只记录来源与时间。# BLACKVEIL DNS
以下摘录自该仓库的 README（片段） · 在 GitHub 读完整 README →
Know where you stand.
Source-available DNS & email security scanner for Claude, Cursor, VS Code, and MCP clients across Streamable HTTP, stdio, and legacy HTTP+SSE.
## Try it in 30 seconds
Claude Desktop (one-click install):
Download the Blackveil DNS extension and open it — the current 81-tool surface is available instantly. Verify your download.
Claude Code (one command):
bash
claude mcp add --transport http blackveil-dns https://dns-mcp.blackveilsecurity.com/mcp
Then ask: scan anthropic.com
Smithery (one command):
bash
smithery mcp add MadaBurns/bv-mcp
Verify the endpoint is live:
bash
curl https://dns-mcp.blackveilsecurity.com/health
No install. No API key. One URL for hosted HTTP:
Endpoint https://dns-mcp.blackveilsecurity.com/mcp
Transport Streamable HTTP · JSON-RPC 2.0
Auth None required
Transport support:
Streamable HTTP: POST /mcp, GET /mcp, DELETE /mcp
Native stdio: blackveil-dns-mcp CLI from the blackveil-dns npm package
Legacy HTTP+SSE: GET /mcp/sse bootstrap stream plus POST /mcp/messages?sessionId=...
For Streamable HTTP, clients should retain the Mcp-Session-Id returned by initialize and send it on every subsequent request, including notifications. Send the negotiated version in MCP-Protocol-Version; unsupported values are rejected with HTTP 400, while expired or terminated sessions return 404 and require a fresh initialize.
## What you get
81 MCP tools with 19 scoring categories — SPF, DMARC, DKIM, DNSSEC, SSL/TLS, MTA-STS, NS, CAA, MX, BIMI, TLS-RPT, subdomain takeover, HTTP security headers, DANE, SVCB/HTTPS, DANE-HTTPS, subdomailing, reverse DNS (PTR/FCrDNS), and DNSKEY strength
Maturity staging — Stage 0-4 classification (Unprotected to Hardened) with score-based capping to prevent inflated labels
Trust surface analysis — detects shared SaaS senders in SPF, both cataloged platforms (Google, M365, SendGrid) and uncataloged hosts identifiable by their spf delegation label, then cross-references DMARC enforcement to determine real exposure
Guided remediation — generate (artifact=fixplan) produces provider-aware prioritized actions; its record artifacts (spfrecord, dmarcrecord, dkimconfig, mtastspolicy, rolloutplan) output ready-to-publish records; validatefix confirms whether a fix was applied successfully
Supply chain mapping — mapsupplychain correlates DNS signals to build a full third-party dependency graph with trust levels and risk signals
Attack path simulation — simulateattackpaths enumerates specific paths (spoofing, takeover, hijack) with severity, steps, and mitigations
Compliance mapping — mapcompliance maps scan findings to NIST 800-177, PCI DSS 4.0, SOC 2, and CIS Controls
Self-tuning scoring — adaptive weights adjust category importance based on patterns seen across scans via Durable Object telemetry
Per-tier analytics — usage tracking by auth tier with operator API for tier summaries, key-level usage, and daily digests
Read-only — checks never modify a target and need no authorization from it. Most are passive lookups over public Cloudflare DNS-over-HTTPS; checkauthoritativednsinfra and checkrootserverset query authoritative and root nameservers directly over TCP/53, and for authenticated callers checkauthoritativednsinfra also tests whether a domain's nameservers refuse a zone transfer (no zone data is retrieved)
Source-available DNS & email security scanner for Claude, Cursor, VS Code, and MCP clients across Streamable HTTP, stdio, and legacy HTTP+SSE.
## Try it in 30 seconds
Claude Desktop (one-click install):
Download the Blackveil DNS extension and open it — the current 81-tool surface is available instantly. Verify your download.
Claude Code (one command):
bash
claude mcp add --transport http blackveil-dns https://dns-mcp.blackveilsecurity.com/mcp
Then ask: scan anthropic.com
Smithery (one command):
bash
smithery mcp add MadaBurns/bv-mcp
Verify the endpoint is live:
bash
curl https://dns-mcp.blackveilsecurity.com/health
No install. No API key. One URL for hosted HTTP:
Endpoint https://dns-mcp.blackveilsecurity.com/mcp
Transport Streamable HTTP · JSON-RPC 2.0
Auth None required
Transport support:
Streamable HTTP: POST /mcp, GET /mcp, DELETE /mcp
Native stdio: blackveil-dns-mcp CLI from the blackveil-dns npm package
Legacy HTTP+SSE: GET /mcp/sse bootstrap stream plus POST /mcp/messages?sessionId=...
For Streamable HTTP, clients should retain the Mcp-Session-Id returned by initialize and send it on every subsequent request, including notifications. Send the negotiated version in MCP-Protocol-Version; unsupported values are rejected with HTTP 400, while expired or terminated sessions return 404 and require a fresh initialize.
## What you get
81 MCP tools with 19 scoring categories — SPF, DMARC, DKIM, DNSSEC, SSL/TLS, MTA-STS, NS, CAA, MX, BIMI, TLS-RPT, subdomain takeover, HTTP security headers, DANE, SVCB/HTTPS, DANE-HTTPS, subdomailing, reverse DNS (PTR/FCrDNS), and DNSKEY strength
Maturity staging — Stage 0-4 classification (Unprotected to Hardened) with score-based capping to prevent inflated labels
Trust surface analysis — detects shared SaaS senders in SPF, both cataloged platforms (Google, M365, SendGrid) and uncataloged hosts identifiable by their spf delegation label, then cross-references DMARC enforcement to determine real exposure
Guided remediation — generate (artifact=fixplan) produces provider-aware prioritized actions; its record artifacts (spfrecord, dmarcrecord, dkimconfig, mtastspolicy, rolloutplan) output ready-to-publish records; validatefix confirms whether a fix was applied successfully
Supply chain mapping — mapsupplychain correlates DNS signals to build a full third-party dependency graph with trust levels and risk signals
Attack path simulation — simulateattackpaths enumerates specific paths (spoofing, takeover, hijack) with severity, steps, and mitigations
Compliance mapping — mapcompliance maps scan findings to NIST 800-177, PCI DSS 4.0, SOC 2, and CIS Controls
Self-tuning scoring — adaptive weights adjust category importance based on patterns seen across scans via Durable Object telemetry
Per-tier analytics — usage tracking by auth tier with operator API for tier summaries, key-level usage, and daily digests
Read-only — checks never modify a target and need no authorization from it. Most are passive lookups over public Cloudflare DNS-over-HTTPS; checkauthoritativednsinfra and checkrootserverset query authoritative and root nameservers directly over TCP/53, and for authenticated callers checkauthoritativednsinfra also tests whether a domain's nameservers refuse a zone transfer (no zone data is retrieved)
收录徽章（可选）
想把收录标记放进 README 就复制这行，可选，不影响收录。
[](https://anclum.com/zh/s/madaburns-bv-mcp/)
- 来源
- github · https://github.com/MadaBurns/bv-mcp
- 按领域浏览
- 开源项目
- Traction
- 9 ★
- 收录于
- 今天
同类推荐
所属领域与标签
每个标签都能点进去看同类的全部条目。数字是当前库里的真实条数。