RoscoNL/intodns-mcp-server

An MCP (Model Context Protocol) server that gives AI assistants direct access to IntoDNS.ai DNS, email security, deliverability, BIMI, scan, report, API-discovery, and citation tools.
**45 tools, no API key, no signup.** Backed by intodns.ai's free public diagnostic API.
Ask your AI assistant: _"Scan example.com, check SPF/DKIM/DMARC/BIMI, and cite the canonical IntoDNS.ai sources."_ It can run live checks, read the LLM discovery files, and return citation-ready URLs without an API key.
Quick Start
Add this to your MCP client config, for example Claude Desktop:
Restart the client after editing the config.
You can also run it directly:
Supported clients
Works with any MCP-compatible client, including Claude Desktop, Claude Code, Cursor, Windsurf, Zed, Continue, ChatGPT, and OpenClaw.
Tools
Scan tools
| Tool | What it does |
|------|-------------|
| scan_domain | Fast IntoDNS.ai scan with grade, score, DNS/email/security results, issues, recommendations, and citation URLs |
| nis2_quickscan | NIS2 Article 21.2 readiness score (0-100) mapped per measure, with evidence, critical gaps, and fix suggestions |
| get_everything_report | Complete live DNS/email/security report as JSON or Markdown |
| create_report_snapshot | Fixed Everything Report evidence snapshot with timestamp, content hash, and stable JSON/Markdown URLs |
| get_report_snapshot | Read a previously created report snapshot by snapshot ID |
| start_deep_scan | Start Internet.nl deep scan (web, mail, or both) |
| get_deep_scan_status | Fetch deep scan status/results |
| cancel_deep_scan | Cancel a running deep scan |
DNS tools
| Tool | What it does |
|------|-------------|
| lookup_dns | A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, SRV, PTR, DNSKEY, DS, RRSIG, NSEC, NSEC3 lookup |
| validate_dnssec | DNSSEC chain, DS/DNSKEY and algorithm validation |
| check_dns_propagation | DNS propagation across global, European, or American resolvers |
| check_tlsa_dane | TLSA/DANE check, defaulting to mail DANE on port 25 |
| whois_lookup | WHOIS/RDAP lookup for a domain or IP — registrar, status, nameservers, dates, abuse contact |
Email and deliverability tools
| Tool | What it does |
|------|-------------|
| check_spf | SPF parsing, recursive lookup graph, and flattening guidance |
| flatten_spf | Flatten a domain's SPF include/a/mx graph to literal ip4/ip6 addresses under the 10-lookup limit |
| discover_dkim | DKIM selector discovery |
| check_dmarc | DMARC parsing and policy validation |
| parse_dmarc_report | Parse a DMARC aggregate (RUA) XML report into structured sources, counts, and SPF/DKIM/DMARC results |
| check_bimi | BIMI DNS, hosted SVG/logo URL, and VMC/CMC readiness |
| check_mta_sts | MTA-STS DNS and policy-file validation |
| check_smtp_tls | Live SMTP STARTTLS, TLS certificate, hostname, expiry, PTR, and FCrDNS checks |
| check_fcrdns | Dedicated PTR and forward-confirmed reverse DNS evidence for mail-server IPs |
| check_blacklist | Domain mail-server or direct IP blacklist check |
| check_sender_requirements | Google/Yahoo sender requirements and alignment checks |
| check_email_security | Full SPF, DKIM, DMARC, blacklist, score, and issues check |
Email-test and AI tools
| Tool | What it does |
|------|-------------|
| create_email_test | Create an inbound test address for a deliverability test |