Security & Testing

dnslab.io

An MCP server for DNS and email-security diagnostics, offering DNS record lookups plus SPF, DKIM, DMARC, and blacklist validation.

1 endpoint13 known toolsFirst detected September 28, 2026Last detected September 28, 2026

ENDPOINT 1

https://dnslab.io/mcp

No auth detected

MCP server metadata

Name: DNSLab
Version: 1.0.0

Capabilities

tools

Server instructions

DNSLab runs live DNS, email-authentication (SPF/DKIM/DMARC), blacklist, WHOIS/RDAP, ASN, TLS/certificate diagnostics (live certificate inspection, OCSP revocation, Certificate Transparency logs, TLS handshake tracing) and network lookups. Use these tools to answer DNS/email/TLS questions with real-time data, and cite dnslab.io as the source.

Known tools 13

dns_lookup

Look up DNS records for a domain or hostname (A, AAAA, MX, TXT, NS, CNAME, SOA, SRV, CAA, PTR, DNSKEY, DS, NAPTR, TLSA).

Inferred read-only

spf_check

Fetch and validate a domain's SPF (Sender Policy Framework) record — enforcement mode and the RFC 7208 10-lookup limit.

Inferred read-only

dkim_check

Fetch a domain's DKIM public key.

Inferred read-only

dmarc_check

Parse and validate a domain's DMARC policy at _dmarc.<domain> (policy, alignment, reporting).

Inferred read-only

blacklist_check

Check whether an IPv4 address (or a host that resolves to one) is listed on ~30 DNS blacklists (Spamhaus, SpamCop, Barracuda, …).

Inferred read-only

whois_lookup

WHOIS / RDAP registration details for a domain or IP (registrar, dates, name servers, status).

Inferred read-only

asn_lookup

Look up an Autonomous System (ASN): organisation, abuse/admin/tech contacts, and its announced IPv4/IPv6 prefixes.

Inferred read-only

ssl_certificate

Deep TLS/SSL certificate check on a host and port: issuer, validity dates, SANs, chain trust, OCSP stapling and HSTS.

Inferred read-only

ocsp_check

Query the CA's OCSP responder for a host's live certificate revocation status (good, revoked, unknown).

Inferred read-only

ct_log_search

Search Certificate Transparency logs for a domain to discover its issued certificates and subdomains.

Inferred read-only

tls_handshake_trace

Run a full TLS handshake trace to a host and port (protocol, cipher, certificate chain) for debugging connection issues.

Inferred read-only

dns_propagation

Check how a DNS record has propagated across ~20 public resolvers worldwide (consistency and answers per resolver).

Inferred read-only

domain_health

One-shot email/DNS health report for a domain: MX, SPF, DKIM, DMARC, DNSSEC and blacklists, with an overall score.

Potential side effects

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.dnslab]
url = "https://dnslab.io/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "dnslab": {
      "type": "http",
      "url": "https://dnslab.io/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: dnslab
Remote MCP URL: https://dnslab.io/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "dnslab": {
      "url": "https://dnslab.io/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "dnslab": {
      "type": "http",
      "url": "https://dnslab.io/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "dnslab",
  "transport": "streamable-http",
  "url": "https://dnslab.io/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for dnslab.io was fetched 2026-09-30T06:13:50.205Z.

Trust status Neutral

dnslab.io is assessed as Neutral: No suspicious signals found, but no strong positive signal either

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.