Security & Testing

quietfailures.com

Provides security auditing tools for email authentication and subdomain takeover detection, along with access to Quiet Failures base rate data.

1 endpoint6 known toolsFirst detected August 17, 2026Last detected August 17, 2026

ENDPOINT 1

https://mcp.quietfailures.com/mcp

No auth detected

MCP server metadata

Name: quiet-failures
Version: 1.4.8

Capabilities

tools.listChanged

Server instructions

Quiet Failures publishes open security base rates — the share of real-world domains, companies, networks, packages and certificates failing everyday security controls (DMARC, SPF, DNSSEC, certificate hygiene, subdomain takeover, and more), measured weekly, licensed CC BY 4.0. Two tool families: - Dataset tools (list_base_rates, find_base_rate, get_base_rate): population-level figures with methodology and limits. Use these to answer "how common is X?" and cite the source URL provided. - Live check tools (check_email_auth, check_subdomain_takeover, check_whois): scan one user's actual domain(s) right now. Use these when the user asks about THEIR domain. Rate-limited; results come from the DomainOps free tools. The natural pairing: quote the base rate, then offer to check the user's own domain against it.

Known tools 6

list_base_rates

Catalog of all published Quiet Failures base rates: metric id, the global question, the current global figure, sample size, severity, and every published segment slug (valid `segment` values for get_base_rate).

Inferred read-only

find_base_rate

Search the Quiet Failures base rates by keyword (e.

Inferred read-only

get_base_rate

Full detail for one Quiet Failures base rate segment: the figure with confidence interval, how it is measured, why it matters, the limits of the measurement, the recent time series, and the canonical source URL to cite.

Inferred read-only

check_email_auth

Live SPF, DKIM and DMARC audit of up to 50 domains the user owns or asks about.

Inferred read-only

check_subdomain_takeover

Live scan of one domain: enumerate its subdomains (CT logs + DNS), then test each for dangling references on 13 cloud providers.

Inferred read-only

check_whois

Live WHOIS lookup for up to 100 domains: expiry date, registrar, nameservers.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.quiet-failures]
url = "https://mcp.quietfailures.com/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "quiet-failures": {
      "type": "http",
      "url": "https://mcp.quietfailures.com/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: quiet-failures
Remote MCP URL: https://mcp.quietfailures.com/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "quiet-failures": {
      "url": "https://mcp.quietfailures.com/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "quiet-failures": {
      "type": "http",
      "url": "https://mcp.quietfailures.com/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "quiet-failures",
  "transport": "streamable-http",
  "url": "https://mcp.quietfailures.com/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for quietfailures.com was fetched 2026-08-21T14:38:04.804Z.

Trust status Neutral

quietfailures.com is assessed as Neutral: No suspicious signals found, but no strong positive signal either

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.