INDIVIDUAL MCP TOOL

audit_spf_includes

Audit a domain's SPF supply chain: walks every include and redirect it delegates to, and reports who can transitively send as it.

dnsdoctor.devnone authenticationAvailability not checked

LIVE ENDPOINT

https://dnsdoctor.dev/mcp

No auth detected

Connect to this endpoint to inspect the live schema for audit_spf_includes and invoke it with your own arguments.

{}

Potential side effects detected · medium confidence · heuristic, not a guarantee.

CONNECT WITH APPROVAL

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.dns-doctor]
url = "https://dnsdoctor.dev/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "dns-doctor": {
      "type": "http",
      "url": "https://dnsdoctor.dev/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: dns-doctor
Remote MCP URL: https://dnsdoctor.dev/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "dns-doctor": {
      "url": "https://dnsdoctor.dev/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "dns-doctor": {
      "type": "http",
      "url": "https://dnsdoctor.dev/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "dns-doctor",
  "transport": "streamable-http",
  "url": "https://dnsdoctor.dev/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

scan_domain — Force a fresh scan of a domain and return its full report: seven deterministic checks — SPF, DKIM, DMARC, MX, DNS hardening, domain/TLS expiry and blacklist listing — each with a status (pass/warn/fail/info/temperror), the observed record, and a fixengine-generated fix_record where one exists.
get_report — Return the stored report for a domain, scanning once only if none exists yet — the cheap read, and the right default for a first look.
build_dmarc_upgrade — Return a validated DMARC enforcement-upgrade record for a domain.
start_monitoring_signup — Return a sign-up link to give to the HUMAN who owns a domain, so they can start monitoring it themselves.
count_spf_lookups — Validate an SPF record and count what it costs.
validate_dmarc_record — Validate a pasted DMARC record: parsed tags, level'd findings, and whether it is valid.
generate_dmarc_record — Build a DMARC record from scratch for a domain that has none, using a validating engine — never compose one yourself.
check_dkim_selector — Check ONE specific DKIM selector on a domain — the exact selector the sending platform uses (e.