INDIVIDUAL MCP TOOL

ocsp_check

Query the CA's OCSP responder for a host's live certificate revocation status (good, revoked, unknown).

dnslab.ionone authenticationAvailability not checked

LIVE ENDPOINT

https://dnslab.io/mcp

No auth detected

Connect to this endpoint to inspect the live schema for ocsp_check and invoke it with your own arguments.

{}

Inferred read-only · medium confidence · heuristic, not a guarantee.

No write-capable action terms were found; this is not proof that invocation has no side effects.

CONNECT WITH APPROVAL

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.dnslab]
url = "https://dnslab.io/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "dnslab": {
      "type": "http",
      "url": "https://dnslab.io/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: dnslab
Remote MCP URL: https://dnslab.io/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "dnslab": {
      "url": "https://dnslab.io/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "dnslab": {
      "type": "http",
      "url": "https://dnslab.io/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "dnslab",
  "transport": "streamable-http",
  "url": "https://dnslab.io/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

dns_lookup — Look up DNS records for a domain or hostname (A, AAAA, MX, TXT, NS, CNAME, SOA, SRV, CAA, PTR, DNSKEY, DS, NAPTR, TLSA).
spf_check — Fetch and validate a domain's SPF (Sender Policy Framework) record — enforcement mode and the RFC 7208 10-lookup limit.
dkim_check — Fetch a domain's DKIM public key.
dmarc_check — Parse and validate a domain's DMARC policy at _dmarc.<domain> (policy, alignment, reporting).
blacklist_check — Check whether an IPv4 address (or a host that resolves to one) is listed on ~30 DNS blacklists (Spamhaus, SpamCop, Barracuda, …).
whois_lookup — WHOIS / RDAP registration details for a domain or IP (registrar, dates, name servers, status).
asn_lookup — Look up an Autonomous System (ASN): organisation, abuse/admin/tech contacts, and its announced IPv4/IPv6 prefixes.
ssl_certificate — Deep TLS/SSL certificate check on a host and port: issuer, validity dates, SANs, chain trust, OCSP stapling and HSTS.