Front Sentinel MCP Server

by frontsentinel Your server? Claim it

answering

Front Sentinel is answering right now. Last checked 2 min ago. It exposes 4 tools.

Read-only security checks for dApp domains: registry lock, DNSSEC, CAA, SRI, SEAL DNS controls

Uptime history 48 hours of history

48 hours agonow

100.0%

Uptime 24h

92 of 92 checks

Tools

read from the server

87 ms

Response time

average over 24h

open, no key

Access

streamable-http

Nothing serious here today

Today is the operative word: we check Front Sentinel every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 2 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add domain-security --transport http https://frontsentinel.com/mcp

Settings → Connectors → Add custom connector, then paste this address

https://frontsentinel.com/mcp

~/.codex/config.toml

[mcp_servers.domain-security]
url = "https://frontsentinel.com/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "domain-security": {
      "url": "https://frontsentinel.com/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "domain-security": {
      "type": "http",
      "url": "https://frontsentinel.com/mcp"
    }
  }
}

Available tools 4

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

registry

check_registry_lock

Reads the domain's EPP status codes from RDAP and tells whether registry lock (serverUpdateProhibited + serverTransferProhibited) is on, partly on or off, and which registrar-level locks are set.

scan

scan_domain

Scores how well a dApp or website domain is protected against hijacking: registrar transfer/update locks, registry lock, DNSSEC, CAA, expiry, nameserver consistency across resolvers, SRI on third-party scripts and the Content-Security-Policy header. Returns a 0-100 score, each check with pass/fail/unknown and advice. Results are cached for an hour.

seal

check_seal_dns_registrar

Goes through the 16 controls of the SEAL Security Frameworks certification for DNS & Registrar and marks what public data shows for each: ok, partial, gap, not visible from outside, or a process control the team has to document itself. Includes DNSSEC, CAA, SPF/DMARC/MTA-STS, locks, expiry and security.txt.

sri

check_sri

Loads a public page and lists every script, stylesheet and preload it pulls in. For third-party files, checks whether an integrity= hash is present and matches, and returns a ready sha384 hash for files that have none.

Endpoints

URL	Transport	State	Latency	Checked
https://frontsentinel.com/mcp	streamable-http	answering	90 ms	2 min ago

Alternatives to Front Sentinel

same job, measured the same way

mcp-armor

by studiomeyer

Security sidecar for MCP servers: 11 read-only control-plane tools for prompt-injection checks.

local only

Recon Kit MCP

by nan786521

Read-only network & security recon tools (DNS, TLS, headers, CORS) for AI agents, each graded.

437 installs/wk local only

Tier1 IT Assessment

by tier1-mcp

Read-only IT Health Check, domain security, recommendations, pricing, and draft enquiries.

8 tools answering

Penthera

by danoszz

Offline, rule-based security checks for your repo, dependencies, AI agent config and local app.

841 installs/wk local only

Tanod Security

by tanod

Contract and agent-package scans, phishing URL and OFAC checks, domain and header checks.

27 tools answering

COLA Insight

by ge3m0r

Read-only Social Security COLA data, calculations, history, and official source links.

4 tools answering

Domain Lab

by domainlab

Track domain expiry, DNS, SSL and email security across registrars, and explain what changed.

answering

MCP Server for OSCAL

by dfkunstler

AI agent tools for Open Security Controls Assessment Language (OSCAL)

1 500 installs/wk local only

Front Sentinel — questions

Answers built from our own checks of this server.

What can Front Sentinel do?

It exposes 4 tools, read directly from the server on our last check. Among them: check_registry_lock, check_seal_dns_registrar, check_sri, scan_domain. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is Front Sentinel working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 87 ms. The bar chart above shows every period we have measured.

How do I connect Front Sentinel?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does Front Sentinel need an API key?

No. Front Sentinel completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 4 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is Front Sentinel?

It answers our handshake in 87 ms on average, which is faster than 97% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.