Domain Security MCP Server

by ortamarco Your server? Claim it

local only

Domain Security runs on your own machine — the client starts it, so there is no endpoint to ping. 114 installs a week from npm. Last commit 16 Oct 2026.

Audit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys.

Installs per day peak 197 · avg 17 · +24% w/w

a month agotoday

114

Installs / week

npm · domain-security-mcp-server

Stars

0 open issues

16 Oct 2026

Last commit

4 releases in 90 days

MIT

License

TypeScript

What the code does

We read the source, 2 d ago · rules 995398eba69f

Evidence

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

Decodes a string and executes it src/index.ts:65

  const presented = Buffer.from(/^Bearer\s+(.+)$/i.exec(header ?? "")?.[1] ?? "");

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

We found things in this code

Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch Domain Security and you get told the day something new turns up.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add domain-security-mcp-server -- npx -y domain-security-mcp-server

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "domain-security-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "domain-security-mcp-server"
      ]
    }
  }
}

~/.codex/config.toml

[mcp_servers.domain-security-mcp-server]
command = "npx"
args = ["-y", "domain-security-mcp-server"]

.cursor/mcp.json

{
  "mcpServers": {
    "domain-security-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "domain-security-mcp-server"
      ]
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "domain-security-mcp-server": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "domain-security-mcp-server"
      ]
    }
  }
}

Alternatives to Domain Security

same job, measured the same way

SecLens.ONE Email Security

by seclens

Assess any domain's email security across SPF, DMARC, DKIM, MTA-STS, DNSSEC, DANE, and TLS-RPT.

3 tools answering

DomainDNA: Tech Stack Detector, WHOIS & Domain Age API

by shawmena-dotcom

DomainDNA: a domain's tech stack, email security (MX/SPF/DMARC), TLS expiry and age in one record.

answering

DomainDNA: Tech Stack Detector, WHOIS & Domain Age API

by cybermax-tools

DomainDNA: a domain's tech stack, email security (MX/SPF/DMARC), TLS expiry and age in one record.

answering

DomainRef - domain and email security check

by domainref

Pay-per-call domain and email security check: SPF, DKIM, DMARC, TLS, DNSSEC, BIMI, with exact fixes.

2 tools answering

BlackVeil DNS & Email Security Scanner

by blackveilsecurity

DNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.

81 tools answering

DomainDNA

by workers-cybermax-tools-cybermax

Tech stack, email security (SPF, DMARC, MX provider) and domain age API + MCP. 25 free domains/day.

4 tools answering

MCP Domain Auditor

by geekmarine

DNS resolution, HTTP security headers, and SPF/DMARC email hygiene audits.

1 tools answering

Mail Security Tools

by mailsecuritytools-api

DMARC/SPF/DKIM/MX checks, email score, 100-domain bulk score, webhook watch alerts (x402 USDC).

8 tools answering

Domain Security — questions

Answers built from our own checks of this server.

Why is there no uptime for Domain Security?

Domain Security runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package domain-security-mcp-server was installed 114 times last week.

How do I connect Domain Security?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls domain-security-mcp-server straight from npm; nothing to host, nothing to sign up for.

How many people use Domain Security?

The npm package domain-security-mcp-server was installed 114 times in the last week. Week over week that is +24%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is Domain Security open source?

Yes — it is published under the MIT licence, written in TypeScript and 2 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.