mcpbeat Sign in

deSEC MCP by usefulapi MCP Server

answering

deSEC MCP by usefulapi is answering right now. Last checked 11 min ago. It exposes 7 tools. Last commit 2 Nov 2026.

Read deSEC domains, DNSSEC keys, zone files and RRsets; create or replace one DNS record set.

Uptime history 22 days of history · worst day 99%
22 days agonow
100.0%
Uptime 24h
91 of 91 checks
7
Tools
read from the server
158 ms
Response time
average over 24h
1
Stars
last commit 2 Nov 2026

What changed 24

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 13 October 2026. No other catalogue keeps this.

2 Nov a tool changed version
31 Oct a tool changed version4 times that day
30 Oct a tool changed version2 times that day
29 Oct a tool changed version2 times that day
28 Oct a tool changed version2 times that day
25 Oct a tool changed version4 times that day
24 Oct a tool changed version3 times that day
23 Oct a tool changed version
22 Oct a tool changed version
20 Oct a tool changed version3 times that day
and 14 more, back to 13 October 2026

What the code does

We read the source, 22 h ago · tools taken from the live server · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Page executes code built at runtime portal/index.html:239
        results.innerHTML = order.map(function (g) {

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 11 min ago.

run in your terminal
claude mcp add desec --transport http https://desec.usefulapi.io/mcp
Settings → Connectors → Add custom connector, then paste this address
https://desec.usefulapi.io/mcp
~/.codex/config.toml
[mcp_servers.desec]
url = "https://desec.usefulapi.io/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "desec": {
      "url": "https://desec.usefulapi.io/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "desec": {
      "type": "http",
      "url": "https://desec.usefulapi.io/mcp"
    }
  }
}

Available tools 7

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

desec
desec_create_rrset
WRITE: create ONE new RRset (a set of DNS records of one type at one name) in a domain. It goes live in DNS immediately and a wrong record can take a site or mail offline. Fails if an RRset with this subname and type already exists (use desec_replace_rrset for that) or if a CNAME would conflict with other records. Never touches the apex NS or DNSSEC records and cannot delete anything. Subject to deSEC's write limits (15/min, 300/day per domain). POST /domains/{name}/rrsets/.
desec_export_zonefile
The whole zone as a plain-text BIND-format zonefile (all RRsets except DNSSEC types). Handy as a backup before changing records. Counts as an expensive deSEC operation (300/min). GET /domains/{name}/zonefile/.
desec_get_domain
One domain with its DNSSEC key material: the DNSKEY and the DS records to publish at the registrar for the chain of trust, plus minimum TTL and publication times. GET /domains/{name}/.
desec_get_rrset
One RRset by subname and type, e.g. the A records of "www" or the MX records of the apex. GET /domains/{name}/rrsets/{subname}/{type}/.
desec_list_domains
List the DNS domains (zones) in this deSEC account, newest first, with creation and last-published times and minimum TTL. DNSSEC keys are omitted here (see desec_get_domain). Use owns_qname to find which of your domains is responsible for a DNS name (for example before adding a record for www.dev.example.net). Up to 500 per page. GET /domains/.
desec_list_rrsets
List the DNS records of a domain as RRsets (all records of one name and type, sharing one TTL), newest first. Filter by type and/or subname. Up to 500 per page. GET /domains/{name}/rrsets/.
desec_replace_rrset
WRITE (overwrites): set ONE RRset to exactly the given TTL and records, creating it if it does not exist and REPLACING all its current records if it does. It goes live in DNS immediately; a wrong value can take a site or mail offline. The previous RRset is read first and returned as `previous` so the change can be undone with another call. An empty record list is refused (this tool never deletes), and the apex NS and DNSSEC records cannot be changed. Subject to deSEC's write limits (15/min, 300/day per domain). PUT /domains/{name}/rrsets/ with a one-element array.

Endpoints

URLTransportStateLatencyChecked
https://desec.usefulapi.io/mcp streamable-http answering 71 ms 11 min ago

Alternatives to deSEC MCP by usefulapi

same job, measured the same way
NS1 Connect MCP by usefulapi
by usefulapi

Read NS1 zones, records, monitors, data feeds and usage; create or update one DNS record.

18 tools answering
DNSimple MCP by usefulapi
by usefulapi

MCP server for DNSimple — domains, DNS zone records, availability, pricing and contacts.

12 tools answering
Asset Panda MCP by usefulapi
by usefulapi

Read and search asset records and columns; create and update records in Asset Panda.

12 tools answering
AssetTiger MCP by usefulapi
by usefulapi

Find assets and stock, read asset events; create assets and check them in or out in AssetTiger.

17 tools answering
Deskpro MCP by usefulapi
by usefulapi

Search tickets, people, organizations and KB articles in Deskpro, and create tickets and replies.

20 tools answering
Order Desk MCP by usefulapi
by usefulapi

Search Order Desk orders and inventory; read order items and shipments; create or update orders.

15 tools answering
Revamp CRM MCP by usefulapi
by usefulapi

Read Revamp CRM contacts, deals, notes and orders; create and update contacts, deals and notes.

19 tools answering
Knack MCP by usefulapi
by usefulapi

Read, create, update and delete records; inspect objects, fields and schema in your Knack database.

9 tools answering

deSEC MCP by usefulapi — questions

Answers built from our own checks of this server.

What can deSEC MCP by usefulapi do?
It exposes 7 tools, read directly from the server on our last check. Among them: desec_create_rrset, desec_export_zonefile, desec_get_domain, desec_get_rrset, desec_list_domains, desec_list_rrsets and 1 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is deSEC MCP by usefulapi working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 158 ms. The bar chart above shows every period we have measured.
How do I connect deSEC MCP by usefulapi?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does deSEC MCP by usefulapi need an API key?
No. deSEC MCP by usefulapi completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 7 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is deSEC MCP by usefulapi?
It answers our handshake in 158 ms on average, which is faster than 81% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.
Is deSEC MCP by usefulapi open source?
The code is open source: it is published under the MIT licence, written in JavaScript, 1 stars on GitHub and 1 open issue. The licence covers the code in the repository, not the hosted service at desec.usefulapi.io, which runs on its operator's own terms.