DnsGuard MCP Server

by workers-mike-tusa-dnsguard Your server? Claim it

answering

DnsGuard is answering right now. Last checked 6 min ago. It exposes 1 tools.

Check a domain's email authentication: SPF, DKIM, DMARC, BIMI, MX, MTA-STS, TLS-RPT. Score + fixes.

Uptime history 4 days of history

4 days agonow

100.0%

Uptime 24h

92 of 92 checks

Tools

read from the server

59 ms

Response time

average over 24h

open, no key

Access

streamable-http

Nothing serious here today

Today is the operative word: we check DnsGuard every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 6 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add dnsguard --transport http https://dnsguard.mike-tusa.workers.dev/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "dnsguard": {
      "url": "https://dnsguard.mike-tusa.workers.dev/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.dnsguard]
url = "https://dnsguard.mike-tusa.workers.dev/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "dnsguard": {
      "url": "https://dnsguard.mike-tusa.workers.dev/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "dnsguard": {
      "url": "https://dnsguard.mike-tusa.workers.dev/mcp"
    }
  }
}

Available tools 1

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

domain

check_domain

Audit the email-authentication DNS records of a domain. Returns a 0–100 score and A–F grade (MX 10, SPF 25, DMARC 30, DKIM 25, BIMI 10, plus up to 5 bonus points for MTA-STS and TLS-RPT, capped at 100), each check's status, published record, findings and recommended fixes, and a link to the full report. Read-only: it only queries public DNS and the domain's public MTA-STS policy file. Same engine and scoring as the DnsGuard JSON API (GET /api/check).

Endpoints

URL	Transport	State	Latency	Checked
https://dnsguard.mike-tusa.workers.dev/mcp	streamable-http	answering	43 ms	6 min ago

Alternatives to DnsGuard

same job, measured the same way

Palisade

by palisade

Monitor and manage email authentication (SPF, DKIM, DMARC, MTA-STS, BIMI) for your domains.

27 059 installs/wk answering

Email Deliverability

by inboxguard

Scan and fix a domain's email deliverability (SPF, DKIM, DMARC, MTA-STS, BIMI, DNS blocklists).

28 tools answering

Deliverability Doctor

by integrity-os

Check if a domain can be email-spoofed: SPF, DMARC, DKIM, MX graded from public DNS. Authless.

2 tools answering

Domain Security

by ortamarco

Audit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys.

178 installs/wk local only

MX Verdict

by mxverdict

Free, read-only email and DNS checks: SPF, DKIM, DMARC, MX, DNS records, blocklists, domain health.

7 tools answering

Domainposture

by domainposture

Remote MCP server: 19 domain-hygiene and email-auth tools (DNS, SPF, DMARC, DKIM, TLS).

22 tools answering

scan.mx Email Diagnostics

by scan

Check email deliverability for a domain: MX, SPF, DKIM, DMARC, blacklists. Graded, no key.

6 tools answering

Mail7 Email Validation

by mail7

Verify email addresses, clean lists, and audit a domain SPF, DKIM, DMARC and MX setup.

41 installs/wk local only

DnsGuard — questions

Answers built from our own checks of this server.

What can DnsGuard do?

It exposes 1 tools, read directly from the server on our last check. Among them: check_domain. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is DnsGuard working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 59 ms. The bar chart above shows every period we have measured.

How do I connect DnsGuard?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does DnsGuard need an API key?

No. DnsGuard completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 1 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is DnsGuard?

It answers our handshake in 59 ms on average, which is faster than 93% of all working MCP servers we measure. That puts it in the quick quarter of the ecosystem. The comparison comes from our own checks across the whole registry, every 15 minutes.