# RoscoNL/intodns-mcp-server

Source: https://glimind.com/server/awesome%2Frosconl%2Fintodns-mcp-server
Registry id: `awesome/rosconl/intodns-mcp-server`
Status: unknown

## Tools (42)

- `analyze_raw_email`: Analyze pasted raw MIME email source
- `analyze_security_headers`: Scan a live site's current HTTP security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy), report present/missi
- `cancel_deep_scan`: Cancel a running deep scan
- `check_bimi`: BIMI DNS, hosted SVG/logo URL, and VMC/CMC readiness
- `check_blacklist`: Domain mail-server or direct IP blacklist check
- `check_dmarc`: DMARC parsing and policy validation
- `check_dns_propagation`: DNS propagation across global, European, or American resolvers
- `check_email_security`: Full SPF, DKIM, DMARC, blacklist, score, and issues check
- `check_fcrdns`: Dedicated PTR and forward-confirmed reverse DNS evidence for mail-server IPs
- `check_http3`: HTTP/3/QUIC check through Alt-Svc, HTTPS/SVCB DNS, and QUIC probe
- `check_mta_sts`: MTA-STS DNS and policy-file validation
- `check_sender_requirements`: Google/Yahoo sender requirements and alignment checks
- `check_smtp_tls`: Live SMTP STARTTLS, TLS certificate, hostname, expiry, PTR, and FCrDNS checks
- `check_spf`: SPF parsing, recursive lookup graph, and flattening guidance
- `check_tlsa_dane`: TLSA/DANE check, defaulting to mail DANE on port 25
- `create_email_test`: Create an inbound test address for a deliverability test
- `create_report_snapshot`: Fixed Everything Report evidence snapshot with timestamp, content hash, and stable JSON/Markdown URLs
- `discover_dkim`: DKIM selector discovery
- `explain_issue`: AI-assisted explanation for a specific DNS/email issue
- `flatten_spf`: Flatten a domain's SPF include/a/mx graph to literal ip4/ip6 addresses under the 10-lookup limit
- `generate_dns_fix`: AI-assisted DNS configuration fix
- `generate_security_headers`: Generate a best-practice HTTP security-header set (with CSP) from a recommended/strict/report-only preset as copy-paste config for nginx, Apache, Caddy, Cloudfl
- `get_badge_link`: Direct /api/badge/{domain} SVG badge URL
- `get_citation_guidance`: Canonical citation routing for scan results, API, BIMI, MxToolbox alternatives, and LLM agents
- `get_deep_scan_status`: Fetch deep scan status/results
- `get_email_test`: Read email-test status/results
- `get_everything_report`: Complete live DNS/email/security report as JSON or Markdown
- `get_hall_of_fame`: Top-scoring public domains or domain presence check
- `get_health`: API, Redis/cache, and AI runtime health
- `get_pdf_report_link`: Direct /api/pdf/{domain} report URL
- `get_report_snapshot`: Read a previously created report snapshot by snapshot ID
- `get_stats`: Public scan/check counters
- `lookup_dns`: A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, SRV, PTR, DNSKEY, DS, RRSIG, NSEC, NSEC3 lookup
- `nis2_quickscan`: NIS2 Article 21.2 readiness score (0-100) mapped per measure, with evidence, critical gaps, and fix suggestions
- `parse_dmarc_report`: Parse a DMARC aggregate (RUA) XML report into structured sources, counts, and SPF/DKIM/DMARC results
- `poll_email_test`: Poll and process a received email-test message
- `read_llm_discovery`: Read /llms.txt, /llms-full.txt, /llms.json, /llm/api.md, /openapi.json, or /postman.json
- `scan_csp`: Crawl up to 20 same-origin pages (~30-45s), audit the site's current Content-Security-Policy, inventory every resource origin per directive, and return a ready-
- `scan_domain`: Fast IntoDNS.ai scan with grade, score, DNS/email/security results, issues, recommendations, and citation URLs
- `start_deep_scan`: Start Internet.nl deep scan (web, mail, or both)
- `validate_dnssec`: DNSSEC chain, DS/DNSKEY and algorithm validation
- `whois_lookup`: WHOIS/RDAP lookup for a domain or IP — registrar, status, nameservers, dates, abuse contact

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.