# Dechonet MCP server

Source: https://glimind.com/server/mcp-registry%2Fcom.dechonet%2Fmcp
Registry id: `mcp-registry/com.dechonet/mcp`
Status: live (checked 2026-10-27T02:39:51.231Z)

## Verdict

Dechonet MCP server answered 99.97% of Glimind's liveness checks over 30 days, better than 40% of MCP servers, with 1256 ms median handshake and 1 outage in 90 days. Its agent-readiness grade is A (97/100) across 30 tools, costing an agent about 7,712 tokens to load. Checked every few minutes; no tool is ever called.

## Measurements (30 days)

| Metric | Value | Better than |
|---|---|---|
| Uptime, 30 days | 99.97% | 40% of MCP servers |
| Median handshake latency | 1256 ms | 13% of MCP servers |
| p95 handshake latency | 3440 ms | — |
| Checks in 30 days | 4,934 | — |
| Outages, 90 days | 1 | — |
| Median recovery | 8 min | — |
| Agent-readiness score | 97/100 (A) | 91% of MCP servers |
| Tools | 30 | — |
| Tool-list size for an agent | ~7,712 tokens | 33% of MCP servers |
| Days observed | 29 | — |

## Install

```json
{
  "mcpServers": {
    "dechonet-mcp-server": {
      "type": "http",
      "url": "https://dechonet.com/mcp"
    }
  }
}
```

Claude Code:

```sh
claude mcp add --transport http dechonet-mcp-server https://dechonet.com/mcp
```

## Tools (30)

- `asn_lookup`: Look up Autonomous System (ASN) / BGP information for an IP address or AS number: the network operator, announced prefixes, abuse contact, and a classification 
- `check_before_action`: Check the page an agent is about to log in, pay, download from or submit to: whether the address impersonates a brand, how new the domain is, whether DechoNet o
- `dns_lookup`: Query DNS records (A, AAAA, MX, TXT, NS, SOA, CAA) for a domain and validate email-related records, including DNSSEC presence and SPF/DMARC syntax, returning se
- `dns_propagation`: Query one DNS record across 8+ global public resolvers (Google, Cloudflare, Quad9, OpenDNS, and more) simultaneously and report which resolvers return stale ver
- `domain_changes`: Report what has changed for a domain over time — the security regressions and drift that DechoNet's daily monitoring has recorded across every watch on the doma
- `domain_history`: Show how a domain's (or IPv4 address's) infrastructure has changed over time from DechoNet's stored observations: nameservers, A/AAAA, MX, CNAME, certificate is
- `email_auth`: Assess a domain's email authentication and deliverability posture: MX records, SPF, DMARC, DKIM (probes 15 common selectors), BIMI, MTA-STS, TLS-RPT, and DANE, 
- `email_header_analysis`: Parse raw email headers to reconstruct the delivery path (each Received hop in order), extract SPF/DKIM/DMARC authentication results, measure per-hop delays, an
- `exposure_map`: Map what an organisation exposes to the internet beyond its home page: subdomains from Certificate Transparency logs (plus hosts DechoNet has already observed),
- `golive_check`: Check whether a domain is ready to launch or migrate — a go/no-go verdict over five essentials: DNS resolves to an IP, has propagated consistently across global
- `http_security`: Follow a URL's HTTP redirect chain and audit response security headers (CSP, HSTS, X-Frame-Options, COOP, CORP, COEP, Permissions-Policy), grading A+ to F on th
- `impersonation_exposure`: Assess how exposed a domain is to brand impersonation and phishing, PASSIVELY: live typosquat/lookalike domains (homoglyph, omission, transposition, TLD swap) t
- `infrastructure_pivot`: Find other domains DechoNet has seen with the same infrastructure value — a nameserver, IP address, MX host, certificate issuer or registrar — with first and la
- `ip_info`: Report information about the caller's own public IP as seen by the server: IPv4/IPv6 address, ISP, ASN, approximate geolocation, and proxy/VPN heuristics. Takes
- `lookalike_domains`: Generate the typosquat/lookalike variants of a domain that phishers actually register — homoglyph swaps (l→1, o→0, rn→m), TLD swaps (.com→.co), character omissi
- `mcp_server_check`: Check a remote MCP server from outside before connecting it to an agent: whether it requires authentication (and publishes OAuth protected-resource metadata, RF
- `owasp_check`: Assess a domain's OWASP posture from EXTERNAL OBSERVATION only: the OWASP Secure Headers Project plus the externally observable OWASP Top 10:2025 subset — A04 C
- `phishing_link_check`: Check the links in a suspicious text message (smishing) or e-mail before anyone taps them. Paste the whole message or a single URL: every link is extracted, fol
- `port_scan`: Probe a host for a fixed set of common TCP ports (HTTP, HTTPS, SSH, FTP, SMTP, DNS, and common databases) and report which are open, the service name, and the r
- `pqc_readiness`: Check whether a website's public TLS endpoint is ready for post-quantum cryptography: does it complete a TLS 1.3 handshake that offers only the hybrid X25519MLK
- `report_page`: Report a page to DechoNet: phishing or brand impersonation, a fake payment window (card fields where a payment provider should be), hidden instructions aimed at
- `reverse_dns`: Resolve the PTR (reverse DNS) record for an IPv4 or IPv6 address and verify forward-confirmed reverse DNS (FCrDNS) by checking that the PTR hostname resolves ba
- `security_scan`: One-shot comprehensive audit of a domain, scored 0-100 with an A+ to F grade and a prioritized action list. Five scored areas: the web connection (TLS certifica
- `set_expectations`: Record what a domain should show from outside and check it now — HSTS or another header present, DMARC enforcing, an issue key no longer reported, an HTTP or TL
- `ssl_check`: Inspect a host's served TLS/SSL certificate and connection: expiry date, issuer, SAN list, chain integrity, revocation (OCSP, then CRL; unknown when neither ans
- `subdomain_discovery`: Enumerate the subdomains of a domain from Certificate Transparency logs — fully passive (no packets are sent to the target; CT logs are public records of every 
- `subnet_calc`: Compute IPv4 subnet details from CIDR notation entirely locally — no network call: network and broadcast addresses, usable host range, total usable hosts, subne
- `verify_expectations`: Check expectations from outside now, with fresh reads: either a stored set by id (from set_expectations — its state is updated and an anonymous set is kept anot
- `watch_domain`: Start (or reuse) a daily DechoNet watch on a domain so that changes are recorded over time — SSL grade/issuer/expiry, DNS records, HTTP security headers, domain
- `whois_lookup`: Retrieve domain registration data via RDAP (with WHOIS fallback): registrar, creation/expiry/update dates, nameservers, and EPP status flags, highlighting risk 

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.