MCP.so
Sign In
I

Idig Dns Api

@kbhave

About Idig Dns Api

A remote MCP server deployed on Railway that exposes all 14 Softricks iDig tools to any MCP-compatible AI client. One config entry and your AI assistant has professional DNS diagnostics available in every conversation → https://mcp.softricks.net/sse

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "idig-dns": {
      "command": "npx",
      "args": [
        "mcp-remote",
        "https://mcp.softricks.net/sse"
      ]
    }
  }
}

Tools

19

Look up DNS records for a domain. Record types: a, aaaa, ns, mx, txt, soa, caa, srv, cname, ds, tlsa, https, svcb, any, all.

Full SPF, DKIM, DMARC, and BIMI audit with A-F grade and prioritized fix recommendations.

Validate DNSSEC chain of trust. Returns: secure / insecure / bogus / indeterminate.

DNSSEC health report: key inventory, signature expiry, algorithm assessment, DS at parent, rollover readiness, full chain of trust (Root → TLD → Domain) with chain_intact flag and broken-link identification, warnings, and recommendations.

DNS resolution diagnostics. Returns status: ok / nxdomain / nodata / servfail / refused / timeout / degraded.

Full diagnosis combining resolution + DNSSEC. Use first when something is broken.

Check DNS propagation across 16 global resolvers: Google, Cloudflare, Quad9, China, Korea, Russia.

MX health + provider detection: Google Workspace, M365, Proofpoint, Zoho, 35+ providers.

Registrar lock and EPP status. Checks transfer lock, delete lock, serverHold, pendingDelete.

Geolocation and hosting: country, city, ISP, ASN, CDN detection, is_hosting flag.

TTL advisory: flags dangerous TTLs and gives step-by-step migration lowering plan.

Check all authoritative nameservers return identical answers. Catches lame delegation and SOA mismatches.

SSL certificate: validity, expiry countdown, domain match, issuer, chain completeness.

Discover subdomains by probing 75 common names plus crt.sh Certificate Transparency logs. Surfaces exposed dev/staging environments.

IP blacklist / DNSBL check. Tests A-record and MX IPs against Spamhaus, Barracuda, SpamCop, SORBS, and more.

Parsed WHOIS: registrar, creation/expiry dates, domain age, nameservers, EPP status, DNSSEC status.

HTTP/HTTPS reachability: status codes, redirect chain, HSTS header, HTTP→HTTPS redirect detection.

AXFR zone transfer vulnerability check. Tests whether any authoritative NS allows public zone transfers (critical misconfiguration).

DANE/TLSA validation: cross-validates TLSA DNS records against the live TLS certificate. Supports all four TLSA usage types.

Overview

What is Idig Dns Api?

A remote MCP server exposing 14 professional DNS diagnostic tools from the iDig API, enabling MCP-compatible AI clients to perform DNS diagnosis, security audits, and propagation checks.

How to use Idig Dns Api?

Configure your MCP client (Claude Desktop, Cursor, Windsurf) to use the remote server via SSE at https://mcp.softricks.net/sse using npx mcp-remote. All tools require a token parameter obtained from api.softricks.net/idig/docs.

Key features of Idig Dns Api?

  • DNS lookup for any

Comments

More Developer Tools MCP servers