How do I connect Dns Security MCP Server to Claude?

Run `claude mcp add dns-security-mcp -- npx -y dns-security-mcp` in Claude Code, or add the same command and arguments under mcpServers in Cursor's mcp.json or Claude Desktop's claude_desktop_config.json, then restart the client. The blocks above are ready to paste.

Is Dns Security MCP Server free?

The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.

What can Dns Security MCP Server do?

Dns Security MCP Server documents 40 tools to the agent, including dns_cache_snoop, dns_lookup, dns_nsec_walk. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.

Dns Security MCP

Unclaimed

by badchars

104-tool DNS Security Intelligence MCP Server — DNSSEC, hijacking, tunneling, typosquatting, email security, CT monitoring, blocklist, infrastructure audit. 100% local, zero API keys required.

Set up this server

Compare servers My Stack

01 / Choose your client

02 / Before you connect

Authentication is not specified. Check the project instructions before connecting.

Install the runtime required by the project and make it available to your client.

Project instructionsEnvironment variable names (optional)

Use names from the project instructions, separated by commas. Enter names only, never secret values.

03 / Add the configuration

Source: generated from public install instructions

claude mcp add --transport stdio 'dns-security-mcp' -- 'npx' '-y' 'dns-security-mcp'

Run in your terminal after replacing any placeholders.

04 / Check it in your client

Open your client’s MCP settings and confirm the server connects and lists its tools. A copied configuration does not confirm a working connection.

aiai-agentblocklistcertificate-transparencyclaudecybersecuritydnsdns-privacydns-securitydns-tunnelingdnssecdohemail-securitymcpmodel-context-protocolsecuritysubdomain-takeoverthreat-intelligencetypescripttyposquatting

Is this your MCP server?

This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.

Claim this server

Security profile

Claimed and verified servers get a weekly static scan that shows what the code can reach: external services, environment variables, shell commands, agent configuration folders, plus any dependencies with known advisories. Claim this listing to get one. How the security profile works

40 of 40 tools

Documented tools (40)

From project documentation. A server handshake does not verify each tool’s description or behavior.

dns_cache_snoop

Perform DNS cache snooping by sending non-recursive query (RD=0) to a nameserver

dns_lookup

Resolve all DNS record types for a domain in parallel

dns_nsec_walk

Attempt DNSSEC NSEC zone walking to enumerate domain names in a signed zone

dns_propagation

Check DNS propagation by querying 20+ globally distributed public resolvers

dns_recursive_check

Test whether a nameserver is an open recursive resolver (RD=1 for external domain)

dns_reverse

Perform PTR (reverse DNS) lookup with Forward Confirmed rDNS (FCrDNS) validation

dns_server_fingerprint

Fingerprint a DNS server by querying CHAOS class TXT records (version.bind)

dns_split_horizon

Detect split-horizon (split-brain) DNS by comparing internal vs external resolver responses

dns_subdomain_enum

Enumerate subdomains using passive CT (Certificate Transparency) log lookups via crt.sh

dns_ttl_analysis

Analyze DNS TTL values across all record types for a domain

dns_wildcard_detect

Detect wildcard DNS configurations by resolving random non-existent subdomains

dns_zone_transfer

Attempt AXFR (full zone transfer) against a domain's nameserver via TCP

dnssec_algorithm_audit

Inventory all DNSSEC algorithms used in DS, DNSKEY, and RRSIG records

dnssec_check_dnskey

List all DNSKEY records for a domain

dnssec_check_ds

Check DS (Delegation Signer) records for a domain

dnssec_check_nsec

Check NSEC/NSEC3 records for a domain

dnssec_check_rrsig

Check RRSIG (Resource Record Signature) records and expiry

dnssec_full_audit

Comprehensive DNSSEC audit: all 7 checks combined with unified report

dnssec_key_rollover

Check for DNSSEC key rollover indicators

dnssec_validate

Full DNSSEC chain of trust validation from root to TLD to domain

email_check_bimi

Check BIMI (Brand Indicators for Message Identification) record

email_check_dane

Check DANE/TLSA records for a domain's MX hosts

email_check_dkim

Check DKIM records by probing common selectors (google, selector1, dkim, etc.)

email_check_dmarc

Check DMARC record with policy analysis and reporting configuration

email_check_mta_sts

Check MTA-STS (Mail Transfer Agent Strict Transport Security) configuration

email_check_ptr

Check PTR and FCrDNS (Forward-Confirmed reverse DNS) for MX hosts

email_check_spf

Check SPF (Sender Policy Framework) record with mechanism analysis

email_full_audit

Comprehensive email security audit across all protocols

email_spoofability_score

Calculate email spoofability score (0-100) based on SPF, DKIM, DMARC

hijack_bgp_impact

Assess BGP-level impact of domain hijacking via Team Cymru ASN lookup

hijack_change_monitor

Monitor DNS record changes by comparing against a stored baseline

hijack_dangling_cname

Detect dangling CNAME records that could allow subdomain takeover

hijack_dangling_mx

Detect dangling MX records that could allow email hijacking

hijack_dangling_ns

Detect dangling NS records that could allow full domain takeover

hijack_dns_rebinding

Detect DNS rebinding candidates via IP changes combined with low TTL

hijack_ns_delegation

Walk the DNS delegation chain and verify consistency

hijack_registrar_security

Check domain registrar security posture via RDAP

hijack_subdomain_takeover

Full subdomain takeover scan using CT logs and CNAME resolution

tunnel_entropy_analysis

Calculate Shannon entropy per subdomain label to detect tunneling

tunnel_query_length

Measure subdomain label and total query lengths for anomaly detection

Tool change history

Compared across complete checks of the same configuration. Tools were listed, not invoked. Input-schema changes are not measured here.

No complete tool checks yet.

FAQ

Questions about Dns Security MCP Server

How do I connect Dns Security MCP Server to Claude?: Run `claude mcp add dns-security-mcp -- npx -y dns-security-mcp` in Claude Code, or add the same command and arguments under mcpServers in Cursor's mcp.json or Claude Desktop's claude_desktop_config.json, then restart the client. The blocks above are ready to paste.
Is Dns Security MCP Server free?: The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.
What can Dns Security MCP Server do?: Dns Security MCP Server documents 40 tools to the agent, including dns_cache_snoop, dns_lookup, dns_nsec_walk. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.