dns_spf_chain
Recursive SPF include chain resolution with service detection
How to use it
dns_spf_chain is exposed by the Osint MCP Server MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), and the dns_spf_chain tool becomes available to the model automatically. See the full listing for setup details and every tool this server provides.
Install Osint MCP Server
npx osint-mcp-serverOther tools in Osint MCP Server (36)
ASN details + all announced IPv4/IPv6 prefixes
IP prefix/ASN routing lookup with RIR allocation
Prefix details + announcing ASNs
Certificate search by domain, fingerprint, issuer
Single host full details with all services
Host search — IPs, services, ports, location, ASN
Search CT logs via crt.sh — subdomain discovery + certificate details
SPF + DMARC + DKIM analysis with risk scoring and recommendations
Resolve A, AAAA, MX, TXT, NS, SOA, CNAME, SRV records
Reverse DNS (PTR) lookup for an IP address
SRV + CNAME service discovery (Autodiscover, LDAP, SIP, Kerberos, etc.)
Wildcard DNS detection via random subdomain probe
Batch IP geolocation (up to 100 IPs at once)
IP geolocation: country, city, ISP, ASN, proxy/hosting/VPN detection
ASN information lookup
Host/subdomain discovery with resolved IPs
Reverse IP lookup — find all domains on an IP
Discover M365 tenant ID, region, and OpenID configuration
Detect auth type (Managed/Federated), federation brand, auth endpoints
Quick recon combining all free sources (DNS + WHOIS + crt.sh + HackerTarget + email security)
List all OSINT sources, API key status, and tool counts
Bulk hostname-to-IP resolution via Shodan
Search public exploit database (PoC, Metasploit modules)
IP details: open ports, services, banners, vulnerabilities, OS, ASN
Search Shodan query language (e.g. apache port:443 country:US)
Historical DNS records with first/last seen dates
Subdomain enumeration (returns FQDNs)
Enhanced WHOIS with registrant/admin/technical contacts
Domain reputation, detection stats, categories, DNS records
IP reputation, detection stats, ASN, network
Subdomain enumeration via VirusTotal
URL scan + malware/phishing analysis
Snapshot history with timestamps and direct archive links
Archived URL discovery — find old endpoints, hidden paths, removed content
RDAP domain lookup — registrar, dates, nameservers, contacts
RDAP IP lookup — network name, CIDR, country, entities