MCP Radar
MCP Server

nslookup

io.github.venomseven/nslookup
Cloud & Infrastructure Security Public & reachable MCP 2025-11-25

What this MCP does

Performs DNS, domain, email-security, SSL, hosting, uptime, propagation, and web security checks.

Capabilities

Tools

23 tools
bimi_check
Check only the BIMI (Brand Indicators for Message Identification) DNS record for a domain — faster than bimi_vmc because it skips the VMC certificate download and validation. Returns the BIMI record at default._bimi.<domain>, logo URL, and authority (VMC) URL if declared.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['domain'], 'properties': {'domain': {'type': 'string', 'description': 'Domain name to check the BIMI record for (e.g. easydmarc.com)'}}}
bimi_vmc
Check BIMI (Brand Indicators for Message Identification) and VMC (Verified Mark Certificate) for a domain. Returns BIMI DNS record status, VMC certificate details, logo URL, trademark info, and expiry.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['domain'], 'properties': {'domain': {'type': 'string', 'description': 'Domain name to check BIMI/VMC for (e.g. google.com)'}}}
dns_change_review
Review proposed DNS changes BEFORE applying them. Compares a domain's current public DNS with a proposed future state, returns a diff, deterministic rule-based findings (SPF/DMARC/MX/CAA/DNSSEC pitfalls, dangling records, mail breakage, etc.) with suggested fixes, and an overall 0-100 risk score. Stateless — nothing is stored.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['domain', 'records'], 'properties': {'domain': {'type': 'string', 'description': 'Domain whose current public DNS will be compared against the proposed records (e.g. example.com)'}, 'server': {'enum': ['cloudflare', 'cloudflare2', 'google', 'quad9', 'opendns', 'authoritative', 'southafrica', 'australia', 'india', 'thenetherlands', 'canada', 'usa', 'brazil', 'ukraine', 'russia'], 'type': 'string', 'description': 'DNS server to use when fetching the current records. Default: cloudflare.'}, 'records': {'anyOf': [{'type': 'string', 'description': "Proposed DNS records as BIND zone-file text, e.g. 'example.com. 300 IN MX 10 mail.example.com.'"}, {'type': 'array', 'items': {'type': 'object', 'required': ['type', 'value'], 'properties': {'ttl': {'type': 'number', 'description': 'TTL in seconds'}, 'name': {'type': 'string', 'description': "Record name â\x80\x94 subdomain, FQDN, or '@' for the apex (default: '@')"}, 'type': {'type': 'string', 'description': 'Record type, e.g. A, AAAA, MX, TXT, CNAME, NS, CAA'}, 'value': {'type': 'string', 'description': "Record value, e.g. '93.184.216.34' or 'v=spf1 include:_spf.google.com ~all'"}, 'priority': {'type': 'number', 'description': 'Priority (MX/SRV records)'}}}, 'description': 'Proposed DNS records as a structured array'}], 'description': 'The proposed (future) DNS state: either BIND zone-file text or an array of {type, name?, value, ttl?, priority?} records. This is the COMPLETE desired state for the zone â\x80\x94 records present now but omitted here are treated as deletions.'}}}
dns_health
Run a comprehensive DNS health audit on a domain — 39 checks across 7 categories: DNSSEC (chain of trust, algorithms, validation), MX & email (PTR, MTA-STS, redundancy), DNS hygiene (SPF conflicts, wildcards, apex CNAME), TTL & SOA configuration, nameserver setup (diversity, lame delegation, EDNS0), CAA certificates, and operational maturity (security.txt, abuse mailbox). Returns an overall severity-weighted score (0–100) plus per-category scores.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['domain'], 'properties': {'domain': {'type': 'string', 'description': 'Domain name to check DNS health for (e.g. example.com)'}}}
dns_lookup
Look up all common DNS records (A, AAAA, NS, MX, TXT, CNAME, SOA) for a domain. Returns results from a specified DNS server.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['domain'], 'properties': {'domain': {'type': 'string', 'description': 'Domain name to look up (e.g. example.com)'}, 'server': {'enum': ['cloudflare', 'cloudflare2', 'google', 'quad9', 'opendns', 'authoritative', 'southafrica', 'australia', 'india', 'thenetherlands', 'canada', 'usa', 'brazil', 'ukraine', 'russia'], 'type': 'string', 'description': "DNS server to query. Default: cloudflare. Use 'authoritative' for the domain's own nameservers."}}}
dns_propagation
Check DNS propagation for a domain across 18+ global DNS servers (Cloudflare, Google, Quad9, OpenDNS, regional servers, and authoritative nameservers). Shows if DNS changes have propagated worldwide.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['domain', 'recordType'], 'properties': {'domain': {'type': 'string', 'description': 'Domain name to check propagation for (e.g. example.com)'}, 'recordType': {'enum': ['A', 'AAAA', 'AFSDB', 'APL', 'AXFR', 'CAA', 'CDNSKEY', 'CDS', 'CERT', 'CNAME', 'CSYNC', 'DHCID', 'DLV', 'DNAME', 'DNSKEY', 'DS', 'EUI48', 'EUI64', 'HINFO', 'HIP', 'HTTPS', 'IPSECKEY', 'IXFR', 'KEY', 'KX', 'LOC', 'MX', 'NAPTR', 'NS', 'NSEC', 'NSEC3', 'NSEC3PARAM', 'NXT', 'OPENPGPKEY', 'OPT', 'PTR', 'RP', 'RRSIG', 'SIG', 'SMIMEA', 'SOA', 'SPF', 'SRV', 'SSHFP', 'SVCB', 'TA', 'TKEY', 'TLSA', 'TSIG', 'TXT', 'URI', 'ZONEMD'], 'type': 'string', 'description': 'DNS record type to check (e.g. A, AAAA, MX, NS, TXT, CNAME)'}}}
dns_record
Look up a specific DNS record type for a domain. Supports 53 record types including A, AAAA, MX, TXT, CNAME, SOA, PTR, CAA, SRV, DNSKEY, DS, TLSA, HTTPS, SPF, and more.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['domain', 'type'], 'properties': {'type': {'enum': ['A', 'AAAA', 'AFSDB', 'APL', 'AXFR', 'CAA', 'CDNSKEY', 'CDS', 'CERT', 'CNAME', 'CSYNC', 'DHCID', 'DLV', 'DNAME', 'DNSKEY', 'DS', 'EUI48', 'EUI64', 'HINFO', 'HIP', 'HTTPS', 'IPSECKEY', 'IXFR', 'KEY', 'KX', 'LOC', 'MX', 'NAPTR', 'NS', 'NSEC', 'NSEC3', 'NSEC3PARAM', 'NXT', 'OPENPGPKEY', 'OPT', 'PTR', 'RP', 'RRSIG', 'SIG', 'SMIMEA', 'SOA', 'SPF', 'SRV', 'SSHFP', 'SVCB', 'TA', 'TKEY', 'TLSA', 'TSIG', 'TXT', 'URI', 'ZONEMD'], 'type': 'string', 'description': 'DNS record type (e.g. A, MX, TXT, CNAME, SPF, HTTPS, DNSKEY)'}, 'domain': {'type': 'string', 'description': 'Domain name (or IP address for PTR lookups) to query (e.g. example.com)'}, 'server': {'enum': ['cloudflare', 'cloudflare2', 'google', 'quad9', 'opendns', 'authoritative', 'southafrica', 'australia', 'india', 'thenetherlands', 'canada', 'usa', 'brazil', 'ukraine', 'russia'], 'type': 'string', 'description': "DNS server to query. Default: cloudflare. Use 'authoritative' for the domain's own nameservers."}}}
domain_scanner
Scan a domain's email security posture: SPF, DKIM, DMARC, and BIMI configuration. Returns per-indicator scores and detected issues so you can see how well the domain is protected against spoofing and phishing.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['domain'], 'properties': {'domain': {'type': 'string', 'description': 'Domain name to scan (e.g. example.com)'}}}
geo_checker
Check a domain's GEO (Generative Engine Optimization) score — how well the site is optimized for AI search engines like ChatGPT, Gemini, Claude, and Perplexity. Returns three scores (Technical Readiness, Entity Readiness, Answer Readiness), AI crawler access status, structured data analysis, and prioritized recommendations.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['domain'], 'properties': {'domain': {'type': 'string', 'description': 'Domain name to check GEO score for (e.g. github.com)'}}}
hosting_report
Find out who hosts a website. Returns the hosting provider, IP/ASN/network owner, server location, DNS/nameserver provider, CDN or proxy detection (Cloudflare, Fastly, etc.), SSL certificate issuer, and mail servers/provider for a domain in one combined report.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['domain'], 'properties': {'domain': {'type': 'string', 'description': 'Domain or URL to build a hosting report for (e.g. github.com). URLs are normalized to a bare hostname.'}}}
my_certificates
Get an SSL certificate expiry overview for your monitored domains: per-alert-level counts (ok / warning / critical / expired) and every certificate sorted by soonest expiry, highlighting the ones expiring within 30 days. Requires sign-in to your NsLookup.io account (or an API token).
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
my_dns_changes
List recent DNS changes detected on your monitored domains, each with its DNS Change Review risk assessment (0-100 risk score, severity counts, added/removed/modified record counts), plus the latest risk per monitor. Requires sign-in to your NsLookup.io account (or an API token).
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'limit': {'type': 'integer', 'maximum': 100, 'minimum': 1, 'description': 'Maximum reviews to return (default 10)'}}}
my_incidents
List incidents from your NsLookup.io monitoring (downtime, SSL expiry, DNS changes, propagation issues, VMC problems) — open ones by default, or the full recent history — plus a per-status/per-source summary. Requires sign-in to your NsLookup.io account (or an API token).
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'limit': {'type': 'integer', 'maximum': 100, 'minimum': 1, 'description': 'Maximum incidents to return (default 20)'}, 'status': {'enum': ['open', 'all'], 'type': 'string', 'description': "'open' (default) = unresolved incidents (triggered or acknowledged); 'all' = include resolved history"}}}
my_monitors
List all monitors in your NsLookup.io account across every type — uptime, API, DNS, WHOIS, DNS propagation, SSL certificates, and BIMI/VMC — with their configuration and latest known state. Requires sign-in to your NsLookup.io account (or an API token).
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
my_overview
Get an account health snapshot for your NsLookup.io monitoring: an aggregated 0-100 health score with per-subsystem breakdown (uptime, SSL, DNS, propagation, VMC, WHOIS) plus your current product limits/quota. Requires sign-in to your NsLookup.io account (or an API token).
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
my_uptime_history
Get uptime and response-time history for one of your NsLookup.io uptime monitors: availability stats plus hourly buckets over the requested window. Identify the monitor by id or by URL. Requires sign-in to your NsLookup.io account (or an API token).
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'url': {'type': 'string', 'description': 'Monitor URL to match instead of an id (e.g. https://example.com)'}, 'hours': {'type': 'integer', 'maximum': 720, 'minimum': 1, 'description': 'History window in hours (default 24)'}, 'monitorId': {'type': 'integer', 'maximum': 9007199254740991, 'minimum': -9007199254740991, 'description': 'Monitor id (from my_monitors)'}}}
rdap_lookup
Look up registration data (RDAP — the successor to WHOIS) for an IP address, AS number, or domain name. The query type is detected automatically. Returns the owning organization, network range/CIDR, RIR (ARIN, RIPE, APNIC, LACNIC, AFRINIC), country, status, registration/last-changed dates, nameservers, and abuse/registrant contacts, plus the raw RDAP JSON.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['query'], 'properties': {'query': {'type': 'string', 'description': 'What to look up: an IPv4/IPv6 address (e.g. 8.8.8.8), an AS number (e.g. AS13335 or 13335), or a domain name (e.g. example.com)'}}}
security_scan
Run a security scan on a domain to detect DNS misconfigurations, missing SPF/DKIM/DMARC records, cookie security issues, and other web security vulnerabilities. Returns findings with severity levels (critical, high, medium, low, info).
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['domain'], 'properties': {'domain': {'type': 'string', 'description': 'Domain name to security scan (e.g. example.com)'}}}
ssl_certificate
Check the SSL/TLS certificate for a domain. Returns issuer, expiry date, days until expiry, certificate chain validity, cipher strength, SAN domains, fingerprint, and TLS protocol version.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['domain'], 'properties': {'domain': {'type': 'string', 'description': 'Domain name to check SSL certificate for (e.g. github.com)'}}}
status_page
Read a public status page hosted on nslookup.io status pages. Returns the page name, overall status, per-component status and uptime, and active incidents/maintenance. Look up by slug (pages served at hosted.nslookup.io/<slug>) or by the custom domain the page is served on. Provide exactly one of slug or domain.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'slug': {'type': 'string', 'description': "Status page slug (e.g. 'nslookup-io' for hosted.nslookup.io/nslookup-io)"}, 'domain': {'type': 'string', 'description': 'Custom domain the status page is served on (e.g. status.acme.com)'}}}
uptime_check
Perform a one-time HTTP uptime check on a URL from a single location. Returns whether the site is up or down, HTTP status code, and response time in milliseconds. For multi-location checks, use uptime_check_multi instead.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['url'], 'properties': {'url': {'type': 'string', 'description': 'Full URL to check (e.g. https://github.com)'}, 'timeout': {'type': 'number', 'description': 'Timeout in milliseconds (default: 10000)'}}}
uptime_check_multi
Check if a website is up or down from 7 global locations simultaneously: Amsterdam, Sydney, London, Frankfurt, Delhi, Warsaw, and South Carolina. Returns status, response time, and HTTP status code for each location.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['url'], 'properties': {'url': {'type': 'string', 'description': 'Full URL to check (e.g. https://github.com)'}, 'timeout': {'type': 'number', 'description': 'Timeout in milliseconds (default: 30000)'}}}
webservers
Get the IP addresses (both IPv4 and IPv6) for a domain by looking up A and AAAA records. Also returns the punycode and unicode domain representations.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['domain'], 'properties': {'domain': {'type': 'string', 'description': 'Domain name to look up IP addresses for (e.g. example.com)'}}}
History

Recent tool changes

Added
my_certificates
Sept. 17, 2026, 12:53 p.m.
Added
my_dns_changes
Sept. 17, 2026, 12:53 p.m.
Added
my_uptime_history
Sept. 17, 2026, 12:53 p.m.
Added
my_incidents
Sept. 17, 2026, 12:53 p.m.
Added
my_monitors
Sept. 17, 2026, 12:53 p.m.
Added
my_overview
Sept. 17, 2026, 12:53 p.m.
Added
status_page
Sept. 17, 2026, 12:53 p.m.
Added
bimi_check
Sept. 17, 2026, 12:53 p.m.
Added
dns_change_review
Sept. 17, 2026, 12:53 p.m.
Added
domain_scanner
Sept. 17, 2026, 12:53 p.m.
Added
hosting_report
Sept. 17, 2026, 12:53 p.m.
Added
rdap_lookup
Sept. 17, 2026, 12:53 p.m.
Added
geo_checker
Sept. 17, 2026, 12:53 p.m.
Added
dns_health
Sept. 17, 2026, 12:53 p.m.
Added
uptime_check_multi
Sept. 17, 2026, 12:53 p.m.
Added
uptime_check
Sept. 17, 2026, 12:53 p.m.
Added
security_scan
Sept. 17, 2026, 12:53 p.m.
Added
bimi_vmc
Sept. 17, 2026, 12:53 p.m.
Added
ssl_certificate
Sept. 17, 2026, 12:53 p.m.
Added
webservers
Sept. 17, 2026, 12:53 p.m.
Added
dns_propagation
Sept. 17, 2026, 12:53 p.m.
Added
dns_record
Sept. 17, 2026, 12:53 p.m.
Added
dns_lookup
Sept. 17, 2026, 12:53 p.m.
Discover

Similar MCP servers

BorealHost

ai.borealhost/mcp

Provides web hosting and infrastructure management, including site deployment, DNS, domains, containers, compute, backups, cachin…

BlackVeil DNS & Email Security Scanner

com.blackveilsecurity/dns

Audits domain, DNS, email, certificate, HTTP, brand-impersonation, and agent-discovery security controls.

Hackertarget

io.github.pipeworx-io/hackertarget

Performs passive DNS, ASN, IP geolocation, HTTP header, ping, link, and network-path reconnaissance and diagnostics.

Busymate DevTools

dev.busymate/busymate-devtools

Captures, inspects, exports, and debugs HTTPS traffic from devices and applications, with request and response inspection, proxy …

Ripe Stat

io.github.pipeworx-io/ripe-stat

Provides RIPE registry and routing data for IP addresses, prefixes, ASNs, BGP state and neighbors, network ownership, geolocation…

Cloudflare Radar

io.github.pipeworx-io/cloudflare-radar

Provides Cloudflare Radar internet observatory data on DDoS attacks, BGP leaks, domain popularity, internet quality, and traffic …

Domains

io.github.pipeworx-io/domains

Checks domain registration status and availability and searches certificate-transparency records for certificates and subdomains.

Rdap

io.github.pipeworx-io/rdap

Looks up authoritative RDAP registration records for domains, IP addresses, autonomous systems, entities, and nameservers.