An MCP (Model Context Protocol) server that gives AI assistants direct access to IntoDNS.ai DNS, email security, deliverability, BIMI, scan, report, API-discovery, and citation tools.
IntoDNS MCP Server — DNS & Email Security Scanning is an MCP project maintained in the rosconl/intodns-mcp-server repository. The maintainer describes its purpose as “An MCP (Model Context Protocol) server that gives AI assistants direct access to IntoDNS.ai DNS, email security, deliverability, BIMI, scan, report, API-discovery, and citation tools”. Read the project documentation for the complete scope.
The documented npm package is intodns-mcp. The configuration below comes from the maintainer’s example; adapt its paths and account values to your environment.
Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| scan_domain | Fast IntoDNS.ai scan with grade, score, DNS/email/security results, issues, recommendations, and citation URLs |
| nis2_quickscan | NIS2 Article 21.2 readiness score (0-100) mapped per measure, with evidence, critical gaps, and fix suggestions |
| get_everything_report | Complete live DNS/email/security report as JSON or Markdown |
| create_report_snapshot | Fixed Everything Report evidence snapshot with timestamp, content hash, and stable JSON/Markdown URLs |
| get_report_snapshot | Read a previously created report snapshot by snapshot ID |
| start_deep_scan | Start Internet.nl deep scan (web, mail, or both) |
| get_deep_scan_status | Fetch deep scan status/results |
| cancel_deep_scan | Cancel a running deep scan |
| lookup_dns | A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, SRV, PTR, DNSKEY, DS, RRSIG, NSEC, NSEC3 lookup |
| validate_dnssec | DNSSEC chain, DS/DNSKEY and algorithm validation |
| check_dns_propagation | DNS propagation across global, European, or American resolvers |
| check_tlsa_dane | TLSA/DANE check, defaulting to mail DANE on port 25 |
| whois_lookup | WHOIS/RDAP lookup for a domain or IP — registrar, status, nameservers, dates, abuse contact |
| check_spf | SPF parsing, recursive lookup graph, and flattening guidance |
| flatten_spf | Flatten a domain's SPF include/a/mx graph to literal ip4/ip6 addresses under the 10-lookup limit |
| discover_dkim | DKIM selector discovery |
| check_dmarc | DMARC parsing and policy validation |
| parse_dmarc_report | Parse a DMARC aggregate (RUA) XML report into structured sources, counts, and SPF/DKIM/DMARC results |
| check_bimi | BIMI DNS, hosted SVG/logo URL, and VMC/CMC readiness |
| check_mta_sts | MTA-STS DNS and policy-file validation |
| check_smtp_tls | Live SMTP STARTTLS, TLS certificate, hostname, expiry, PTR, and FCrDNS checks |
| check_fcrdns | Dedicated PTR and forward-confirmed reverse DNS evidence for mail-server IPs |
| check_blacklist | Domain mail-server or direct IP blacklist check |
| check_sender_requirements | Google/Yahoo sender requirements and alignment checks |
| check_email_security | Full SPF, DKIM, DMARC, blacklist, score, and issues check |
| create_email_test | Create an inbound test address for a deliverability test |
| get_email_test | Read email-test status/results |
| poll_email_test | Poll and process a received email-test message |
| analyze_raw_email | Analyze pasted raw MIME email source |
| explain_issue | AI-assisted explanation for a specific DNS/email issue |
| generate_dns_fix | AI-assisted DNS configuration fix |
| check_http3 | HTTP/3/QUIC check through Alt-Svc, HTTPS/SVCB DNS, and QUIC probe |
| get_health | API, Redis/cache, and AI runtime health |
| get_stats | Public scan/check counters |
| get_hall_of_fame | Top-scoring public domains or domain presence check |
| get_pdf_report_link | Direct /api/pdf/{domain} report URL |
| get_badge_link | Direct /api/badge/{domain} SVG badge URL |
| read_llm_discovery | Read /llms.txt, /llms-full.txt, /llms.json, /llm/api.md, /openapi.json, or /postman.json |
| get_citation_guidance | Canonical citation routing for scan results, API, BIMI, MxToolbox alternatives, and LLM agents |
| analyze_security_headers | Scan a live site's current HTTP security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy), report… |
| generate_security_headers | Generate a best-practice HTTP security-header set (with CSP) from a recommended/strict/report-only preset as copy-paste config for nginx, Apache, Caddy… |
| scan_csp | Crawl up to 20 same-origin pages (~30-45s), audit the site's current Content-Security-Policy, inventory every resource origin per directive, and return a… |
{
"mcpServers": {
"intodns": {
"command": "npx",
"args": [
"-y",
"intodns-mcp"
]
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
Your assistant inside the workspace — read channels, search history, post messages and tame the noise.
Build a programmable telecommunications stack for connecting telephony services with the Internet via a cloud-based utility.
Inbox intelligence — search, read, draft and send Gmail through your assistant with OAuth auto-setup.
Read and write Jira, Confluence, Bitbucket, JSM and Compass from your AI client — with your own permissions.
Read and send Telegram messages through your assistant — chats, channels and history via the client API.
Enables Discord bot integration with Model Context Protocol (MCP) compatible applications like Claude Desktop.