MCP ServerSTDIOOfficialv1.3.4

DNS MCP Server

Analyze DNS records, DNSSEC validation, email authentication protocols, and RDAP data in real-time for security investigations. Built for SOC teams investigating domain threats and email spoofing.

io.github.mclose/dns-mcp

Hosted URL

Local install

Transport

STDIO

Auth

No auth required

What the DNS MCP server does

How models use it and what it is built for.

Analyze DNS records, DNSSEC validation, email authentication protocols, and RDAP data in real-time for security investigations. Built for SOC teams investigating domain threats and email spoofing.

Connect to DNS

Local install — runs as a subprocess.

docker run docker.io/mclose/dns-mcp:1.3.4

Resources

Where to find authoritative docs and source for DNS.

Example prompts for DNS

Paste any of these into Agent Studio after connecting DNS.

  • Check DNSSEC status and validate the chain of trust for example.com
  • Query SPF, DKIM, and DMARC records for a suspicious sender domain
  • Look up RDAP registration details and abuse contacts for a phishing domain
  • Run a full DNS security audit on a domain flagged in our threat feed

DNS MCP server — FAQ

Common questions about connecting and running DNS.

  • What DNS security checks does this server perform?

    It validates DNSSEC signatures, retrieves email authentication records (SPF, DKIM, DMARC), and queries RDAP for domain registration and abuse contact data. Designed for SOC teams investigating compromised or malicious domains.

  • How do I install and run the DNS MCP server?

    Pull and run the Docker image: `docker run docker.io/mclose/dns-mcp:1.3.4`. It communicates via stdio, so connect it to your MCP client (Claude, etc.) using the stdio transport.

  • Does this server require API keys or authentication?

    The registry metadata does not specify required environment variables or API keys. Check the Docker image documentation or run it to see if any configuration is needed for RDAP or DNS queries.

  • Can I use this for real-time threat investigation?

    Yes—it's built specifically for SOC investigations with real-time DNS and RDAP lookups. You can quickly validate DNSSEC, check email authentication, and retrieve abuse contacts during incident response.

  • What's the difference between this and a standard DNS lookup tool?

    This server combines DNS security validation (DNSSEC), email authentication verification (SPF/DKIM/DMARC), and RDAP registration data in one interface. Standard tools typically only do basic DNS queries.

Skip the local setup — run MCP in your browser

MCP Playground runs 10,000+ hosted MCP servers — GitHub, Linear, Notion, Stripe, Sentry and more — across Claude, GPT, Gemini, DeepSeek and 30+ AI models. Compare model answers side-by-side, save agent presets, share runs. Zero install.

Open Agent Studio

Related servers

More on MCP Playground