Idig Dns

kbhave/mcp-service-idig

Connects Claude to the iDig DNS API with 19 diagnostic tools for live infrastructure troubleshooting. Query any DNS record type, validate DNSSEC chains, audit email security (SPF/DKIM/DMARC), check SSL certificates, trace propagation across 16 global resolvers, and scan for AXFR vulnerabilities. Reaches beyond basic lookups into operational diagnostics: MX provider detection, blacklist checks, subdomain discovery via Certificate Transparency, TTL migration planning, and zone consistency audits across authoritative nameservers. Requires an API token from api.softricks.net. Runs remotely over SSE at mcp.softricks.net, so no local installation needed. Reach for this when emails hit spam folders, DNS changes need verification, or you're debugging domain delegation issues.

tools: 19
transport: SSE
last updated: Feb 27, 2026

View on GitHub

Install

From registry metadata

$ npx add-mcp https://mcp.softricks.net/sse --name idig-dns --transport sse

Run in your terminal. add-mcp asks which agents to add it to (Claude Code, Codex, Cursor and more). Add -g to install it for every project.

Review the command, arguments and environment values before installing. MCP servers run with your local permissions.

Other ways

Claude Code

$ claude mcp add --transport sse idig-dns https://mcp.softricks.net/sse

Run in your terminal. Add --scope user to make it available in every project.

Tools

Verified live · 19 tools

Verified live against the running server on Nov 6, 2026.

dns_lookupLook up DNS records for a domain. Record types: a, aaaa, ns, mx, txt, soa, caa, srv, cname, ds, tlsa, https, svcb, any, all.3 params

Look up DNS records for a domain. Record types: a, aaaa, ns, mx, txt, soa, caa, srv, cname, ds, tlsa, https, svcb, any, all.

Parameters* required

domain*string

rrstring

default: a

token*string

email_security_auditFull SPF, DKIM, DMARC, and BIMI audit with A-F grade and prioritized fix recommendations.2 params

Full SPF, DKIM, DMARC, and BIMI audit with A-F grade and prioritized fix recommendations.

Parameters* required

domain*string

token*string

dnssec_validateValidate DNSSEC chain of trust. Returns: secure / insecure / bogus / indeterminate.2 params

Validate DNSSEC chain of trust. Returns: secure / insecure / bogus / indeterminate.

Parameters* required

domain*string

token*string

dnssec_healthDNSSEC health report: key inventory, signature expiry, algorithm assessment, DS at parent, rollover readiness, full chain of trust (Root → TLD → Domain) with chain_intact flag and broken-link identification, warnings, and recommendations.2 params

DNSSEC health report: key inventory, signature expiry, algorithm assessment, DS at parent, rollover readiness, full chain of trust (Root → TLD → Domain) with chain_intact flag and broken-link identification, warnings, and recommendations.

Parameters* required

domain*string

token*string

resolve_checkDNS resolution diagnostics. Returns status: ok / nxdomain / nodata / servfail / refused / timeout / degraded.2 params

DNS resolution diagnostics. Returns status: ok / nxdomain / nodata / servfail / refused / timeout / degraded.

Parameters* required

domain*string

token*string

diagnoseFull diagnosis combining resolution + DNSSEC. Use first when something is broken.2 params

Full diagnosis combining resolution + DNSSEC. Use first when something is broken.

Parameters* required

domain*string

token*string

propagation_checkCheck DNS propagation across 16 global resolvers: Google, Cloudflare, Quad9, China, Korea, Russia.3 params

Check DNS propagation across 16 global resolvers: Google, Cloudflare, Quad9, China, Korea, Russia.

Parameters* required

domain*string

record_typestring

default: A

token*string

mx_checkMX health + provider detection: Google Workspace, M365, Proofpoint, Zoho, 35+ providers.2 params

MX health + provider detection: Google Workspace, M365, Proofpoint, Zoho, 35+ providers.

Parameters* required

domain*string

token*string

domain_statusRegistrar lock and EPP status. Checks transfer lock, delete lock, serverHold, pendingDelete.2 params

Registrar lock and EPP status. Checks transfer lock, delete lock, serverHold, pendingDelete.

Parameters* required

domain*string

token*string

geo_lookupGeolocation and hosting: country, city, ISP, ASN, CDN detection, is_hosting flag.2 params

Geolocation and hosting: country, city, ISP, ASN, CDN detection, is_hosting flag.

Parameters* required

domain*string

token*string

ttl_checkTTL advisory: flags dangerous TTLs and gives step-by-step migration lowering plan.2 params

TTL advisory: flags dangerous TTLs and gives step-by-step migration lowering plan.

Parameters* required

domain*string

token*string

zone_consistencyCheck all authoritative nameservers return identical answers. Catches lame delegation and SOA mismatches.2 params

Check all authoritative nameservers return identical answers. Catches lame delegation and SOA mismatches.

Parameters* required

domain*string

token*string

ssl_checkSSL certificate: validity, expiry countdown, domain match, issuer, chain completeness.2 params

SSL certificate: validity, expiry countdown, domain match, issuer, chain completeness.

Parameters* required

domain*string

token*string

subdomain_discoverDiscover subdomains by probing 75 common names plus crt.sh Certificate Transparency logs. Surfaces exposed dev/staging environments.2 params

Discover subdomains by probing 75 common names plus crt.sh Certificate Transparency logs. Surfaces exposed dev/staging environments.

Parameters* required

domain*string

token*string

blacklist_checkIP blacklist / DNSBL check. Tests A-record and MX IPs against Spamhaus, Barracuda, SpamCop, SORBS, and more.2 params

IP blacklist / DNSBL check. Tests A-record and MX IPs against Spamhaus, Barracuda, SpamCop, SORBS, and more.

Parameters* required

domain*string

token*string

whois_lookupParsed WHOIS: registrar, creation/expiry dates, domain age, nameservers, EPP status, DNSSEC status.2 params

Parsed WHOIS: registrar, creation/expiry dates, domain age, nameservers, EPP status, DNSSEC status.

Parameters* required

domain*string

token*string

http_checkHTTP/HTTPS reachability: status codes, redirect chain, HSTS header, HTTP→HTTPS redirect detection.2 params

HTTP/HTTPS reachability: status codes, redirect chain, HSTS header, HTTP→HTTPS redirect detection.

Parameters* required

domain*string

token*string

zone_axfrAXFR zone transfer vulnerability check. Tests whether any authoritative NS allows public zone transfers (critical misconfiguration).2 params

AXFR zone transfer vulnerability check. Tests whether any authoritative NS allows public zone transfers (critical misconfiguration).

Parameters* required

domain*string

token*string

dane_validateDANE/TLSA validation: cross-validates TLSA DNS records against the live TLS certificate. Supports all four TLSA usage types.3 params

DANE/TLSA validation: cross-validates TLSA DNS records against the live TLS certificate. Supports all four TLSA usage types.

Parameters* required

domain*string

portinteger

default: 443

token*string

Readme

iDig DNS MCP Server

A remote MCP server exposing 19 professional DNS diagnostic tools from the iDig API — built by Kedar Bhave ( Softricks ).

Connect any MCP-compatible AI client (Claude Desktop, Cursor, Windsurf, and more) to real DNS infrastructure. Diagnose outages, audit email security, validate DNSSEC, check SSL certificates, trace propagation across 16 global resolvers, and more — all in plain English.

Live endpoint: https://mcp.softricks.net/sse

Quickstart

Claude Desktop

Edit ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "idig-dns": {
      "command": "npx",
      "args": [
        "mcp-remote",
        "https://mcp.softricks.net/sse"
      ]
    }
  }
}

Restart Claude Desktop. You'll see idig-dns appear under Connectors.

Cursor / Windsurf

Add to your MCP settings:

{
  "mcpServers": {
    "idig-dns": {
      "command": "npx",
      "args": [
        "mcp-remote",
        "https://mcp.softricks.net/sse"
      ]
    }
  }
}

Authentication

View the full README on GitHub

Details

Repository: github.com/kbhave/mcp-service-idig
Categories: Communication & Messaging, Security & Pentesting
Transport: SSE
Registry: MCP registry, active
Tools verified: Nov 6, 2026

Related Communication & Messaging MCP servers

View all

EmailMCPnfodor/emailmcpAI agent email — 23 tools free to read inbox, 28 paid to send. $9.99/mo. Token auto-provisioned.0stars

Founden Mcpo-mega-enterprise/founden-mcpBuild your company over chat: website, app, and admin built in the cloud. One API key.0stars

adhistory: Google Ads, reviews, jobs, PDFsobrandon/adhistory-mcpCompetitor Google ads, app reviews, job boards, PDF tables/invoices, email checks via Apify0stars

Panda Web Security Toolspandadad0214/panda-web-security-toolsSite/email/agent safety and monitors: SPF/DKIM, SEO, change + RSS monitors, hidden-AI, WHOIS (7).0stars

CacheBashrezzedai/cachebashLet your AI sessions talk to each other — messaging, tasks, sessions, and alerts0stars

DeepSeek FR MCProcnubie/deepseekfr-mcpIndependent French workspace for evaluating DeepSeek-V3-class chat and DeepSeek-R1 reasoning.0stars