IntoDNS.ai DNS & Email Security Scanner

warnings

intodns.ai

DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools.

https://intodns.ai/api/mcpWebsiteNo authMCP 2025-11-25v1.10.1last checked 24 Aug 2026spoke MCP on 2 of 2 checks (30 days)initialize in 296 ms

How to authenticate

Checked against the endpoint by our probe on 24 Aug 2026. These are the capabilities the server advertises, not a prediction about any particular client.

Scheme	No auth
Protected-resource metadata	✕Not found Without it a client has to guess where the authorization server lives.
Anonymous access	Handshake succeeds; 45 tools listable
Credentials demanded in prose	✕get_everything_report, poll_email_test These tools are listed anonymously and their own descriptions ask for an account or key, but no challenge is issued — so a client has nothing to act on and the refusal arrives as a tool error.

What the probe found

warningTools needing credentials are listed without a challenge

2 of the 45 tools listed anonymously say in their own descriptions that they need an account or a key (get_everything_report, poll_email_test), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.

No CORS headers for browser-based clients

A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.

Tools

analyze_raw_emailanalyze_security_headerscancel_deep_scancheck_bimicheck_blacklistcheck_dmarccheck_dns_propagationcheck_email_securitycheck_fcrdnscheck_http3check_mta_stscheck_sender_requirementscheck_smtp_tlscheck_spfcheck_tlsa_danecreate_email_testcreate_report_snapshotdiscover_dkimexplain_issueflatten_spfgenerate_dmarcgenerate_dns_fixgenerate_security_headersgenerate_spfgenerate_tlsaget_badge_linkget_citation_guidanceget_deep_scan_statusget_email_testget_everything_reportget_hall_of_fameget_healthget_pdf_report_linkget_report_snapshotget_statslookup_dnsnis2_quickscanparse_dmarc_reportpoll_email_testread_llm_discoveryscan_cspscan_domainstart_deep_scanvalidate_dnssecwhois_lookup

Contract history

24 Aug 2026v1.10.1first recorded contract

Get alerted when this contract changes

Depend on this server? Leave an email and get a message when a probe records a change — a tool removed, an argument newly required, an enum narrowed. Alerts are being built; signing up is what tells us to hurry.

Prefer a feed reader? This page's contract changes are also an Atom feed.

Status badge

Status for a README, from the last probe — cached an hour, so up to seven hours behind the endpoint. Links back to this page.

[![MCP status](https://mcpi.app/servers/intodns-ai-dns-email-security-scanner/badge.svg)](https://mcpi.app/servers/intodns-ai-dns-email-security-scanner)