Security & Testing

drwho.me

Provides network information lookups including IP geolocation, DNS records, and domain infrastructure details.

1 endpoint29 known toolsFirst detected May 11, 2026Last detected September 18, 2026

ENDPOINT 1

https://drwho.me/mcp/mcp

No auth detected

MCP server metadata

Name: drwho.me
Version: 2.0.0

Capabilities

tools.listChanged

Server instructions

Free network, email-authentication and developer tools from drwho.me. Start with dossier_summary for a domain overview, then call a single dossier_* tool for raw data. Each domain result links to the full graded report on Domain Posture.

Known tools 29

dossier_summary

Run the nine DNS, email-authentication and TLS checks on a domain in parallel and return one graded line per check: DNS records, MX, SPF, DMARC, DKIM, DNSSEC, TLS-RPT, MTA-STS and the TLS certificate.

Potential side effects

dossier_dns

Fetch a domain's A, AAAA, NS, SOA, CAA and TXT records in one call.

Inferred read-only

dossier_mx

List a domain's MX (mail exchanger) records sorted by priority.

Inferred read-only

dossier_spf

Find and parse a domain's SPF record into its mechanisms.

Inferred read-only

dossier_dmarc

Find and parse the DMARC policy at _dmarc.

Inferred read-only

dossier_dkim

Probe a domain for DKIM public keys at <selector>.

Inferred read-only

dossier_dnssec

Check whether a domain's zone is signed with DNSSEC and validates: DS and DNSKEY records plus the resolver's AD (authenticated data) flag.

Inferred read-only

dossier_tlsrpt

Look up a domain's SMTP TLS Reporting policy at _smtp.

Inferred read-only

dossier_mta_sts

Fetch and validate a domain's MTA-STS policy (mode, mx, max_age).

Inferred read-only

dossier_tls

Read the TLS certificate a domain presents on port 443: subject, issuer, validity dates, days remaining, subject alternative names, SHA-256 fingerprint and whether the chain validated.

Inferred read-only

dossier_redirects

Trace the redirect chain from https://<domain>/, one entry per hop with its status code and target, up to 10 hops.

Inferred read-only

dossier_headers

Fetch https://<domain>/ and return every response header, so you can review Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy.

Inferred read-only

dossier_cors

Send a CORS preflight (OPTIONS) to https://<domain>/ and return the access-control-* headers in the answer.

Potential side effects

dossier_web_surface

Summarise a domain's public web surface: robots.

Inferred read-only

dossier_ai_crawlers

Report what a domain's robots.

Inferred read-only

dossier_llms_txt

Check whether a domain publishes an llms.

Inferred read-only

dossier_security_txt

Check whether a domain publishes /.

Inferred read-only

dossier_whois

Look up a domain's registrar, creation date, expiry date and registry statuses.

Inferred read-only

dossier_ct_log

List subdomains of a domain that appear in Certificate Transparency logs.

Inferred read-only

dns_lookup

Resolve one DNS record type (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA or SRV) for a name and return the raw answers.

Inferred read-only

ip_lookup

Look up an IPv4 or IPv6 address: city, region, country, coordinates, timezone and the network (ASN and organisation) that announces it.

Inferred read-only

user_agent_parse

Parse a User-Agent header into browser, operating system, device and rendering engine.

Inferred read-only

base64_encode

Encode UTF-8 text as base64.

Inferred read-only

base64_decode

Decode base64 to UTF-8 text.

Inferred read-only

jwt_decode

Decode a JSON Web Token's header and payload.

Inferred read-only

json_format

Validate JSON and re-print it with an indent of 2 or 4 spaces, or minified with indent 0.

Inferred read-only

url_encode

Percent-encode text for use in a URL query value or path segment (encodeURIComponent rules: everything except letters, digits and - _ .

Inferred read-only

url_decode

Decode percent-encoded text.

Inferred read-only

uuid_generate

Generate UUIDs.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.drwho-me]
url = "https://drwho.me/mcp/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "drwho-me": {
      "type": "http",
      "url": "https://drwho.me/mcp/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: drwho-me
Remote MCP URL: https://drwho.me/mcp/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "drwho-me": {
      "url": "https://drwho.me/mcp/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "drwho-me": {
      "type": "http",
      "url": "https://drwho.me/mcp/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "drwho-me",
  "transport": "streamable-http",
  "url": "https://drwho.me/mcp/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for drwho.me was fetched 2026-09-23T20:29:34.264Z.

Trust status Trusted

drwho.me is assessed as Trusted: Domain has an established technology history spanning over a year.

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.