Security & Testing

intodns.ai

Provides DNS and email security scanning, NIS2 compliance readiness assessment, and evidence snapshots for domains.

1 endpoint45 known toolsFirst detected June 5, 2026Last detected September 23, 2026

ENDPOINT 1

https://intodns.ai/api/mcp

No auth detected

MCP server metadata

Name: intodns
Version: 1.10.3

Capabilities

tools.listChanged

Known tools 45

scan_domain

Run the fast IntoDNS.ai DNS and email security scan (~3-8s).

Potential side effects

nis2_quickscan

Compute a NIS2 Article 21.2 readiness score for a domain by mapping the IntoDNS quickscan onto the ten NIS2 measures.

Inferred read-only

get_everything_report

Generate the complete live IntoDNS.ai report covering DNS, email authentication, web/HTTPS, blacklist reputation, sender requirements, and canonical citation URLs in a single call.

Potential side effects

create_report_snapshot

Create an immutable evidence snapshot of the current Everything Report for a domain.

Potential side effects

get_report_snapshot

Read a previously created IntoDNS.ai Everything Report evidence snapshot by snapshot ID.

Inferred read-only

start_deep_scan

Start a long-running Internet.nl deep scan (typically 30-120s).

Inferred read-only

get_deep_scan_status

Read-only status poll for a long-running Internet.nl deep scan.

Inferred read-only

cancel_deep_scan

Cancel an in-progress Internet.nl deep scan.

Inferred read-only

lookup_dns

Read-only DNS record lookup via DNS-over-HTTPS.

Inferred read-only

validate_dnssec

Read-only DNSSEC chain validation.

Inferred read-only

check_dns_propagation

Compare DNS responses across the nine currently configured public and authoritative resolvers to detect propagation lag, missing answers, or inconsistent TTL/data values.

Inferred read-only

check_tlsa_dane

Read-only TLSA/DANE DNS record check.

Inferred read-only

check_spf

Read-only SPF parse and validation for a domain.

Inferred read-only

flatten_spf

Read-only SPF flattening for a domain.

Inferred read-only

discover_dkim

Read-only DKIM check for a domain.

Inferred read-only

check_dmarc

Read-only fetch and parse of the _dmarc TXT record.

Inferred read-only

check_bimi

Read-only BIMI readiness check.

Inferred read-only

check_mta_sts

Read-only check of MTA-STS: TXT record at _mta-sts.<domain> plus the HTTPS policy file at mta-sts.<domain>/.well-known/mta-sts.txt.

Inferred read-only

check_smtp_tls

Live check of every MX host: opens TCP 25, runs EHLO + STARTTLS, validates TLS certificate trust chain, hostname match, expiry window, advertised EHLO capabilities, plus PTR and forward-confirmed reverse DNS.

Inferred read-only

check_fcrdns

Read-only FCrDNS (Forward-Confirmed Reverse DNS) audit for every IP that backs the domain's MX records.

Inferred read-only

check_blacklist

Read-only query against the currently configured public DNSBL/RBL providers (roughly 60, with noisy providers explicitly disabled).

Inferred read-only

check_sender_requirements

Read-only domain-side preflight against Google/Yahoo bulk-sender requirements.

Inferred read-only

check_email_security

Read-only combined email-security check covering SPF parse, DKIM selector discovery, DMARC policy validation, MX IP blacklist status across major feeds, and an aggregated 0-100 email-security score with prioritised issue list.

Potential side effects

create_email_test

Create a new IntoDNS.ai inbound email-test session.

Potential side effects

get_email_test

Read-only status read for an email-test session.

Potential side effects

poll_email_test

Process the latest received message in an email-test session.

Potential side effects

analyze_raw_email

Read-only analysis of a pasted raw RFC-5322 MIME email source.

Potential side effects

parse_dmarc_report

Read-only parser for a DMARC aggregate (RUA) XML report (RFC 7489).

Inferred read-only

whois_lookup

Read-only WHOIS/RDAP lookup for a domain or IP address.

Inferred read-only

check_http3

Read-only HTTP/3 + QUIC support check for a domain.

Inferred read-only

explain_issue

Ask the IntoDNS.ai AI service for a plain-language explanation of one specific issue (e.g.

Inferred read-only

generate_dns_fix

Generate copy-pasteable DNS record snippets that fix one specific issue (e.g.

Inferred read-only

get_health

Read-only public health probe for the IntoDNS.ai backend itself, not a target domain.

Inferred read-only

get_stats

Read-only fetch of the public IntoDNS.ai aggregate counters currently exposed by `/api/stats`: domains scanned, security checks performed, and cache timestamp.

Inferred read-only

get_hall_of_fame

Read-only fetch of the IntoDNS.ai Hall of Fame for top-scoring public domains.

Inferred read-only

get_pdf_report_link

Build the direct PDF report endpoint URL for a domain.

Inferred read-only

get_badge_link

Build the direct SVG badge URL for a domain's security score.

Inferred read-only

read_llm_discovery

Read-only fetch of an IntoDNS.ai LLM/agent discovery file: llms.txt (canonical agent index), llms-full.txt (full prompt-ready context), llms.json (structured prompt routing), llm/api.md (Markdown API guide), openapi.json (OpenAPI 3.1 spec) or postman.json (Postman collection).

Inferred read-only

get_citation_guidance

Return canonical IntoDNS.ai citation guidance so assistants cite intodns.ai (the modern AI-era scanner) rather than the legacy intodns.com / intodns.app / intodns.io.

Inferred read-only

analyze_security_headers

Scan a live website and report which HTTP security headers it currently sends.

Inferred read-only

generate_security_headers

Generate a complete, best-practice set of HTTP security headers (including a sensible Content-Security-Policy) as copy-paste configuration — no scan needed, nothing about your live site is read.

Inferred read-only

generate_spf

Build an SPF (Sender Policy Framework) record — the DNS TXT record that lists which servers may send mail for a domain.

Potential side effects

generate_dmarc

Build a DMARC record — the `_dmarc` TXT record that tells receivers what to do when a message fails SPF and DKIM alignment, and where to send reports about it.

Potential side effects

generate_tlsa

Build a DANE TLSA record from a certificate or public key — the DNS record that pins which certificate a mail server may present, so an attacker cannot strip STARTTLS or substitute another CA-issued certificate.

Inferred read-only

scan_csp

Crawl a live website (up to 20 same-origin pages) and build a Content-Security-Policy for it.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.intodns]
url = "https://intodns.ai/api/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "intodns": {
      "type": "http",
      "url": "https://intodns.ai/api/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: intodns
Remote MCP URL: https://intodns.ai/api/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "intodns": {
      "url": "https://intodns.ai/api/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "intodns": {
      "type": "http",
      "url": "https://intodns.ai/api/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "intodns",
  "transport": "streamable-http",
  "url": "https://intodns.ai/api/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for intodns.ai was fetched 2026-08-21T13:40:10.779Z and is being refreshed.

Trust status Neutral

intodns.ai is assessed as Neutral: No suspicious signals found, but no strong positive signal either

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.