Read-only security checks for dApp domains: registry lock, DNSSEC, CAA, SRI, SEAL DNS controls
Connect Remote server
claude mcp add --transport http domain-security https://frontsentinel.com/mcp{
"mcpServers": {
"domain-security": {
"url": "https://frontsentinel.com/mcp"
}
}
}{
"servers": {
"domain-security": {
"type": "http",
"url": "https://frontsentinel.com/mcp"
}
}
}Settings > Connectors > Add custom connector
URL: https://frontsentinel.com/mcpTools 4 found in our last check
scan_domainScores how well a dApp or website domain is protected against hijacking: registrar transfer/update locks, registry lock, DNSSEC, CAA, expiry, nameserver consistency across resolvers, SRI on third-party scripts and the Content-Security-Policy header. Returns a 0-100 score, each c…
check_registry_lockReads the domain's EPP status codes from RDAP and tells whether registry lock (serverUpdateProhibited + serverTransferProhibited) is on, partly on or off, and which registrar-level locks are set.
check_sriLoads a public page and lists every script, stylesheet and preload it pulls in. For third-party files, checks whether an integrity= hash is present and matches, and returns a ready sha384 hash for files that have none.
check_seal_dns_registrarGoes through the 16 controls of the SEAL Security Frameworks certification for DNS & Registrar and marks what public data shows for each: ok, partial, gap, not visible from outside, or a process control the team has to document itself. Includes DNSSEC, CAA, SPF/DMARC/MTA-STS, lo…
Details
| Endpoint | https://frontsentinel.com/mcp (Streamable HTTP) |
| First published | 23 Oct 2026 |
| Last updated | 23 Oct 2026 |
| Registry name | com.frontsentinel/domain-security |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.