Check a domain's email authentication: SPF, DKIM, DMARC, BIMI, MX, MTA-STS, TLS-RPT. Score + fixes.
Connect Remote server
claude mcp add --transport http dnsguard https://dnsguard.mike-tusa.workers.dev/mcp --header "Authorization: Bearer <YOUR_API_KEY>"{
"mcpServers": {
"dnsguard": {
"url": "https://dnsguard.mike-tusa.workers.dev/mcp",
"headers": {
"Authorization": "Bearer <YOUR_API_KEY>"
}
}
}
}{
"servers": {
"dnsguard": {
"type": "http",
"url": "https://dnsguard.mike-tusa.workers.dev/mcp",
"headers": {
"Authorization": "Bearer <YOUR_API_KEY>"
}
}
}
}Settings > Connectors > Add custom connector
URL: https://dnsguard.mike-tusa.workers.dev/mcpReplace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools 1 found in our last check
check_domainAudit the email-authentication DNS records of a domain. Returns a 0–100 score and A–F grade (MX 10, SPF 25, DMARC 30, DKIM 25, BIMI 10, plus up to 5 bonus points for MTA-STS and TLS-RPT, capped at 100), each check's status, published record, findings and recommended fixes, and a…
Headers
| Name | Description |
|---|---|
AuthorizationOptional, secret | Optional. 'Bearer dg_live_…' (free key, Google sign-in on the website) or 'Bearer DNSG-…' (DnsGuard Pro) for higher limits. Works without a key. |
Details
| Endpoint | https://dnsguard.mike-tusa.workers.dev/mcp (Streamable HTTP) |
| First published | 18 Oct 2026 |
| Last updated | 18 Oct 2026 |
| Registry name | dev.workers.mike-tusa.dnsguard/dnsguard |
More communication servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.