Install our MCP
Use Internet Tools from your AI assistant
The checks on this site are also an MCP server. Add it to your assistant and ask in plain words: it runs the checks against live DNS and reads the findings for you, fixes included.
Server URL (streamable HTTP, no account, no key):
https://internet-tools.net/mcp
Install
Claude (web and desktop)
Settings → Connectors → Add custom connector. Paste the URL above and save.
Claude Code
claude mcp add --transport http internet-tools https://internet-tools.net/mcp
Start a new session afterwards; /mcp should list it as connected.
Cursor, VS Code and others
Add it to the client's MCP configuration:
{ "mcpServers": { "internet-tools": { "url": "https://internet-tools.net/mcp" } } }
Any client that speaks streamable HTTP works; the URL is all it needs.
What it provides8 tools, 1 command
| Tool | What it does | Ask it |
|---|---|---|
| dns_records | Every common record type for a domain (A, AAAA, CNAME, MX, TXT, NS, SOA, CAA), or the PTR for an IP address. Answers come from a public resolver, not a cache. | What DNS records does example.com have? |
| dns_propagation | Compare what five public resolvers (Cloudflare, Google, AdGuard, DNS.SB, NextDNS) answer for one record, to tell whether a DNS change has propagated. | Has the new A record for example.com propagated yet? |
| dnssec | Whether a domain is signed, whether the DS at the registrar matches the published keys, and whether resolvers validate it. Findings include the fix. | Is DNSSEC set up correctly on example.com? |
| email_health | MX, SPF (with the recursive RFC 7208 lookup count), DKIM on common selectors and DMARC for a domain, graded, with findings and fixes. | Check SPF, DKIM and DMARC for example.com and tell me what to fix. |
| blacklist_check | Check an IPv4 address or a domain against the mail blocklists receivers consult (Spamhaus, SpamCop, Barracuda...). Tells a real listing apart from a refused query. | Is 203.0.113.10 on any mail blocklist? |
| whois | Registrar, creation and expiry dates, name servers and status of a domain, from the registry over RDAP, or raw WHOIS for the TLDs that publish no RDAP. | When does example.com expire, and who is the registrar? |
| ssl_certificate | The certificate a host serves on port 443: issuer, validity, days to expiry, whether it covers the name, and the chain sent with it, with a warning when intermediates are missing. | When does the certificate on example.com expire? Is the chain complete? |
| http_headers | Fetch a public URL, follow its redirects, and grade its security headers (HSTS, CSP, X-Frame-Options...). Private and local addresses are refused. | How do the security headers on https://example.com score? |
The audit command
Run every check on a domain and list what to fix, worst first. Claude Code lists it as:
/mcp__internet-tools__audit example.com
In Claude on the web it is under the + menu of the chat, as "Domain audit".
Limits and privacy
- Read-only: every tool looks something up, none of them changes anything.
- Private, reserved and local addresses are refused, at every redirect.
- Rate limited, like the rest of the site: 30 requests a minute per address.
- Nothing is stored beyond what the privacy policy already describes.