MCP server

Domainposture Official

com.domainposture/mcp

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Remote MCP server: 19 domain-hygiene and email-auth tools (DNS, SPF, DMARC, DKIM, TLS).

Website

At a glance

Type

MCP server

Publisher

domainposture.com (verified by the MCP Registry)

Status

Working at last check

Tools

22

Token cost

About 5,620 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http domainposture https://www.domainposture.com/mcp/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.domainposture]
url = "https://www.domainposture.com/mcp/mcp"

Gemini CLI

{"mcpServers":{"domainposture":{"httpUrl":"https://www.domainposture.com/mcp/mcp"}}}

Cursor

{"mcpServers":{"domainposture":{"url":"https://www.domainposture.com/mcp/mcp"}}}

VS Code

{"servers":{"domainposture":{"type":"http","url":"https://www.domainposture.com/mcp/mcp"}}}

Antigravity

agy mcp add domainposture https://www.domainposture.com/mcp/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"domainposture","server_url":"https://www.domainposture.com/mcp/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"domainposture","server_url":"https://www.domainposture.com/mcp/mcp"}

Tools

• dns_lookup ~311 tokens
  Context lookup: Resolve a single DNS record type (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA, or SRV) and return the raw answers. Use for quick, targeted lookups of one record type; prefer dossier_dns for a full multi-type DNS audit in parallel, or dossier_full for a complete domain health check. Queries
• dossier_ai_crawlers ~282 tokens
  Core dossier check: Report a domain's AI-crawler policy — whether robots.txt allows, blocks, or is silent on the six major AI agents (GPTBot, ClaudeBot, Google-Extended, PerplexityBot, CCBot, meta-externalagent). Use to answer "does this site let AI models train on / retrieve its content?" in a post
• dossier_cors ~352 tokens
  Core dossier check: Send a CORS preflight OPTIONS request to https://<domain>/ and return the access-control-* response headers. Use to verify CORS policy for a specific origin-method pair, or to check whether a domain allows cross-origin requests; provide origin and method to simulate a precise pre
• dossier_ct_log ~201 tokens
  Core dossier check: Discover subdomains visible in Certificate Transparency logs. Use for attack-surface mapping; prefer dossier_full when running a complete audit. Queries crt.sh first, falls back to certspotter; capped at 100 unique subdomains; 10s timeout. Returns a CheckResult with { subdomains[
• dossier_dkim ~322 tokens
  Core dossier check: Probe a domain's DKIM public keys by querying <selector>._domainkey.<domain> for each selector. Use to verify signing configuration or discover active selectors; supply selectors when you know the ESP's selector, or omit to probe six common selectors (default, google, k1, selecto
• dossier_dmarc ~259 tokens
  Core dossier check: Retrieve and parse a domain's DMARC policy from its _dmarc.<domain> TXT record, returning all tags. Use to audit email authentication policy, verify the p (policy) and rua (reporting) settings, or confirm alignment mode; pair with dossier_spf and dossier_dkim for complete email-a
• dossier_dns ~258 tokens
  Core dossier check: Fetch a domain's full DNS profile — A, AAAA, NS, SOA, CAA, and TXT records — all in parallel. Use as the first step of a domain audit or when you need a comprehensive DNS snapshot in one call; prefer dns_lookup for a single record type, or dossier_full for all 10 dossier checks a
• dossier_dnssec ~218 tokens
  Core dossier check: Verify DNSSEC chain-of-trust for a domain (DS, DNSKEY, AD flag). Use to confirm the zone is signed and resolvers accept the chain; prefer dossier_dns for raw record types or dossier_full for the complete audit. Fires Cloudflare DoH DS and DNSKEY queries with DO=1; 8s timeout. Ret
• dossier_full ~291 tokens
  Aggregate dossier check: Run all 10 Domain Dossier checks — dns, mx, spf, dmarc, dkim, tls, redirects, headers, cors, web-surface — in parallel and return all results in a single response. Use when you need a comprehensive domain health snapshot in one call; counts as ONE paywall call regardless of
• dossier_headers ~265 tokens
  Core dossier check: Fetch https://<domain>/ and return all HTTP response headers, with an audit highlighting missing or misconfigured security headers. Use to review CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy; for redirect tracing use dossier_redirect
• dossier_llms_txt ~252 tokens
  Core dossier check: Detect whether a domain publishes an llms.txt at its root — the emerging convention that gives AI agents a curated markdown index of a site's content. Use in a content-posture audit to confirm a site guides (rather than ignores) AI agents. Fetches https://<domain>/llms.txt, 10s t
• dossier_mta_sts ~204 tokens
  Core dossier check: Fetch and validate a domain's MTA-STS policy (mode, mx, max_age, policy id). Use to confirm inbound SMTP is locked to TLS for this domain. Resolves the _mta-sts TXT record, then fetches the policy from mta-sts.<domain>/.well-known/mta-sts.txt; 10s timeout. Returns a CheckResult;
• dossier_mx ~253 tokens
  Core dossier check: Look up a domain's MX (mail exchanger) records and return them sorted ascending by priority. Use when verifying inbound-mail routing or as a precursor to SPF or DMARC checks; prefer dns_lookup with type=MX if you only need the raw DNS answer without the ranked view. Queries Cloud
• dossier_redirects ~242 tokens
  Core dossier check: Trace the full HTTP redirect chain starting from https://<domain>/, recording each hop's status code and destination URL. Use to debug redirect loops, verify HTTP→HTTPS upgrades, or audit link shorteners; stops at 10 hops to prevent infinite loops. Follows Location headers with f
• dossier_security_txt ~252 tokens
  Core dossier check: Verify a domain publishes a security.txt (RFC 9116) at /.well-known/security.txt — the standard machine-readable channel for reporting vulnerabilities. Use in a security audit to confirm researchers have a published disclosure route; its absence is a genuine (minor) audit flag. F
• dossier_spf ~269 tokens
  Core dossier check: Retrieve and parse a domain's SPF record, decomposing it into mechanisms and qualifiers. Use to verify email sender policy, debug delivery failures, or check the 10-lookup limit; pair with dossier_dmarc for full email-auth coverage, or use dns_lookup with type=TXT for the raw rec
• dossier_tls ~257 tokens
  Core dossier check: Fetch and inspect the TLS certificate presented by a domain on port 443, returning chain details and validity period. Use to verify certificate expiry, issuer, Subject Alternative Names, or detect mismatched or self-signed certs; not a full cipher-suite scanner. Performs a TLS ha
• dossier_tlsrpt ~182 tokens
  Core dossier check: Look up a domain's TLS-RPT (SMTP TLS Reporting) policy. Use to confirm the domain receives reports of SMTP-TLS failures. Resolves _smtp._tls.<domain> TXT via Cloudflare DoH; 5s timeout. Returns a CheckResult; not_applicable when no record is published.
• dossier_web_surface ~275 tokens
  Core dossier check: Snapshot a domain's public web surface: robots.txt, sitemap.xml, and the home-page <head> metadata (title, description, OpenGraph, Twitter cards). Use for SEO audits, content discovery, or verifying metadata before sharing; for HTTP headers use dossier_headers, for redirect behav
• dossier_whois ~194 tokens
  Core dossier check: Look up the registrar, creation date, expiry date, and registry statuses for a domain. Use for ownership/expiry audit. Queries WHOIS over TCP/43 via the `whoiser` library; 15s timeout. Returns a CheckResult; not_applicable when the registry refuses or redacts the query (common on
• ip_lookup ~221 tokens
  Context lookup: Resolve an IPv4 or IPv6 address to its geolocation, ASN, org name, and city/country. Use when you need network or location context for a raw IP address; prefer dns_lookup or dossier_dns for hostname resolution. Queries ipinfo.io with a server-side token — the token is never exposed t
• user_agent_parse ~260 tokens
  Context lookup: Parse a User-Agent header string into structured browser, OS, device type, and rendering-engine components. Use to identify client capabilities from a raw UA string, e.g. when analysing server logs or request headers; does not perform any network lookups — entirely local parsing. Run

Browse

• Cloudflare tools
• Web scraping
• SEO
• Website monitoring
• Domains and DNS

Related MCP servers

• how.is domain & IP intelligence
  Pay-per-call DNS, WHOIS, domain age, TLS, email auth, blocklists, IP intel. Free samples.
• Dmarc Spf Audit
  Complete domain email-auth audit in one call: SPF with RFC 7208 lookup counting, DKIM selector pr...
• Japan Public Ledgers MCP
  Tamper-evident daily ledgers of 12 Japanese public-data domains, with cross-ledger entity search.
• Auth Posture — Email Deliverability & Spoofability Audit
  One-call domain audit: MX receiving, SPF/DMARC/DKIM spoofing protection, disposable-address risk.
• PCBLT — Live Checks
  Live DNS, email-auth and redirect checks, HTTP security headers, uptime history, PC hardware prices.
• Domain Mail Check
  Check a domain's email DNS, whether Gmail and Outlook accept its mail, and its registration.
• AgentKit x402 MCP server
  Remote MCP tools for pay-per-call email, domain, SEO and Swedish data utilities (x402).
• ContrastAPI
  55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/com.domainposture/mcp.svg)](https://aptlynx.net/servers/com.domainposture/mcp)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents