Idig DNS
Professional DNS diagnostics: 14 tools for DNS, DNSSEC, email security, SSL, and propagation.
Connector by softricks.net · Domain verified by the MCP Registry
Install
Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install connector/softricks-net-idig-dns
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Remote endpoint
https://mcp.softricks.net/sseRemote (SSE)
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.
- Tools
- 15 read · 2 write · 0 delete · 2 not yet classified
- Secrets
- None asked for
- Install scripts
- Nothing to install (hosted)
- Runs as
- Hosted (remote endpoint)
Tools by what they do 19
Read from the source code; the running server may list different tools.
Read 15 · Look things up without changing anything.
blacklist_checkdane_validatedns_lookupdnssec_healthdnssec_validatedomain_statusgeo_lookuphttp_checkmx_checkpropagation_checkssl_checksubdomain_discover
Show 3 more tools
ttl_checkwhois_lookupzone_consistency
Write 2 · Create, change, send or run things.
email_security_auditresolve_check
Not yet classified 2 · We could not tell from the name and description.
diagnosezone_axfr
Network hosts it talks to 1
mcp.softricks.net· found in remote endpoint, install command
Tools (19)
Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].
blacklist_checkIP blacklist / DNSBL check. Tests A-record and MX IPs against Spamhaus, Barracuda, SpamCop, SORBS, and more.
dane_validateDANE/TLSA validation: cross-validates TLSA DNS records against the live TLS certificate. Supports all four TLSA usage types.
diagnoseFull diagnosis combining resolution + DNSSEC. Use first when something is broken.
dns_lookupLook up DNS records for a domain. Record types: a, aaaa, ns, mx, txt, soa, caa, srv, cname, ds, tlsa, https, svcb, any, all.
dnssec_healthDNSSEC health report: key inventory, signature expiry, algorithm assessment, DS at parent, rollover readiness, full chain of trust (Root → TLD → Domain) with chain_intact flag and broken-link identification, warnings, and recommendations.
dnssec_validateValidate DNSSEC chain of trust. Returns: secure / insecure / bogus / indeterminate.
domain_statusRegistrar lock and EPP status. Checks transfer lock, delete lock, serverHold, pendingDelete.
email_security_auditFull SPF, DKIM, DMARC, and BIMI audit with A-F grade and prioritized fix recommendations.
geo_lookupGeolocation and hosting: country, city, ISP, ASN, CDN detection, is_hosting flag.
http_checkHTTP/HTTPS reachability: status codes, redirect chain, HSTS header, HTTP→HTTPS redirect detection.
mx_checkMX health + provider detection: Google Workspace, M365, Proofpoint, Zoho, 35+ providers.
propagation_checkCheck DNS propagation across 16 global resolvers: Google, Cloudflare, Quad9, China, Korea, Russia.
resolve_checkDNS resolution diagnostics. Returns status: ok / nxdomain / nodata / servfail / refused / timeout / degraded.
ssl_checkSSL certificate: validity, expiry countdown, domain match, issuer, chain completeness.
subdomain_discoverDiscover subdomains by probing 75 common names plus crt.sh Certificate Transparency logs. Surfaces exposed dev/staging environments.
Show 4 more tools
ttl_checkTTL advisory: flags dangerous TTLs and gives step-by-step migration lowering plan.
whois_lookupParsed WHOIS: registrar, creation/expiry dates, domain age, nameservers, EPP status, DNSSEC status.
zone_axfrAXFR zone transfer vulnerability check. Tests whether any authoritative NS allows public zone transfers (critical misconfiguration).
zone_consistencyCheck all authoritative nameservers return identical answers. Catches lame delegation and SOA mismatches.
Signals
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Last commit
- Mar 25, 2026 (7 months ago)
- Last release
- Feb 27, 2026 (8 months ago)
From GitHub (fetched Oct 24, 2026).
Details
- Registry name
net.softricks/idig-dns- Version
- 1.0.0
- Auth
- Auth not stated
- License
- License unknown
- Repository
- github.com/kbhave/MCP-Service-iDig
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
Cite this page
Idig DNS MCP server. Agent Mart. https://agentmart.dev/connectors/softricks-net-idig-dns (last updated 2026-10-24)