Categories › Security › Secrets & identity
Domain checks: SPF, DKIM, DMARC, BIMI, MTA-STS, SSL/TLS and HTTP security headers.
Remote server: your requests and data go to mcp.modernmustardseed.com. Claude Code: claude mcp add --transport http domain-health https://mcp.modernmustardseed.com/domain-health · Claude app: Settings → Connectors → Add custom connector.
The tools this server listed when we connected to it, in its own words.
check_email_auth — Explain in plain words whether email from a domain will reach the inbox and whether others can forge it. Checks MX, SPF with every include echeck_ssl — Check the HTTPS certificate and TLS setup of a domain on port 443: issuer, expiry date and days left, whether the chain is complete and truscheck_security_headers — Read the HTTP security headers a domain's homepage sends, as a browser receives them, and grade each: Strict-Transport-Security, Content-Seccheck_domain_registration — Read a domain's public registration record from its registry over RDAP (no WHOIS scraping): registrar, creation, expiry and last-change datefull_domain_report — Run every Domain Health check on one domain at once (email authentication, SSL and TLS, security headers, registration and DNSSEC) and answeNot tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.