KitScout

Categories › Web & Browser › Web search engines & search APIs

HTTPfy network & DNS tools

MCP serverVerified domain · httpfy.ioRemote● LiveFree to try

Free DNS, SPF/DKIM/DMARC, TLS, WHOIS, IP/ASN, blocklist, ping, traceroute and port checks. No key.

Install

Remote server: your requests and data go to httpfy.io. Claude Code: claude mcp add --transport http httpfy-network-dns-tools https://httpfy.io/mcp · Claude app: Settings → Connectors → Add custom connector.

What it can do

The tools this server listed when we connected to it, in its own words.

  • dns_lookup — Look up DNS records of one type (A, AAAA, CNAME, MX, NS, SOA, TXT, SRV) for a domain using public resolvers.
  • dns_propagation_check — Query a domain's A or NS records on about 30 well-known public resolvers (all queried from httpfy.io's server; anycast resolvers answer from
  • dnssec_check — Inspect a domain's DNSSEC chain from the root down: DS and DNSKEY records per zone, whether each DS matches a published key, signature expir
  • mx_lookup — List the mail exchanger (MX) records of a domain with their preferences, detect null MX (RFC 7505) and implicit MX, and flag MX targets that
  • spf_lookup — Fetch the SPF record of a domain from its authoritative name server and list its mechanisms (ip4, ip6, include, redirect, all).
  • spf_validate — Validate the SPF record of a domain: RFC 7208 syntax, single-record rule, DNS lookup count across includes and redirect (limit 10, a static
  • domain_whois — Registration data for a domain via RDAP (port-43 WHOIS as fallback): registrar, dates, status and name servers (personal contact data is red
  • domain_expiry — Registration and expiry dates of a domain (RDAP, WHOIS fallback), with the time remaining before it expires or how long ago it expired.
  • ssl_certificate_check — Connect to a domain on port 443 and report a validity verdict (valid, expired, hostname mismatch, self-signed, untrusted, with the reason) p
  • ping — Ping a public host from httpfy servers (4 ICMP echo requests) and report packet loss and round-trip times. Useful to test reachability from
  • traceroute — Traceroute to a public host from httpfy servers (up to 15 hops, one probe per hop; partial results are returned if the time limit is reached
  • ip_whois — Registry data (RDAP) for a public IPv4 or IPv6 address: network range, holder organisation, abuse contact, registry and the announcing ASN.
  • ip_blacklist_check — Check whether a public IPv4 address is listed on about 20 DNS-based blocklists such as Barracuda and SpamCop, showing listed, not listed or
  • mac_vendor_lookup — Identify the manufacturer registered for a MAC address prefix (OUI) using the IEEE registry.
  • asn_lookup — Look up the autonomous system (ASN) for a public IP address, or details for an ASN such as AS15169: name, country, announced prefixes and ad
  • bimi_check — Check the BIMI record of a domain, whether DMARC meets BIMI requirements, the SVG logo (SVG Tiny PS checks) and the VMC/CMC certificate (val
  • caa_check — Find the CAA records that apply to a domain (climbing to parent domains per RFC 8659) and list which certificate authorities may issue certi
  • certificate_transparency_search — List certificates logged in Certificate Transparency for a domain (via crt.sh): issuer, validity window and names, with a summary by issuer.
  • dkim_check — Check DKIM public keys for a domain. With a selector it checks that selector; without one it probes common selectors. Reports key type and R
  • dmarc_check — Find and explain the DMARC record of a domain (policy, pct, rua/ruf, alignment) and flag weaknesses such as p=none or missing external repor
  • dns_report — Full DNS report for a domain: delegation from the root, every authoritative name server checked individually (reachability, recursion, TCP,
  • domain_health_report — Grade a domain A to F across 11 checks (name servers, SOA, DNSSEC, MX, SPF, DMARC, CAA, HTTPS certificate, HTTP to HTTPS redirect, HSTS, IPv
  • mta_sts_check — Check MTA-STS (TXT record and the HTTPS policy file, mode and MX patterns) and the TLS-RPT reporting record for a domain.
  • port_check — Check whether one TCP port on a public host is open, closed or filtered when tested from httpfy servers on the internet.

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools