← Blog’a dön

← Back to blog

MCP DNS Intelligence: SPF, DMARC, DKIM, and dangling subdomains

,

MCP guide · DNS Intelligence

MCP DNS Intelligence: SPF, DMARC, DKIM, and dangling subdomains
@guardbee/mcp-dns-intelligence

@guardbee/mcp-dns-intelligence lists DNS records, finds SPF/DMARC/DKIM issues, and flags dangling subdomains. It uses Node’s built-in dns/promises — no heavy deps, no API key.

What does it do?

Chat-based DNS and email-auth hygiene. Get findings like ‘no DMARC’, ‘SPF +all’, or ‘dead CNAME to cloud storage’ in plain language.

Who is it for?

  • IT / security and email admins
  • Teams inventorying brand subdomains
  • Agencies running client domain health checks

What it is not

  • Editing DNS zones or provider API automation
  • Full brute-force subdomain discovery (uses a common-name list)

Features

FeatureDescription
DNS enumA, AAAA, MX, NS, TXT, CNAME, SOA
SPF+all / ?all, lookup blowups, duplicates
DMARCPolicy, pct, missing rua
DKIMCommon selector probes
Subdomains60+ names + dangling CNAMEs

MCP tools

ToolDescription
enumerate_dnsRecords + email-auth summary
enumerate_subdomainsSubs + dangling
check_email_securitySPF+DMARC+DKIM
lookup_dnsSingle record type

Install with npm

Global install (handy for Claude Desktop / Cursor):

bash
npm install -g @guardbee/mcp-dns-intelligence

or via npx (recommended with -y in config):

bash
npx -y @guardbee/mcp-dns-intelligence

npm: @guardbee/mcp-dns-intelligence

Needs normal outbound DNS resolution.

Claude Desktop configuration

Config file paths:

  • macOS~/Library/Application Support/Claude/claude_desktop_config.json
  • Windows%APPDATA%\Claude\claude_desktop_config.json
  • Linux~/.config/Claude/claude_desktop_config.json

Merge this block, then restart Claude Desktop:

claude_desktop_config.json
{
  "mcpServers": {
    "guardbee-dns-intelligence": {
      "command": "npx",
      "args": [
        "-y",
        "@guardbee/mcp-dns-intelligence"
      ]
    }
  }
}

Cursor and other MCP clients

In Cursor, add the same command / args / env under Settings → MCP. stdio MCP servers use the same contract as Claude Desktop.

Example prompts in Claude

  1. “Any DNS issues on example.com?”
  2. “Audit email security for example.com — SPF, DMARC, DKIM”
  3. “List subdomains of example.com and flag dangling ones”

Related links

See surface risk with Guardbee

MCP servers speed up security work in chat. Start a 14-day free trial for brand scans and BeeAI.

Start free MCP servers

Frequently asked questions

Is dangling proof of takeover?

It flags risk; it does not exploit. Verify and fix DNS.

API key?

No.

Internal DNS?

Uses whatever your machine’s resolver sees.

Paylaş

Share

Sitenizin risk skorunu görün — 14 gün ücretsiz deneme.

See your site’s risk score — 14-day free trial.