MCP guide · DNS Intelligence

@guardbee/mcp-dns-intelligence lists DNS records, finds SPF/DMARC/DKIM issues, and flags dangling subdomains. It uses Node’s built-in dns/promises — no heavy deps, no API key.
What does it do?
Chat-based DNS and email-auth hygiene. Get findings like ‘no DMARC’, ‘SPF +all’, or ‘dead CNAME to cloud storage’ in plain language.
Who is it for?
- IT / security and email admins
- Teams inventorying brand subdomains
- Agencies running client domain health checks
What it is not
- Editing DNS zones or provider API automation
- Full brute-force subdomain discovery (uses a common-name list)
Features
| Feature | Description |
|---|---|
| DNS enum | A, AAAA, MX, NS, TXT, CNAME, SOA |
| SPF | +all / ?all, lookup blowups, duplicates |
| DMARC | Policy, pct, missing rua |
| DKIM | Common selector probes |
| Subdomains | 60+ names + dangling CNAMEs |
MCP tools
| Tool | Description |
|---|---|
enumerate_dns | Records + email-auth summary |
enumerate_subdomains | Subs + dangling |
check_email_security | SPF+DMARC+DKIM |
lookup_dns | Single record type |
Install with npm
Global install (handy for Claude Desktop / Cursor):
npm install -g @guardbee/mcp-dns-intelligenceor via npx (recommended with -y in config):
npx -y @guardbee/mcp-dns-intelligenceNeeds normal outbound DNS resolution.
Claude Desktop configuration
Config file paths:
- macOS
~/Library/Application Support/Claude/claude_desktop_config.json - Windows
%APPDATA%\Claude\claude_desktop_config.json - Linux
~/.config/Claude/claude_desktop_config.json
Merge this block, then restart Claude Desktop:
{
"mcpServers": {
"guardbee-dns-intelligence": {
"command": "npx",
"args": [
"-y",
"@guardbee/mcp-dns-intelligence"
]
}
}
}Cursor and other MCP clients
In Cursor, add the same command / args / env under Settings → MCP. stdio MCP servers use the same contract as Claude Desktop.
Example prompts in Claude
- “Any DNS issues on example.com?”
- “Audit email security for example.com — SPF, DMARC, DKIM”
- “List subdomains of example.com and flag dangling ones”
Related links
See surface risk with Guardbee
MCP servers speed up security work in chat. Start a 14-day free trial for brand scans and BeeAI.
Frequently asked questions
Is dangling proof of takeover?
It flags risk; it does not exploit. Verify and fix DNS.
API key?
No.
Internal DNS?
Uses whatever your machine’s resolver sees.