Idig Dns Api

by kbhave

303 downloads

Not rated

GitHub

About

A remote MCP server deployed on Railway that exposes all 14 Softricks iDig tools to any MCP-compatible AI client. One config entry and your AI assistant has professional DNS diagnostics available in every conversation → https://mcp.softricks.net/sse

Details

Author: kbhave
Downloads: 303
Categories: Developer Tools, Infrastructure

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

Download and install Highlight from highlightai.com/download
Navigate to the plugins tab and select "Add Custom Plugin"
Configure the plugin with the settings below

Plugin Name Idig Dns Api

Command (node, npx, python, etc.)

Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
Enable "Start Automatically" if you want the plugin to start when Highlight launches

Setting up with Cursor

Open Cursor's settings
Navigate to the MCP section
Click "Add new Global MCP server"
Copy and paste the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "idig dns api": {
            "idig-dns": {
                "command": "npx",
                "args": [
                    "mcp-remote",
                    "https://mcp.softricks.net/sse"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "idig dns api": {
            "idig-dns": {
                "command": "npx",
                "args": [
                    "mcp-remote",
                    "https://mcp.softricks.net/sse"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "idig dns api": {
            "idig-dns": {
                "command": "npx",
                "args": [
                    "mcp-remote",
                    "https://mcp.softricks.net/sse"
                ]
            }
        }
    }
}

Setting up with Claude Desktop

Open Claude Desktop's settings
Go to the Integrations tab
Click "Add MCP Server"
Use the configuration below based on your operating system

Note: Make sure Claude Desktop is running before attempting to connect.

JSON

{
    "mcpServers": {
        "idig dns api": {
            "idig-dns": {
                "command": "npx",
                "args": [
                    "mcp-remote",
                    "https://mcp.softricks.net/sse"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "idig dns api": {
            "idig-dns": {
                "command": "npx",
                "args": [
                    "mcp-remote",
                    "https://mcp.softricks.net/sse"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "idig dns api": {
            "idig-dns": {
                "command": "npx",
                "args": [
                    "mcp-remote",
                    "https://mcp.softricks.net/sse"
                ]
            }
        }
    }
}

Setting up with Windsurf

Open Windsurf's preferences
Go to the Integrations section
Click "Add MCP Integration"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "idig dns api": {
            "idig-dns": {
                "command": "npx",
                "args": [
                    "mcp-remote",
                    "https://mcp.softricks.net/sse"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "idig dns api": {
            "idig-dns": {
                "command": "npx",
                "args": [
                    "mcp-remote",
                    "https://mcp.softricks.net/sse"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "idig dns api": {
            "idig-dns": {
                "command": "npx",
                "args": [
                    "mcp-remote",
                    "https://mcp.softricks.net/sse"
                ]
            }
        }
    }
}

Setting up with Cline

Open Cline's settings
Navigate to the Integrations section
Click "Add MCP Server"
Copy and paste the configuration below based on your operating system

Note: Make sure to restart Cline after adding the configuration.

JSON

{
    "mcpServers": {
        "idig dns api": {
            "idig-dns": {
                "command": "npx",
                "args": [
                    "mcp-remote",
                    "https://mcp.softricks.net/sse"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "idig dns api": {
            "idig-dns": {
                "command": "npx",
                "args": [
                    "mcp-remote",
                    "https://mcp.softricks.net/sse"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "idig dns api": {
            "idig-dns": {
                "command": "npx",
                "args": [
                    "mcp-remote",
                    "https://mcp.softricks.net/sse"
                ]
            }
        }
    }
}

Setting up with Goose

Open Goose's preferences
Go to the Integrations tab
Select "MCP Servers"
Click "Add New Server"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "idig dns api": {
            "idig-dns": {
                "command": "npx",
                "args": [
                    "mcp-remote",
                    "https://mcp.softricks.net/sse"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "idig dns api": {
            "idig-dns": {
                "command": "npx",
                "args": [
                    "mcp-remote",
                    "https://mcp.softricks.net/sse"
                ]
            }
        }
    }
}

JSON

{
    "mcpServers": {
        "idig dns api": {
            "idig-dns": {
                "command": "npx",
                "args": [
                    "mcp-remote",
                    "https://mcp.softricks.net/sse"
                ]
            }
        }
    }
}

From the repository

Configure your MCP client (Claude Desktop, Cursor, Windsurf) to use the remote server via SSE at https://mcp.softricks.net/sse using npx mcp-remote. All tools require a token parameter obtained from api.softricks.net/idig/docs.

`dns_lookup`

Look up DNS records for a domain. Record types: a, aaaa, ns, mx, txt, soa, caa, srv, cname, ds, tlsa, https, svcb, any, all.

`email_security_audit`

Full SPF, DKIM, DMARC, and BIMI audit with A-F grade and prioritized fix recommendations.

`dnssec_validate`

Validate DNSSEC chain of trust. Returns: secure / insecure / bogus / indeterminate.

`dnssec_health`

DNSSEC health report: key inventory, signature expiry, algorithm assessment, DS at parent, rollover readiness, full chain of trust (Root → TLD → Domain) with chain_intact flag and broken-link identification, warnings, and recommendations.

`resolve_check`

DNS resolution diagnostics. Returns status: ok / nxdomain / nodata / servfail / refused / timeout / degraded.

`diagnose`

Full diagnosis combining resolution + DNSSEC. Use first when something is broken.

`propagation_check`

Check DNS propagation across 16 global resolvers: Google, Cloudflare, Quad9, China, Korea, Russia.

`mx_check`

MX health + provider detection: Google Workspace, M365, Proofpoint, Zoho, 35+ providers.

`domain_status`

Registrar lock and EPP status. Checks transfer lock, delete lock, serverHold, pendingDelete.

`geo_lookup`

Geolocation and hosting: country, city, ISP, ASN, CDN detection, is_hosting flag.

`ttl_check`

TTL advisory: flags dangerous TTLs and gives step-by-step migration lowering plan.

`zone_consistency`

Check all authoritative nameservers return identical answers. Catches lame delegation and SOA mismatches.

`ssl_check`

SSL certificate: validity, expiry countdown, domain match, issuer, chain completeness.

`subdomain_discover`

Discover subdomains by probing 75 common names plus crt.sh Certificate Transparency logs. Surfaces exposed dev/staging environments.

`blacklist_check`

IP blacklist / DNSBL check. Tests A-record and MX IPs against Spamhaus, Barracuda, SpamCop, SORBS, and more.

`whois_lookup`

Parsed WHOIS: registrar, creation/expiry dates, domain age, nameservers, EPP status, DNSSEC status.

`http_check`

HTTP/HTTPS reachability: status codes, redirect chain, HSTS header, HTTP→HTTPS redirect detection.

`zone_axfr`

AXFR zone transfer vulnerability check. Tests whether any authoritative NS allows public zone transfers (critical misconfiguration).

`dane_validate`

DANE/TLSA validation: cross-validates TLSA DNS records against the live TLS certificate. Supports all four TLSA usage types.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "idig dns api": {
            "idig-dns": {
                "command": "npx",
                "args": [
                    "mcp-remote",
                    "https://mcp.softricks.net/sse"
                ]
            }
        }
    }
}

McpServers

{
    "idig-dns": {
        "command": "npx",
        "args": [
            "mcp-remote",
            "https://mcp.softricks.net/sse"
        ]
    }
}

iDig DNS MCP Server

A remote MCP server exposing 14 professional DNS diagnostic tools from the iDig API
— built by Kedar Bhave ( Softricks ).

Connect any MCP-compatible AI client (Claude Desktop, Cursor, Windsurf, and more) to real DNS infrastructure. Diagnose outages, audit email security, validate DNSSEC, check SSL certificates, trace propagation across 16 global resolvers, and more — all in plain English.

Live endpoint: https://mcp.softricks.net/sse

---

Quickstart

Claude Desktop

Edit ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "idig-dns": {
      "command": "npx",
      "args": [
        "mcp-remote",
        "https://mcp.softricks.net/sse"
      ]
    }
  }
}

Restart Claude Desktop. You'll see idig-dns appear under Connectors.

Cursor / Windsurf

Add to your MCP settings:

{
  "mcpServers": {
    "idig-dns": {
      "command": "npx",
      "args": [
        "mcp-remote",
        "https://mcp.softricks.net/sse"
      ]
    }
  }
}

Authentication

All tools require a token parameter. Get your token at api.softricks.net/idig/docs.

---

Tools

| Tool | Description |
|---|---|
| dns_lookup | Look up any DNS record type: A, AAAA, MX, NS, TXT, SOA, CAA, SRV, CNAME, DS, TLSA |
| resolve_check | Resolution diagnostics — returns ok / nxdomain / servfail / timeout / degraded |
| diagnose | Full diagnosis combining resolution + DNSSEC — start here when something is broken |
| email_security_audit | SPF, DKIM, DMARC audit with A–F grade and prioritized fix recommendations |
| mx_check | MX health + provider detection (Google Workspace, M365, Proofpoint, 35+ providers) |
| dnssec_validate | DNSSEC chain of trust — returns secure / insecure / bogus / indeterminate |
| dnssec_health | Key inventory, signature expiry, algorithm assessment, rollover readiness |
| propagation_check | Check propagation across 16 global resolvers: Google, Cloudflare, Quad9, China, Korea, Russia |
| ssl_check | Certificate validity, expiry countdown, domain match, issuer, chain completeness |
| ttl_check | TTL advisory with step-by-step migration lowering plan |
| zone_consistency | Compare all authoritative nameservers — catches lame delegation and SOA mismatches |
| subdomain_discover | Probe 75 common subdomains — surfaces exposed dev/staging environments |
| geo_lookup | Geolocation, ISP, ASN, CDN detection, hosting flag |
| domain_status | EPP registrar lock status — transfer-ready, delete lock, serverHold, pendingDelete |

---

Example prompts

My emails are going to spam for example.com — token is YOUR_TOKEN

Did my DNS changes propagate yet for example.com? token: YOUR_TOKEN

Run a full security audit on example.com, token YOUR_TOKEN

Is the SSL cert for example.com about to expire? token YOUR_TOKEN

We're migrating example.com to a new host next week — are the TTLs safe? token YOUR_TOKEN

What subdomains does example.com have exposed? token YOUR_TOKEN

---

Architecture

Claude Desktop / Cursor / Windsurf
        │
        │  MCP over SSE
        ▼
mcp.softricks.net          ← Railway (always-on Python/FastMCP server)
        │
        │  HTTPS
        ▼
api.softricks.net/idig     ← AWS Lambda (iDig REST API)
        │
        │  DNS queries
        ▼
Live DNS infrastructure

---

Self-hosting

Clone this repo and deploy your own instance:

git clone https://github.com/kbhave/MCP-Service-iDig
cd MCP-Service-iDig
pip install -r requirements.txt
python mcp_server.py

Or deploy to Railway in one click — connect your GitHub repo and Railway handles the rest.

Requirements:
- Python 3.11+
- mcp==1.26.0
- httpx

---

- iDig REST API docs: https://api.softricks.net/idig/docs
- DNS Doctor AI Agent: https://agent.softricks.net
- iOS App: https://apps.apple.com/us/app/softricks-idig/id522550738

---

License

MIT

No reviews yet — be the first

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.

About

Details

Jump to

Setting up with Highlight

From the repository

dns_lookup

email_security_audit

dnssec_validate

dnssec_health

resolve_check

diagnose

propagation_check

mx_check

domain_status

geo_lookup

ttl_check

zone_consistency

ssl_check

subdomain_discover

blacklist_check

whois_lookup

http_check

zone_axfr

dane_validate

Claude Desktop / Cursor

McpServers

iDig DNS MCP Server

Quickstart

Claude Desktop

Cursor / Windsurf

Authentication

Tools

Example prompts

Architecture

Self-hosting

Related

License

Install

More like this

Sentry

Github

Git

GitLab

Context 7

Playwright

`dns_lookup`

`email_security_audit`

`dnssec_validate`

`dnssec_health`

`resolve_check`

`diagnose`

`propagation_check`

`mx_check`

`domain_status`

`geo_lookup`

`ttl_check`

`zone_consistency`

`ssl_check`

`subdomain_discover`

`blacklist_check`

`whois_lookup`

`http_check`

`zone_axfr`

`dane_validate`