Connect
Add this remote HTTP MCP server in a client that supports remote MCP connectors. No account, API key or sign-in is required.
https://dns-checker.zovo.one/mcp
Enter the server URL as a connector, rather than opening it as a normal web page. The server exposes the two tools below. You supply a domain name, not a mailbox address, password or private DNS-server address.
Check email authentication
check_email_dns takes one public domain and optionally up to five DKIM selectors.
| Input | Meaning |
|---|---|
domain | Required string of 1–253 characters. Use a domain without a scheme or path, such as example.com. Internationalized domain names are accepted. |
dkim_selectors | Optional array of up to five selector names, each 1–63 characters. For example, ["selector1", "selector2"]. Ask the mail provider or inspect a message's DKIM signature to find the selector. The tool does not discover unknown selectors. |
{"domain":"example.com","dkim_selectors":["selector1","selector2"]}
The result includes MX hosts and null-MX status, SPF records and a DNS-lookup count against the limit of ten, DMARC policy and reporting/alignment settings, DKIM findings for the supplied selectors, and pass/warn/fail findings with suggested fixes. An incomplete SPF analysis is marked incomplete; its count may be a lower bound. These findings describe published configuration, not the delivery of a particular email.
Look up record types
lookup_dns_records takes one domain and an optional list of record types.
| Input | Meaning |
|---|---|
domain | Required domain string of 1–253 characters, such as example.com or mail.example.com. |
types | Optional array containing A, AAAA, MX, NS, TXT, CNAME, CAA or SOA. Omit it to request all eight supported types. |
{"domain":"example.com","types":["MX","NS","TXT"]}
The result groups the returned records by type and includes record names, TTLs and values, counts, source information and any relevant findings. It is not a reverse-IP, WHOIS or registrar lookup.
CSV reports
Both tools return a CSV link in their text result and in structuredContent.downloads.csv. The app view also offers the download. Open the returned link to download the report; it contains the full report even when the model-facing record preview is shortened.
Hosted reports are stored under unguessable links for about one hour. Anyone with a link can read its report until it expires, so share it deliberately. Generate a new report if a download has expired. Email reports contain the DNS source, findings and suggested fixes; record reports contain type, name, TTL and data columns.
Example requests
- Check whether example.com's SPF record exceeds the ten DNS-lookup limit.
- What is the DMARC policy and reporting address for example.com?
- Check the DKIM keys for selectors selector1 and selector2 on example.com.
- Show the MX and NS records for example.com.
Limits and data sources
Queries use Cloudflare DNS-over-HTTPS, with Google Public DNS as a fallback. Only public-resolver answers are visible. The connector may reuse successful cached answers for 60 seconds to one hour, based on the response TTL. Results identify the resolver source and retrieval time; DNS propagation and resolver caching can make different networks show different answers.
Private/internal DNS visibility, IP literals, full deliverability testing and sending or receiving email are out of scope. A missing DKIM key may mean the selector is wrong. The tool does not determine what a specific receiving server will decide. DNS answers can change after a check.
Troubleshooting
- For an invalid-domain error, provide a public domain such as example.com without an email address, port or query string.
- If both public resolvers fail, check the spelling and try again in a minute. A resolver failure does not prove that the domain has no records.
- If DNS was recently changed, inspect the source and retrieval time, allow for propagation and caching, then repeat the check.
- If DKIM is missing, confirm the selector with the mail provider. Supply at most five selectors.
- If a CSV link has expired, rerun the tool to get a new report.
Privacy and support
The connector receives tool arguments, not conversation history. Domain queries go to public DNS resolvers. Reports contain public DNS data and use the one-hour download retention described above. Do not put secrets or sensitive personal data in tool arguments.