Dnsguard

Check a domain's email authentication: SPF, DKIM, DMARC, BIMI, MX, MTA-STS, TLS-RPT. Score + fixes.

Live service

• Web app and API: https://dnsguard.mike-tusa.workers.dev/
• Pricing: https://dnsguard.mike-tusa.workers.dev/
• Support: [email protected]

Use it from an AI assistant (MCP)

DnsGuard is a remote MCP server (Streamable HTTP) at https://dnsguard.mike-tusa.workers.dev/mcp. Tools: check_domain.

Cursor and Windsurf accept this config:

{
  "mcpServers": {
    "dnsguard": {
      "type": "http",
      "url": "https://dnsguard.mike-tusa.workers.dev/mcp"
    }
  }
}

Cline (MCP Servers > Remote Servers, or cline_mcp_settings.json) needs "type": "streamableHttp":

{
  "mcpServers": {
    "dnsguard": {
      "type": "streamableHttp",
      "url": "https://dnsguard.mike-tusa.workers.dev/mcp"
    }
  }
}

Claude Desktop: open Settings > Connectors, choose "Add custom connector" and paste https://dnsguard.mike-tusa.workers.dev/mcp. Or, for clients that only support local (stdio) servers, use the mcp-remote bridge: npx mcp-remote https://dnsguard.mike-tusa.workers.dev/mcp.

VS Code uses a servers key instead of mcpServers.

The server.json file is the MCP Registry manifest for this server.

Run your own copy

Requires Node.js 22+ and a Cloudflare account.

npm install
npx wrangler@4 dev      # local dev server

wrangler.toml is a template: create your own KV namespaces / D1 databases / rate-limit namespaces and replace the <PLACEHOLDER> values before npx wrangler@4 deploy. Any secrets the Worker reads go in wrangler secret put (or .dev.vars locally), never in the repo.

Optional Worker secrets (leave unset if you do not need them): RAPIDAPI_PROXY_SECRET (only needed if you sell the API through RapidAPI; it must match the X-RapidAPI-Proxy-Secret header RapidAPI adds).

License

MIT (c) Digital Promo Hub. See LICENSE.