TamingDNS
Check SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT, BIMI, DANE and DNSSEC, and analyse email headers.
What it does
TamingDNS is an MCP server, a connector that lets an AI assistant use it as a tool. It is hosted: an assistant connects to it over the internet, nothing to install.
No capability identified yet from its description.
Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence). None of this is a test of the tool.
At a glance
How to connect
As declared in the Official MCP Registry · hosted endpoint tested by Electra Index 3h ago (live check)Hosted endpoint
https://tamingdns.com/mcpstreamable-http
In Claude Code: claude mcp add --transport http tamingdns https://tamingdns.com/mcp
MCP settings (Claude Desktop, Cursor and other MCP clients)
{
"mcpServers": {
"tamingdns": {
"url": "https://tamingdns.com/mcp"
}
}
}Live check
Electra Index connected to the hosted endpoint 3h agoONLINE TamingDNS answered an MCP connection on 06 Nov 2026 and introduced itself as tamingdns 1.0.0 (MCP protocol 2025-11-25).
10 tools offered to AI assistants
check_spf· Check the SPF record for a domain. Returns the raw record, grade (A-F), the terminal `all` qualifier (resolved through redirect= chains), structured findings (NEAR_LOOKUP_LIMIT, LOOKUP_LIMIT_EXCEEDED, PLUS_ALL_DANGEROUS, PTR_MECHANISM_DEPREcheck_dkim· Look up a DKIM public key at <selector>._domainkey.<domain> and validate it. Detects key revocation (empty p=), RSA key length (KEY_TOO_SHORT below 1024, KEY_WEAK below 2048), SHA-1 hash deprecation, and t=y test mode. For selector1/selectocheck_dmarc· Check the _dmarc record for a domain with DUAL discovery: the RFC 7489 §6.6.3 organisational-domain ladder (what major receivers enforce today — grade/verdict anchor to it) AND the RFC 9989 §4.10 DNS Tree Walk (8-query cap, psd=n/y stop rulcheck_tls_rpt· Check the TLS-RPT (SMTP TLS Reporting, RFC 8460) record at _smtp._tls.<domain>. Strict §3 classification: the record must BEGIN with the case-sensitive v=TLSRPTv1 tag, more than one such record means receivers treat TLS-RPT as not implementcheck_mta_sts· Check MTA-STS (RFC 8461) for a domain: the _mta-sts TXT record (strict §3.1 selection — case-sensitive leading v=STSv1, exactly one record, required 1-32 alphanumeric id), the policy file at https://mta-sts.<domain>/.well-known/mta-sts.txtcheck_bimi· Check default._bimi.<domain>: parses the BIMI record, validates the SVG Tiny-PS logo, inspects the VMC chain (expiry, EKU, SCT, issuer-accepted, SAN match, logotype hash), and verifies the DMARC prerequisite (p=quarantine/reject at pct=100check_dane· Check SMTP DANE / TLSA records for a domain (RFC 7672). Resolves the MX hosts (falls back to the apex when none), looks up the TLSA record at _25._tcp.<mx-host> over binary DoH, classifies each record (usage 0-3 / selector 0-1 / matching 0-check_dnssec· Validate a domain's DNSSEC chain of trust. Pulls DS (at the parent), DNSKEY, and RRSIG over binary DoH, walks the chain zone-by-zone (root → TLD → domain) recomputing each DS digest against the published DNSKEYs (RFC 4034 §5.1.4), and crosscheck_mx· Inspect a domain's MX / mail-routing posture. Resolves the apex MX RRset (priority-sorted), and for each host the A/AAAA addresses, PTR + forward-confirmed reverse DNS (FCrDNS), DANE TLSA at _25._tcp.<host>, IP-literal (RFC 5321 §5) and CNAanalyze_email_headers· Analyse a pasted block of raw email headers for spoofing and phishing tells. Input is the raw headers (everything up to the first blank line — "Show original" / "View source"); the message body is not required. Returns structured findings +
What "online" means: the server answered an MCP connection at the time of the check. It is not a guarantee of security, quality or continuous uptime. How we test: we open an MCP session and ask for the tool list, as an AI assistant would. We never run a tool and never send a key. Checked every few days. Method
Is this your server? Monitoring Pro: a check every 30 minutes and an email within the hour when it stops answering. Launch offer: $39.99 once, for life.
Facts & evidence
Each fact shows where it was seen and when.| Fact | Value | Evidence | Source | Last confirmed |
|---|---|---|---|---|
| Hosted endpoint | https://tamingdns.com/mcp | DECLARED | SRC-001 Official MCP Registry | 3h ago |
| Local install (package) | no | DECLARED | SRC-001 Official MCP Registry | 3h ago |
| Remote access (hosted) | yes | DECLARED | SRC-001 Official MCP Registry | 3h ago |
| Website | https://tamingdns.com/mcp | DECLARED | SRC-001 Official MCP Registry | 3h ago |
| Registry status | active | DECLARED | SRC-001 Official MCP Registry | 3h ago |
| Version | 1.0.0 | DECLARED | SRC-001 Official MCP Registry | 3h ago |
| MCP server | yes | DECLARED | SRC-001 Official MCP Registry | 3h ago |
Change history
- NEW06 Nov 2026first seen in the index
Is this page accurate?
Flag it and our robot re-checks the official source. Reports never change a score.Is TamingDNS still online?
Free alerts · no account▲ 0Do you run TamingDNS? Know when it stops answering
For publishers · optionalIts hosted endpoint can be monitored. Monitoring Pro connects every 30 minutes like an AI assistant, emails you within the hour when it stops answering, keeps a 90-day availability history and adds your answer rate to your badge.
Monitoring never changes a score or a rank.
Questions about TamingDNS
How do I connect TamingDNS?
Use the hosted endpoint https://tamingdns.com/mcp in your assistant's MCP settings. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.
What tools does TamingDNS offer?
When Electra Index connected on 06 Nov 2026, it listed 10 tools: check_spf, check_dkim, check_dmarc, check_tls_rpt, check_mta_sts, check_bimi, check_dane, check_dnssec and more. The full list is in "Live check" above.
Is TamingDNS online?
Yes. Its hosted endpoint answered an MCP connection from Electra Index 3h ago.