Connects Claude to nslookup.io's DNS infrastructure with 11 tools covering lookups across all 53 DNS record types, propagation checks across 18 global servers, and SSL certificate validation. The standout is dns_health, which runs 39 automated checks across DNSSEC, MX configuration, nameserver hygiene, and CAA records with severity scoring. Also includes security scanning for SPF/DKIM/DMARC, multi-region uptime checks from 7 locations, and GEO scoring to measure how well a domain presents itself to AI crawlers. Available as a remote connector at mcp.nslookup.io/mcp or via npx locally. Reach for this when you're debugging DNS issues, auditing domain security posture, or need to verify propagation without leaving your editor.
claude mcp add --transport http nslookup https://mcp.nslookup.io/mcpRun in your terminal. Add --scope user to make it available in every project.
Review the command, arguments, and environment values before installing — MCP servers run with your local permissions.
Verified live against the running server on Jun 10, 2026.
dns_lookupLook up all common DNS records (A, AAAA, NS, MX, TXT, CNAME, SOA) for a domain. Returns results from a specified DNS server.2 paramsLook up all common DNS records (A, AAAA, NS, MX, TXT, CNAME, SOA) for a domain. Returns results from a specified DNS server.
domain*stringserverstringcloudflare · cloudflare2 · google · quad9 · opendns · authoritativedns_recordLook up a specific DNS record type for a domain. Supports 53 record types including A, AAAA, MX, TXT, CNAME, SOA, PTR, CAA, SRV, DNSKEY, DS, TLSA, HTTPS, SPF, and more.3 paramsLook up a specific DNS record type for a domain. Supports 53 record types including A, AAAA, MX, TXT, CNAME, SOA, PTR, CAA, SRV, DNSKEY, DS, TLSA, HTTPS, SPF, and more.
type*stringA · AAAA · AFSDB · APL · AXFR · CAAdomain*stringserverstringcloudflare · cloudflare2 · google · quad9 · opendns · authoritativedns_propagationCheck DNS propagation for a domain across 18+ global DNS servers (Cloudflare, Google, Quad9, OpenDNS, regional servers, and authoritative nameservers). Shows if DNS changes have propagated worldwide.2 paramsCheck DNS propagation for a domain across 18+ global DNS servers (Cloudflare, Google, Quad9, OpenDNS, regional servers, and authoritative nameservers). Shows if DNS changes have propagated worldwide.
domain*stringrecordType*stringA · AAAA · AFSDB · APL · AXFR · CAAwebserversGet the IP addresses (both IPv4 and IPv6) for a domain by looking up A and AAAA records. Also returns the punycode and unicode domain representations.1 paramsGet the IP addresses (both IPv4 and IPv6) for a domain by looking up A and AAAA records. Also returns the punycode and unicode domain representations.
domain*stringssl_certificateCheck the SSL/TLS certificate for a domain. Returns issuer, expiry date, days until expiry, certificate chain validity, cipher strength, SAN domains, fingerprint, and TLS protocol version.1 paramsCheck the SSL/TLS certificate for a domain. Returns issuer, expiry date, days until expiry, certificate chain validity, cipher strength, SAN domains, fingerprint, and TLS protocol version.
domain*stringbimi_vmcCheck BIMI (Brand Indicators for Message Identification) and VMC (Verified Mark Certificate) for a domain. Returns BIMI DNS record status, VMC certificate details, logo URL, trademark info, and expiry.1 paramsCheck BIMI (Brand Indicators for Message Identification) and VMC (Verified Mark Certificate) for a domain. Returns BIMI DNS record status, VMC certificate details, logo URL, trademark info, and expiry.
domain*stringsecurity_scanRun a security scan on a domain to detect DNS misconfigurations, missing SPF/DKIM/DMARC records, cookie security issues, and other web security vulnerabilities. Returns findings with severity levels (critical, high, medium, low, info).1 paramsRun a security scan on a domain to detect DNS misconfigurations, missing SPF/DKIM/DMARC records, cookie security issues, and other web security vulnerabilities. Returns findings with severity levels (critical, high, medium, low, info).
domain*stringuptime_checkPerform a one-time HTTP uptime check on a URL from a single location. Returns whether the site is up or down, HTTP status code, and response time in milliseconds. For multi-location checks, use uptime_check_multi instead.2 paramsPerform a one-time HTTP uptime check on a URL from a single location. Returns whether the site is up or down, HTTP status code, and response time in milliseconds. For multi-location checks, use uptime_check_multi instead.
url*stringtimeoutnumberuptime_check_multiCheck if a website is up or down from 7 global locations simultaneously: Amsterdam, Sydney, London, Frankfurt, Delhi, Warsaw, and South Carolina. Returns status, response time, and HTTP status code for each location.2 paramsCheck if a website is up or down from 7 global locations simultaneously: Amsterdam, Sydney, London, Frankfurt, Delhi, Warsaw, and South Carolina. Returns status, response time, and HTTP status code for each location.
url*stringtimeoutnumberdns_healthRun a comprehensive DNS health audit on a domain — 39 checks across 7 categories: DNSSEC (chain of trust, algorithms, validation), MX & email (PTR, MTA-STS, redundancy), DNS hygiene (SPF conflicts, wildcards, apex CNAME), TTL & SOA configuration, nameserver setup (diversity, l...1 paramsRun a comprehensive DNS health audit on a domain — 39 checks across 7 categories: DNSSEC (chain of trust, algorithms, validation), MX & email (PTR, MTA-STS, redundancy), DNS hygiene (SPF conflicts, wildcards, apex CNAME), TTL & SOA configuration, nameserver setup (diversity, l...
domain*stringgeo_checkerCheck a domain's GEO (Generative Engine Optimization) score — how well the site is optimized for AI search engines like ChatGPT, Gemini, Claude, and Perplexity. Returns three scores (Technical Readiness, Entity Readiness, Answer Readiness), AI crawler access status, structured...1 paramsCheck a domain's GEO (Generative Engine Optimization) score — how well the site is optimized for AI search engines like ChatGPT, Gemini, Claude, and Perplexity. Returns three scores (Technical Readiness, Entity Readiness, Answer Readiness), AI crawler access status, structured...
domain*string
MCP Server for nslookup.io
DNS lookups, SSL certificate checks, security scanning, GEO (AI readiness) scoring, and domain intelligence — via the Model Context Protocol.
Website · API Docs · npm · Contact
| Tool | Description |
|---|---|
dns_lookup | Look up all common DNS records (A, AAAA, NS, MX, TXT, CNAME, SOA) for a domain |
dns_record | Look up a specific DNS record type — supports all 53 types (HTTPS, DNSKEY, TLSA, SPF, etc.) |
dns_propagation | Check DNS propagation across 18+ global servers (Cloudflare, Google, Quad9, regional, authoritative) |
webservers | Get IPv4 and IPv6 addresses for a domain |
| Tool | Description |
|---|---|
dns_health | NEW — Run a DNS health audit (39 checks across DNSSEC, MX, hygiene, TTL, nameservers, CAA, operational maturity) with severity-weighted scoring |
ssl_certificate | Check SSL/TLS certificate — issuer, expiry, chain validity, cipher strength, SAN domains, TLS version |
bimi_vmc | Check BIMI record and VMC (Verified Mark Certificate) — logo URL, trademark info, certificate expiry |
security_scan | Scan a domain for security issues — SPF/DKIM/DMARC, cookie security, DNS misconfigurations |
uptime_check | One-time HTTP uptime check — status, response time, HTTP status code |
uptime_check_multi | Check if a site is up from 7 global locations — Amsterdam, Sydney, London, Frankfurt, Delhi, Warsaw, South Carolina |
| Tool | Description |
|---|---|
geo_checker | Check a domain's GEO (Generative Engine Optimization) score — AI crawler access, structured data, entity signals, content extractability, and prioritized recommendations |
The easiest way to get started. No installation required.
nslookuphttps://mcp.nslookup.io/mcpDone — Claude can now use all 11 DNS, security, and health tools. Try asking "Run a DNS health check on github.com".
nslookuphttps://mcp.nslookup.io/mcpDone — ChatGPT can now perform DNS lookups, certificate checks, and security scans.
Any MCP-compatible client that supports Streamable HTTP transport can connect using:
https://mcp.nslookup.io/mcp
No API key or authentication required.
If you prefer running the server locally (requires Node.js 18+), add to your claude_desktop_config.json:
{
"mcpServers": {
"nslookup": {
"command": "npx",
"args": ["-y", "@nslookup-io/mcp-server"]
}
}
}
Available globally (all projects):
claude mcp add nslookup --scope user -- npx -y @nslookup-io/mcp-server
Or for a specific project only:
claude mcp add nslookup --scope project -- npx -y @nslookup-io/mcp-server
Add to your Cursor MCP settings (.cursor/mcp.json):
{
"mcpServers": {
"nslookup": {
"command": "npx",
"args": ["-y", "@nslookup-io/mcp-server"]
}
}
}
Add to your Windsurf MCP config (~/.codeium/windsurf/mcp_config.json):
{
"mcpServers": {
"nslookup": {
"command": "npx",
"args": ["-y", "@nslookup-io/mcp-server"]
}
}
}
A, AAAA, AFSDB, APL, AXFR, CAA, CDNSKEY, CDS, CERT, CNAME, CSYNC, DHCID, DLV, DNAME, DNSKEY, DS, EUI48, EUI64, HINFO, HIP, HTTPS, IPSECKEY, IXFR, KEY, KX, LOC, MX, NAPTR, NS, NSEC, NSEC3, NSEC3PARAM, NXT, OPENPGPKEY, OPT, PTR, RP, RRSIG, SIG, SMIMEA, SOA, SPF, SRV, SSHFP, SVCB, TA, TKEY, TLSA, TSIG, TXT, URI, ZONEMD
cloudflare, google, quad9, opendns, authoritative, and regional servers in South Africa, Australia, India, Netherlands, Canada, USA, Brazil, Ukraine, Russia.
| Environment Variable | Default | Description |
|---|---|---|
NSLOOKUP_API_URL | https://www.nslookup.io | Base URL for the nslookup.io API |
Once connected, try asking your AI assistant:
We'd love to hear from you! At nslookup.io, we're building a fast, reliable, and free DNS lookup tool and monitoring platform for everyone — from developers and sysadmins to everyday internet users.
Your feedback is what helps us improve. Whether you've spotted a bug, have a feature idea, or just want to share your thoughts — we're listening. Contact us.
Apache 2.0
com.exploit-intel/eip-mcp
dmontgomery40/pentest-mcp
pantheon-security/notebooklm-mcp-secure
cyanheads/pentest-mcp-server
io.github.akhilucky/ai-firewall-mcp