Front Sentinel
Read-only security checks for dApp domains: registry lock, DNSSEC, CAA, SRI, SEAL DNS controls
| Endpoint | https://frontsentinel.com/mcp (streamable-http) |
|---|---|
| Registry version | 1.0.0 |
| Now | 4 tools · grade A (99) · pin ts_24892525d1cb3793e21216b6f926882a · protocol 2025-06-18 |
| First / last listed | 2026-10-25 04:00 UTC / 2026-10-25 04:00 UTC |
| Grade over time | 2026-10-25: A (99), 4 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: scan_domain check_registry_lock check_sri check_seal_dns_registrar
scan_domain | Scores how well a dApp or website domain is protected against hijacking: registrar transfer/update locks, registry lock, DNSSEC, CAA, expiry, nameserver consistency across resolvers, SRI on third-party scripts and the Content-Security-Policy header. Returns a 0-100 score, each check with pass/fail/unknown and advice. Results are cached for an hour. params: domain* |
check_registry_lock | Reads the domain's EPP status codes from RDAP and tells whether registry lock (serverUpdateProhibited + serverTransferProhibited) is on, partly on or off, and which registrar-level locks are set. params: domain* |
check_sri | Loads a public page and lists every script, stylesheet and preload it pulls in. For third-party files, checks whether an integrity= hash is present and matches, and returns a ready sha384 hash for files that have none. params: url* |
check_seal_dns_registrar | Goes through the 16 controls of the SEAL Security Frameworks certification for DNS & Registrar and marks what public data shows for each: ok, partial, gap, not visible from outside, or a process control the team has to document itself. Includes DNSSEC, CAA, SPF/DMARC/MTA-STS, locks, expiry and security.txt. params: domain* |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.