Public DNS, mail, TLS, and web diagnostics plus Looking Glass probes via remote MCP.
| Endpoint | https://mcp.dotmoose.com/tools/mcp (streamable-http) |
|---|---|
| Registry version | 1.0.0 |
| Now | 40 tools · grade C (65) · pin ts_eafc80fdae93e781018c4e85bc1fe0f3 · protocol 2025-06-18 |
| First / last listed | 2026-10-28 05:19 UTC / 2026-10-28 05:19 UTC |
| Grade over time | 2026-10-28: C (65), 40 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: check_dns_propagation check_domain_delegation check_dnssec trace_cname_chain lookup_domain_rdap lookup_ip_info check_forward_confirmed_rdns check_tls_certificate check_tls_configuration check_http_chain check_http_status measure_web_performance check_website_security check_security_txt check_compression check_ipv6_website check_favicon audit_page_links check_page_metadata test_robots_txt validate_sitemap check_spf check_dmarc check_dkim check_mx_records check_smtp_starttls check_mta_sts check_tls_rpt check_bimi check_ip_blacklists looking_glass_ping looking_glass_traceroute looking_glass_path calculate_subnet ip_range_to_cidr calculate_bandwidth estimate_storage_growth estimate_backup_retention build_spf_record build_dmarc_record
check_dns_propagation | Check A, AAAA, MX, NS, and TXT answers for a hostname at the Cloudflare, Google, and Quad9 resolvers. params: domain* |
check_domain_delegation | List the delegation nameservers for a domain and the A and AAAA glue addresses for each one. params: domain* |
check_dnssec | Check the DS and DNSKEY records for a domain and whether a validating resolver sets the AD flag on its answers. params: domain* |
trace_cname_chain | Follow the CNAME chain for a hostname, up to 12 aliases, and report loops. params: domain* |
lookup_domain_rdap | Return the public RDAP registration summary for a domain. Registrant contact fields are not returned. params: domain* |
lookup_ip_info | Resolve a hostname, or take an IP address directly, and return RDAP network data and the ASN for each public address. params: target* |
check_forward_confirmed_rdns | Check the PTR record for an IP address and whether the name it returns resolves back to the same address. params: ip* |
check_tls_certificate | Connect to a host on port 443 and return the TLS version, cipher, and certificate details including expiry and subject alternative names. params: target* |
check_tls_configuration | Observe which TLS protocol versions a host accepts and summarize its TLS configuration. params: target* |
check_http_chain | Fetch a URL and return each redirect hop with status codes and response headers. params: target* |
check_http_status | Fetch a URL and return the final status after following redirects. params: target* |
measure_web_performance | Measure DNS, connect, TLS, and time to first byte for a URL from the DotMoose diagnostic node. This is a network timing sample. It is not a browser rendering benchmark. params: target* |
check_website_security | Review the security controls a site exposes in its public responses, including security headers, cookie attributes, and CORS policy. params: target* |
check_security_txt | Fetch and parse the security.txt file for a site. params: target* |
check_compression | Check whether a URL is served with gzip or Brotli compression and report the sizes with and without compression. params: target* |
check_ipv6_website | Check whether a site answers over IPv6 and compare the result with IPv4. params: target* |
check_favicon | Locate the favicon a site declares and report its URL, type, and size. params: target* |
audit_page_links | Check up to 20 same-origin links found on one page and report the status of each. This is a single page check, not a site crawl. params: target* |
check_page_metadata | Return the title, meta description, canonical URL, headings, hreflang entries, and JSON-LD types found on a page. params: target* |
test_robots_txt | Fetch the robots.txt for a site and test whether a user agent may fetch a given path. params: target*, path, userAgent |
validate_sitemap | Fetch the sitemap for a site and report its structure, URL count, and fetch errors. params: target* |
check_spf | Read the SPF record for a domain and count the DNS lookup terms in the full include chain against the limit of 10. params: domain* |
check_dmarc | Read the DMARC record published at _dmarc for a domain. params: domain* |
check_dkim | Read the DKIM public key record for a domain and selector. params: domain*, selector* |
check_mx_records | List the MX records for a domain with the A and AAAA addresses of each mail server. params: domain* |
check_smtp_starttls | Connect to the mail servers for a domain on port 25 and report the banner, EHLO response, and STARTTLS support. No mail is sent and no recipient is tested. params: domain* |
check_mta_sts | Read the MTA-STS DNS record and the published policy file for a domain. params: domain* |
check_tls_rpt | Read the TLS-RPT record published at _smtp._tls for a domain. params: domain* |
check_bimi | Read the BIMI record for a domain and selector. The selector defaults to default. params: domain*, selector |
check_ip_blacklists | Check an IP address, or the public addresses a hostname resolves to, against the reviewed DNS blacklist providers. params: target* |
looking_glass_ping | Send four ICMP echo probes from the DotMoose network in Canada to a public host or IP address. params: target*, family |
looking_glass_traceroute | Trace the route from the DotMoose network in Canada to a public host or IP address, up to 20 hops with one probe per hop. params: target*, family |
looking_glass_path | Sample the route from the DotMoose network in Canada to a public host or IP address, up to 20 hops with three probes per hop. params: target*, family |
calculate_subnet | Compute the network address, broadcast or last address, and address counts for an IPv4 or IPv6 CIDR block. params: cidr* |
ip_range_to_cidr | Convert an IPv4 or IPv6 address range into the smallest set of CIDR blocks that covers it exactly. params: start*, end* |
calculate_bandwidth | Convert a link speed into maximum daily and monthly transfer, convert monthly transfer into an average rate, and estimate how long a file transfer takes at a given rate. params: linkMbps, monthlyTransferGb, fileSizeGb |
estimate_storage_growth | Project storage size over up to 120 months at a constant monthly growth rate. params: currentGb*, monthlyGrowthPercent*, months* |
estimate_backup_retention | Estimate backup storage for a grandfather-father-son retention plan where weekly and monthly copies are full backups and daily copies are increments. params: fullBackupGb*, dailyIncrementGb*, dailyCopies*, weeklyCopies*, monthlyCopies* |
build_spf_record | Assemble an SPF record from IP ranges, includes, and the a and mx mechanisms, and count its DNS lookup terms against the limit of 10. params: ipv4, ipv6, includes, useA, useMx, redirectDomain, allQualifier |
build_dmarc_record | Assemble a DMARC record from a policy, optional subdomain policy, report addresses, and enforcement percentage. params: policy*, subdomainPolicy, rua, ruf, percent, failureReporting |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.