[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_120":121},"routes/modules.$creator.$moduleId",{"_14":15,"_16":17,"_18":19,"_20":21},"routes/modules.$creator.$moduleId.endpoints",{"_11":12,"_13":-5},"error","Module not found","tools","module",{"_20":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":26,"_36":37,"_38":-5,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":57,"_58":-5,"_59":51,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_74":75,"_76":77,"_78":79,"_80":81,"_82":-5,"_83":-5,"_84":-5,"_85":86,"_87":-5,"_88":45,"_89":90,"_91":92,"_93":94,"_95":96,"_97":98,"_99":100},"apiUrl","https://odel.app/api","creator","venomseven","moduleId","nslookup","@venomseven/nslookup","displayName","NsLookup","tagline","DNS lookups, health reports, SSL certs, security scans, GEO scoring, uptime checks","iconKey","external/08685c2e34f0540ede3dc56e112fbfb8e5fdf18e0d15996c0b53236aa845bf69.png","category","remote","status","published","visibility","public","metaDescription","deploymentType","external","workerName","bindingName","mcpConfig","{\"url\":\"https://mcp.nslookup.io/mcp\",\"transport\":\"streamable-http\",\"authType\":\"none\"}","pricingModel","free","priceCredits",0,"creatorUserId","system:external-import","createdAt",1783399049000,"updatedAt",1790466411000,"sourceRegistry","official-mcp-registry","sourceUrl","https://registry.modelcontextprotocol.io/v0/servers?search=io.github.venomseven%2Fnslookup","sourceVerified",true,"sourceMissingSince","importedAt","upstreamStars",23,"upstreamUpdatedAt",1784312571000,"detectedTransport","streamable-http","detectedAuthType","none","probeStatus","ok","lastProbedAt",1790452687000,"githubRepoUrl","https://github.com/NsLookup-io/nslookup-mcp","githubRepoFullName","NsLookup-io/nslookup-mcp","releaseId","ext-nslookup-io-nslookup-mcp","version","1.6.0","descriptionMarkdown","

\n \n $\"NSLookup.io\"$ \n \n

\n\n

\n MCP Server for nslookup.io
\n DNS lookups, SSL certificate checks, security scanning, GEO (AI readiness) scoring, domain intelligence, and your own monitoring account — via the Model Context Protocol.\n

\n\n

\n Website · API Docs · npm · Contact\n

\n\n## What is this?\n\nThe nslookup.io MCP server gives any MCP-capable AI assistant (Claude, ChatGPT, Cursor, Windsurf, …) direct access to nslookup.io's DNS, certificate, security, and monitoring tools. Ask in plain language — _\"Run a DNS health check on github.com\"_ or _\"Which of my SSL certificates expire soonest?\"_ — and the assistant calls the right tool for you.\n\n**23 tools total, in two groups:**\n\n- **17 public tools** — DNS, SSL, security, GEO, and domain-intelligence lookups that work **anonymously**, with no account and no API key.\n- **6 `my_` account tools** — read your own [nslookup.io monitoring account](https://www.nslookup.io/portal/) (uptime, DNS, WHOIS, SSL, propagation, BIMI/VMC monitors). These are always listed but require **signing in**.\n\nJump to [Connect](#connect) to get set up, or the [Tool reference](#tool-reference) for the full list.\n\n## Connect\n\nThere are two ways to connect. **Pick one** — see the [note below](#-use-only-one-nslookup-entry).\n\n| | **Hosted (recommended)** | **Local (npx / stdio)** |\n|---|---|---|\n| Endpoint | `https://mcp.nslookup.io/mcp` | `npx -y @nslookup-io/mcp-server` |\n| Transport | Streamable HTTP (remote) | stdio (runs on your machine) |\n| Install | Nothing to install | Requires Node.js 18+ |\n| 17 public tools | ✅ Anonymous | ✅ Anonymous |\n| 6 `my_` account tools | ✅ **Browser sign-in (OAuth)** on first use | ❌ Not available locally — use the hosted connector |\n\n**Use the hosted endpoint if you want your own monitoring data** — it's the only mode where the `my_` account tools sign in for you, right in the browser. The local mode is great for the 17 public tools with zero setup.\n\n### Connect for your account (portal) tools\n\nTo use **your own NsLookup.io monitoring data** (the 6 `my_` account tools), add the **hosted connector** and sign in. **There is no API key** — authentication is a one-time browser sign-in (OAuth) against your nslookup.io account.\n\n**Claude Code (CLI)**\n\n```bash\nclaude mcp add --transport http nslookup https://mcp.nslookup.io/mcp\n```\n\nThen invoke an account tool — e.g. ask _\"show my monitoring overview\"_. A browser sign-in window appears; after you sign in once, all 6 `my_` tools work (the client remembers it).\n\n**Claude Desktop / claude.ai** — add a custom connector with URL `https://mcp.nslookup.io/mcp`, then sign in when prompted.\n\n**`.mcp.json`** (project) or any HTTP-capable client:\n\n```json\n{ \"mcpServers\": { \"nslookup\": { \"type\": \"http\", \"url\": \"https://mcp.nslookup.io/mcp\" } } }\n```\n\nThe 17 public tools work immediately over this same endpoint — you only sign in the first time you reach for your own data.\n\n### Hosted (recommended)\n\nThe hosted endpoint is a remote Streamable-HTTP server. Public tools work immediately; the first time you call a `my_` tool, an OAuth-capable client opens a browser window to sign in to your nslookup.io account (see [Signing in](#signing-in)).\n\n**Claude Code (CLI)**\n\n```bash\nclaude mcp add --transport http nslookup https://mcp.nslookup.io/mcp\n```\n\n**Claude Desktop / claude.ai (custom connector)**\n\n1. Open **Settings → Connectors**\n2. Click **Add custom connector**\n3. Name: `nslookup` — URL: `https://mcp.nslookup.io/mcp`\n4. Click **Add**\n\nOr drop it into an `.mcp.json` (project) / your client's MCP config:\n\n```json\n{\n \"mcpServers\": {\n \"nslookup\": {\n \"type\": \"http\",\n \"url\": \"https://mcp.nslookup.io/mcp\"\n }\n }\n}\n```\n\n**ChatGPT**\n\n1. Open **Settings → Connected apps** (or **Tools & integrations**)\n2. Click **Add custom integration** / **Add MCP server**\n3. Name: `nslookup` — URL: `https://mcp.nslookup.io/mcp`\n4. Save\n\n**Cursor / Windsurf (and any HTTP-capable client)**\n\nAdd to your MCP config (`.cursor/mcp.json`, `~/.codeium/windsurf/mcp_config.json`, etc.):\n\n```json\n{\n \"mcpServers\": {\n \"nslookup\": {\n \"type\": \"http\",\n \"url\": \"https://mcp.nslookup.io/mcp\"\n }\n }\n}\n```\n\n### Local (npx / stdio)\n\nRuns the server on your machine over stdio. **Public tools only** — all **17 public tools** work with no auth. For your own monitoring data (the `my_` account tools), use the [hosted connector](#connect-for-your-account-portal-tools) and sign in — the account tools are not available on the local transport.\n\n**Claude Code (CLI)**\n\n```bash\n# Global (all projects)\nclaude mcp add nslookup --scope user -- npx -y @nslookup-io/mcp-server\n\n# Or for a single project\nclaude mcp add nslookup --scope project -- npx -y @nslookup-io/mcp-server\n```\n\n**Claude Desktop** — add to `claude_desktop_config.json`:\n\n```json\n{\n \"mcpServers\": {\n \"nslookup\": {\n \"command\": \"npx\",\n \"args\": [\"-y\", \"@nslookup-io/mcp-server\"]\n }\n }\n}\n```\n\n**Cursor** (`.cursor/mcp.json`) / **Windsurf** (`~/.codeium/windsurf/mcp_config.json`):\n\n```json\n{\n \"mcpServers\": {\n \"nslookup\": {\n \"command\": \"npx\",\n \"args\": [\"-y\", \"@nslookup-io/mcp-server\"]\n }\n }\n}\n```\n\n### ⚠️ Use only ONE nslookup entry\n\nConfigure **either** the hosted entry **or** the local entry — not both. If two MCP servers named `nslookup` are registered at once (e.g. a hosted connector plus a local npx entry), tool calls can route to the wrong server and behave unpredictably. Pick the mode you want and remove the other.\n\n## Signing in\n\n- **17 public tools** — no account, no key, nothing to sign in for. They call public, stateless, no-auth endpoints.\n- **6 `my_` account tools** — read your private monitoring data, so they require sign-in:\n - **Hosted endpoint → browser OAuth.** The server is an OAuth 2.1 resource server. Calling a `my_` tool without credentials returns a `401` with a `WWW-Authenticate` challenge, and OAuth-capable clients (Claude web/desktop, Claude Code, …) then walk you through a browser sign-in against the nslookup.io identity provider (Keycloak). **There is no API key** — sign in once and the client remembers it. Everything else keeps working anonymously — you only sign in when you first reach for your own data. See [Connect for your account (portal) tools](#connect-for-your-account-portal-tools).\n\n## Tool reference\n\n### Public tools (17 — anonymous)\n\n#### DNS\n\n| Tool | Description |\n|------|-------------|\n| `dns_lookup` | Look up all common DNS records (A, AAAA, NS, MX, TXT, CNAME, SOA) for a domain |\n| `dns_record` | Look up a specific DNS record type — supports all 53 types (HTTPS, DNSKEY, TLSA, SPF, etc.) |\n| `dns_propagation` | Check DNS propagation across 18+ global servers (Cloudflare, Google, Quad9, regional, authoritative) |\n| `webservers` | Get IPv4 and IPv6 addresses for a domain |\n| `dns_change_review` | Review proposed DNS changes before applying them: diff vs current DNS, rule-based findings with fixes, and a 0–100 risk score |\n\n#### Domain intelligence\n\n| Tool | Description |\n|------|-------------|\n| `rdap_lookup` | Registration data (RDAP) for an IP, AS number, or domain — owner org, network range, RIR, contacts, dates |\n| `hosting_report` | Who hosts a website: hosting provider, CDN/proxy, DNS provider, mail servers, server location, SSL issuer |\n| `status_page` | Read a public status page (by slug or custom domain): overall status, components, active incidents |\n\n#### DNS health & security\n\n| Tool | Description |\n|------|-------------|\n| `dns_health` | Run a DNS health audit (39 checks across DNSSEC, MX, hygiene, TTL, nameservers, CAA, operational maturity) with severity-weighted scoring |\n| `ssl_certificate` | Check SSL/TLS certificate — issuer, expiry, chain validity, cipher strength, SAN domains, TLS version |\n| `bimi_vmc` | Check BIMI record and VMC (Verified Mark Certificate) — logo URL, trademark info, certificate expiry |\n| `bimi_check` | Check only the BIMI DNS record (faster — skips the VMC certificate fetch) |\n| `security_scan` | Scan a domain for security issues — SPF/DKIM/DMARC, cookie security, DNS misconfigurations |\n| `domain_scanner` | Scan a domain's email security posture (SPF, DKIM, DMARC, BIMI) with per-indicator scores |\n| `uptime_check` | One-time HTTP uptime check — status, response time, HTTP status code |\n| `uptime_check_multi` | Check if a site is up from 7 global locations — Amsterdam, Sydney, London, Frankfurt, Delhi, Warsaw, South Carolina |\n\n#### GEO (AI readiness)\n\n| Tool | Description |\n|------|-------------|\n| `geo_checker` | Check a domain's GEO (Generative Engine Optimization) score — AI crawler access, structured data, entity signals, content extractability, and prioritized recommendations |\n\n### Account tools (6 — require sign-in)\n\nThese `my_` tools read your own [nslookup.io monitoring account](https://www.nslookup.io/portal/). They are always listed but require [signing in](#signing-in) to call.\n\n| Tool | Description |\n|------|-------------|\n| `my_overview` | Account health snapshot — aggregated 0–100 score with per-subsystem breakdown, plus your limits/quota |\n| `my_monitors` | List all your monitors across every type (uptime, API, DNS, WHOIS, propagation, certificates, VMC) |\n| `my_incidents` | Open (or all recent) incidents across all monitoring types, with a per-status/per-source summary |\n| `my_uptime_history` | Uptime + response-time history for one monitor (by id or URL) over a configurable window |\n| `my_dns_changes` | Recent DNS changes on your monitored domains with their risk reviews (0–100 score, severity counts) |\n| `my_certificates` | SSL certificate expiry overview — alert-level counts and certificates sorted by soonest expiry |\n\n## Supported DNS record types\n\nA, AAAA, AFSDB, APL, AXFR, CAA, CDNSKEY, CDS, CERT, CNAME, CSYNC, DHCID, DLV, DNAME, DNSKEY, DS, EUI48, EUI64, HINFO, HIP, HTTPS, IPSECKEY, IXFR, KEY, KX, LOC, MX, NAPTR, NS, NSEC, NSEC3, NSEC3PARAM, NXT, OPENPGPKEY, OPT, PTR, RP, RRSIG, SIG, SMIMEA, SOA, SPF, SRV, SSHFP, SVCB, TA, TKEY, TLSA, TSIG, TXT, URI, ZONEMD\n\n## DNS servers\n\n`cloudflare`, `google`, `quad9`, `opendns`, `authoritative`, and regional servers in South Africa, Australia, India, Netherlands, Canada, USA, Brazil, Ukraine, Russia.\n\n## Configuration\n\n| Environment Variable | Default | Description |\n|---------------------|---------|-------------|\n| `NSLOOKUP_API_URL` | `https://www.nslookup.io` | Base URL for the nslookup.io API |\n| `MCP_RESOURCE_URL` | *(request-derived)* | (HTTP server) Explicit public origin of this resource server, used as the `issuer`/`resource`/`authorization_servers` value in OAuth metadata. When unset, the origin is derived from the incoming request (`X-Forwarded-Proto` + host). Set it to the fixed public URL (e.g. `https://mcp.nslookup.io`) in production. |\n| `KEYCLOAK_ISSUER` | `https://auth.nslookup.io/realms/nslookup-io` | (HTTP server) OAuth token issuer used to validate sign-in JWTs (JWKS, issuer, exp) |\n| `KEYCLOAK_REALM_URL` | *(= `KEYCLOAK_ISSUER`)* | (HTTP server) Keycloak realm base URL whose `/.well-known/openid-configuration` supplies the real `authorization_endpoint`/`token_endpoint`. For Keycloak this equals the issuer, so it rarely needs setting. |\n| `KEYCLOAK_CLIENT_ID` | `nslookup-io-mcp` | (HTTP server) The pre-registered **public** Keycloak client id returned by the DCR shim. This client must already exist in the realm; no Keycloak DCR is enabled. |\n\n

How hosted OAuth sign-in works under the hood

\n\nThe hosted server is an OAuth 2.1 *resource server*: calling a `my_` tool without credentials returns a `401` with a `WWW-Authenticate` challenge pointing at `/.well-known/oauth-protected-resource`, and OAuth-capable MCP clients then walk you through sign-in against the nslookup.io identity provider.\n\nSign-in works for DCR-only clients (Claude web/desktop, Claude Code) **without** enabling Keycloak DCR. The server also acts as its own OAuth *authorization server* for metadata: `GET /.well-known/oauth-authorization-server` returns an `issuer` equal to this server's own origin, with `authorization_endpoint`/`token_endpoint` pointing at the **real Keycloak** endpoints (fetched from the realm's OpenID configuration, cached with a static fallback) and `registration_endpoint` set to `/register`. Because the advertised `issuer` is this server, clients that compute `{issuer}/register` hit our **Dynamic Client Registration (DCR) shim** at `POST /register` (also `POST /oauth/register`), which ignores the submitted metadata and returns one **pre-registered public Keycloak client** (`KEYCLOAK_CLIENT_ID`, default `nslookup-io-mcp`) with `token_endpoint_auth_method: \"none\"`, echoing back the requested redirect URIs. The browser sign-in and the PKCE `code`→token exchange happen directly on Keycloak. A public client with `KEYCLOAK_CLIENT_ID` must already exist in the realm; no Keycloak DCR endpoint is used or exposed.\n\n

\n\n## Example prompts\n\nOnce connected, try asking your AI assistant:\n\n- \"What are the DNS records for github.com?\"\n- \"Check the MX records for google.com\"\n- \"Has the DNS propagated for my-domain.com A record?\"\n- \"What IP addresses does cloudflare.com resolve to?\"\n- \"Show me the DNSKEY records for example.com\"\n- \"Check the SPF record for amazon.com\"\n- \"Run a DNS health check on example.com\"\n- \"What's the DNSSEC status of cloudflare.com?\"\n- \"Check the DNS health score for my-domain.com — are there any critical issues?\"\n- \"Check the SSL certificate for github.com\"\n- \"Does google.com have a BIMI record?\"\n- \"Run a security scan on example.com\"\n- \"Is https://cloudflare.com up right now?\"\n- \"Check if github.com is accessible from all global locations\"\n- \"Check DNS propagation for example.com NS records across all global servers\"\n- \"Check the GEO score for github.com\"\n- \"Is example.com optimized for AI search engines?\"\n- \"Which AI crawlers does cloudflare.com block?\"\n- \"Who owns the IP 8.8.8.8?\"\n- \"Look up registration data for AS13335\"\n- \"Who hosts github.com?\"\n- \"Review this DNS change for example.com before I apply it: ...\"\n- \"Scan example.com's email security (SPF, DKIM, DMARC)\"\n- \"Is the nslookup-io status page reporting any incidents?\"\n\nAnd once signed in to your nslookup.io account:\n\n- \"How healthy is my monitoring right now?\"\n- \"List all my monitors — anything down or expiring?\"\n- \"Do I have any open incidents?\"\n- \"Show me the uptime history for https://myapp.com over the last 48 hours\"\n- \"Any risky DNS changes on my domains recently?\"\n- \"Which of my SSL certificates expire soonest?\"\n\n## Feedback\n\nWe'd love to hear from you! At [nslookup.io](https://nslookup.io), we're building a fast, reliable, and free DNS lookup tool and monitoring platform for everyone — from developers and sysadmins to everyday internet users.\n\nYour feedback is what helps us improve. Whether you've spotted a bug, have a feature idea, or just want to share your thoughts — we're listening. [Contact us](https://nslookup.io/contact-us/).\n\n## License\n\nApache 2.0\n","changelogMarkdown","videoKey","requiredSecretsJson","publishedAt",1784295303000,"priceCents","trialDays","iconType","image","upstream",{"_103":104,"_105":106,"_107":108,"_109":110,"_111":112,"_113":114},"requiredSecrets",[],"tags",[],"assets",[],"stats",{"_101":45,"_102":45},"ratingAvg","reviewCount","topics",[],"license","Apache-2.0","language","TypeScript","registryName","io.github.venomseven/nslookup","homepage","https://nslookup.io","packages",[115],{"_116":117,"_118":119,"_78":79},"registryType","npm","identifier","@nslookup-io/mcp-server","ENV",{"_122":123,"_124":125,"_126":127,"_128":-7},"ENVIRONMENT","production","TURNSTILE_SITE_KEY","0x4AAAAAAB8-rEI2gNDf_QhU","SENTRY_DSN","https://45fd1229f78089d5c3ee78be128030e1@o4510583261757440.ingest.de.sentry.io/4510584253448272","SENTRY_ENABLE_LOCAL"]