Directory / IntoDNS.ai DNS & Email Security Scanner

IntoDNS.ai DNS & Email Security Scanner

Q: Is IntoDNS.ai DNS & Email Security Scanner MCP server safe?

QAmcp's test on 24 Oct 2026: No hidden instructions were found in its tool descriptions. Its error messages showed no secrets or internal details. 40 of its 45 tools are labeled read-only; the others may change or send things. Overall it scored 84/100 on 24 Oct 2026. A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.

by intodns.ai · https://intodns.ai/api/mcp

DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools.

45 tools✓ no account neededPricing: on their site

See pricing →Visit website

84 /100

FAIL

11 of 11 checks · 24 Oct 2026

Is IntoDNS.ai DNS & Email Security Scanner MCP server safe?

No hidden instructions were found in its tool descriptions.
Its error messages showed no secrets or internal details.
40 of its 45 tools are labeled read-only; the others may change or send things.
Overall it scored 84/100 on 24 Oct 2026.

A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.

What it can do

45 tools, in the server's own words.

scan_domainread-only

Run the fast IntoDNS.ai DNS and email security scan (~3-8s).

nis2_quickscanread-only

Compute a NIS2 Article 21.2 readiness score for a domain by mapping the IntoDNS quickscan onto the ten NIS2 measures.

get_everything_reportread-only

Generate the complete live IntoDNS.ai report covering DNS, email authentication, web/HTTPS, blacklist reputation, sender requirements, and canonical citation U…

create_report_snapshot

Create an immutable evidence snapshot of the current Everything Report for a domain.

get_report_snapshotread-only

Read a previously created IntoDNS.ai Everything Report evidence snapshot by snapshot ID.

start_deep_scan

Start a long-running Internet.nl deep scan.

get_deep_scan_statusread-only

Read-only status poll for a long-running Internet.nl deep scan.

cancel_deep_scan

Cancel an in-progress Internet.nl deep scan.

lookup_dnsread-only

Read-only DNS record lookup via DNS-over-HTTPS.

validate_dnssecread-only

Read-only DNSSEC chain validation.

check_dns_propagationread-only

Compare DNS responses across the nine currently configured public and authoritative resolvers to detect propagation lag, missing answers, or differing record s…

check_tlsa_daneread-only

Read-only TLSA/DANE DNS record check.

check_spfread-only

Read-only SPF parse and validation for a domain.

flatten_spfread-only

Read-only SPF flattening for a domain.

discover_dkimread-only

Read-only DKIM check for a domain.

check_dmarcread-only

Read-only fetch and parse of the _dmarc TXT record.

check_bimiread-only

Read-only BIMI readiness check.

check_mta_stsread-only

Read-only check of MTA-STS: TXT record at _mta-sts.

check_smtp_tlsread-only

Live check of the first 4 MX hosts in priority order (hosts beyond 4 are not tested): opens TCP 25, runs EHLO + STARTTLS, validates TLS certificate trust chain…

check_fcrdnsread-only

Read-only FCrDNS (Forward-Confirmed Reverse DNS) audit for every IP that backs the domain's MX records.

check_blacklistread-only

Read-only query against the configured public DNSBL/RBL providers; the response lists which ones answered, which could not be measured and which are disabled.

check_sender_requirementsread-only

Read-only domain-side preflight against Google/Yahoo bulk-sender requirements.

check_email_securityread-only

Read-only combined email-security check covering SPF parse, DKIM selector discovery, DMARC policy validation, MX IP blacklist status across major feeds, and an…

create_email_test

Create a new IntoDNS.ai inbound email-test session.

and 21 more

Test results

Safe mode: only tools labeled read-only were run. How the test works

✕
Fast enough
1 failed
- ✕analyze_raw_email: Slowest tool: analyze_raw_email (11.8 s): most users will give up waiting
- and 3 more
fail
!
Ready for the newest MCP version
1 warning
- !Uses an older MCP version (2025-11-25). It works today, but it isn't on the July 2026 version (2026-07-28) yet.
note
!
Every tool is described
5 warnings
- !explain_issue: Inputs with no description: issue
- !generate_dns_fix: Inputs with no description: issue
- !get_badge_link: Inputs with no description: style
- !read_llm_discovery: Inputs with no description: file
- !get_citation_guidance: Inputs with no description: topic
note
✓
ConnectsConnected in 973 ms
pass
✓
Lists its toolsFound 45 tools
pass
✓
Tools are labeled safe or dangerousEvery tool has a safety label
pass
✓
No hidden instructionsNo hidden instructions found in tool descriptions
pass
✓
Tools work with good inputs
All good
- ✓scan_domain: Answered with an error, probably because of our sample input: MCP error -32602: Input validation error: Invalid arguments for tool scan_domain: Provide a valid DNS domain name such as example.com at do…
- ✓nis2_quickscan: Answered with an error, probably because of our sample input: MCP error -32602: Input validation error: Invalid arguments for tool nis2_quickscan: Provide a valid DNS domain name such as example.com at…
- ✓get_everything_report: Answered with an error, probably because of our sample input: MCP error -32602: Input validation error: Invalid arguments for tool get_everything_report: Provide a valid DNS domain name such as example…
- ✓get_report_snapshot: Answered with an error, probably because of our sample input: IntoDNS.ai API error: 404 Not Found - {"error":"Report snapshot not found"}
- ✓get_deep_scan_status: Answered with an error, probably because of our sample input: IntoDNS.ai API error: 404 Not Found - {"error":"Scan not found"}
- ✓lookup_dns: Answered with an error, probably because of our sample input: MCP error -32602: Input validation error: Invalid arguments for tool lookup_dns: Provide a valid DNS domain name such as example.com at dom…
- ✓validate_dnssec: Answered with an error, probably because of our sample input: MCP error -32602: Input validation error: Invalid arguments for tool validate_dnssec: Provide a valid DNS domain name such as example.com a…
- ✓check_dns_propagation: Answered with an error, probably because of our sample input: MCP error -32602: Input validation error: Invalid arguments for tool check_dns_propagation: Provide a valid DNS domain name such as example…
- and 32 more
pass
✓
Bad inputs give a clean error
All good
- ✓scan_domain: Refused missing required input "domain" with a clear error
- ✓scan_domain: Refused wrong type for "domain" with a clear error
- ✓nis2_quickscan: Refused missing required input "domain" with a clear error
- ✓nis2_quickscan: Refused wrong type for "domain" with a clear error
- ✓get_everything_report: Refused missing required input "domain" with a clear error
- ✓get_everything_report: Refused wrong type for "domain" with a clear error
- ✓get_report_snapshot: Refused missing required input "snapshotId" with a clear error
- ✓get_report_snapshot: Refused wrong type for "snapshotId" with a clear error
- and 32 more
pass
✓
Tools work togetherread_llm_discovery → scan_csp: scan_csp found what read_llm_discovery returned (url = "https://intodns.ai")
pass
✓
No secrets leakedChecked 105 error messages: no secrets or internal details
pass

Test it yourself

Free and open source. Same checks, same score.

npx qamcp-cli https://intodns.ai/api/mcp

Score over time

24 Oct 202684

One test so far. New tests will show here.

Reviews

Coming soon: reviews from people who use IntoDNS.ai DNS & Email Security Scanner, signed in with GitHub, one per person. Reviews never change the score.

Is this your server?

Soon you can claim this page: re-test it from here, reply to results, and show a "Tested by QAmcp" badge.

Have a concern, or want it removed? Ask us and we'll take it off the list. How the directory works