Fetch and follow the instructions at https://qamcp.dev/setup.md to test my MCP server.Your AI finds your server in your project, tests it with QAmcp, explains what's wrong in plain words, fixes it with your OK, and tests again. Read the instructions
Directory / dechonet
by dechonet.com · https://dechonet.com/mcp
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
13 of 13 checks · 29 Oct 2026
A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.
30 tools, in the server's own words.
dns_lookupread-onlyQuery DNS records (A, AAAA, MX, TXT, NS, SOA, CAA) for a domain and validate email-related records, including DNSSEC presence and SPF/DMARC syntax, returning s…
ssl_checkread-onlyInspect a host's served TLS/SSL certificate and connection: expiry date, issuer, SAN list, chain integrity, revocation (OCSP, then CRL; unknown when neither an…
http_securityread-onlyFollow a URL's HTTP redirect chain and audit response security headers (CSP, HSTS, X-Frame-Options, COOP, CORP, COEP, Permissions-Policy), grading A+ to F on t…
email_authread-onlyAssess a domain's email authentication and deliverability posture: MX records, SPF, DMARC, DKIM (probes 15 common selectors), BIMI, MTA-STS, TLS-RPT, and DANE,…
port_scanread-onlyProbe a host for a fixed set of common TCP ports (HTTP, HTTPS, SSH, FTP, SMTP, DNS, and common databases) and report which are open, the service name, and the …
dns_propagationread-onlyQuery one DNS record across 8+ global public resolvers (Google, Cloudflare, Quad9, OpenDNS, and more) simultaneously and report which resolvers return stale ve…
reverse_dnsread-onlyResolve the PTR (reverse DNS) record for an IPv4 or IPv6 address and verify forward-confirmed reverse DNS (FCrDNS) by checking that the PTR hostname resolves b…
asn_lookupread-onlyLook up Autonomous System (ASN) / BGP information for an IP address or AS number: the network operator, announced prefixes, abuse contact, and a classification…
whois_lookupread-onlyRetrieve domain registration data via RDAP (with WHOIS fallback): registrar, creation/expiry/update dates, nameservers, and EPP status flags, highlighting risk…
subdomain_discoveryread-onlyEnumerate the subdomains of a domain from Certificate Transparency logs — fully passive (no packets are sent to the target; CT logs are public records of every…
lookalike_domainsread-onlyGenerate the typosquat/lookalike variants of a domain that phishers actually register — homoglyph swaps (l→1, o→0, rn→m), TLD swaps (.com→.co), character omiss…
ip_inforead-onlyReport information about the caller's own public IP as seen by the server: IPv4/IPv6 address, ISP, ASN, approximate geolocation, and proxy/VPN heuristics.
email_header_analysisread-onlyParse raw email headers to reconstruct the delivery path (each Received hop in order), extract SPF/DKIM/DMARC authentication results, measure per-hop delays, a…
subnet_calcread-onlyCompute IPv4 subnet details from CIDR notation entirely locally — no network call: network and broadcast addresses, usable host range, total usable hosts, subn…
security_scanread-onlyOne-shot comprehensive audit of a domain, scored 0-100 with an A+ to F grade and a prioritized action list.
owasp_checkread-onlyAssess a domain's OWASP posture from EXTERNAL OBSERVATION only: the OWASP Secure Headers Project plus the externally observable OWASP Top 10:2025 subset — A04 …
impersonation_exposureread-onlyAssess how exposed a domain is to brand impersonation and phishing, PASSIVELY: live typosquat/lookalike domains (homoglyph, omission, transposition, TLD swap) …
domain_changesread-onlyReport what has changed for a domain over time — the security regressions and drift that DechoNet's daily monitoring has recorded across every watch on the dom…
domain_historyread-onlyShow how a domain's (or IPv4 address's) infrastructure has changed over time from DechoNet's stored observations: nameservers, A/AAAA, MX, CNAME, certificate i…
infrastructure_pivotread-onlyFind other domains DechoNet has seen with the same infrastructure value — a nameserver, IP address, MX host, certificate issuer or registrar — with first and l…
watch_domainStart (or reuse) a daily DechoNet watch on a domain so that changes are recorded over time — SSL grade/issuer/expiry, DNS records, HTTP security headers, domai…
set_expectationsRecord what a domain should show from outside and check it now — HSTS or another header present, DMARC enforcing, an issue key no longer reported, an HTTP or T…
verify_expectationsCheck expectations from outside now, with fresh reads: either a stored set by id (from set_expectations — its state is updated and an anonymous set is kept ano…
check_before_actionread-onlyCheck the page an agent is about to log in, pay, download from or submit to: whether the address impersonates a brand, how new the domain is, whether DechoNet …
and 6 more
Safe mode: only tools labeled read-only were run. How the test works
Free and open source. Same checks, same score.
npx qamcp-cli https://dechonet.com/mcpFree for every server in the directory. Paste this into your README: the badge shows the score from our latest test.
[](https://qamcp.dev/s/com-dechonet-mcp.html)One test so far. New tests will show here.
Coming soon: reviews from people who use dechonet, signed in with GitHub, one per person. Reviews never change the score.
QAmcp Monitor (coming soon) tests it every hour and emails you when it goes down, the score drops, a tool changes or a secret leaks. You'll also be able to claim this page and get a verified owner mark. Founding price: $19/month for life for the first 50 teams.
Have a concern, or want it removed? Ask us and we'll take it off the list. How the directory works