is it DNS? MCP server

• check_domainFree

  The eleven-check DNS audit for a domain: parent and child nameservers agree, no open recursion, DNSSEC chain, TTL sanity, mail posture, glue at the parent, a DS that matches a live DNSKEY, and whether a truncated UDP answer can be had over TCP. Every check reports ok, warn, fail or skipped with the reason. THERE IS NO SCORE AND NO LETTER GRADE: the checks state what they found and the caller decides what it means. Six of the eleven belong to a ZONE rather than to a name (the delegation, the DNSSEC chain, the nameserver's recursion policy, the glue, the DS match and the TCP fallback), so if you ask about a hostname those six are evaluated for the enclosing zone: the answer names it and marks the rows it applies to.

• digFree

  Ask a public DNS resolver, or any public address, for a record, live, from the isitdns seat. Returns the answer, the flags, the rcode, Extended DNS Errors and the latency in the shape dig prints, plus the JSON.

• dns_eventsFree

  Days when several resolvers were unhealthy at once, as episodes: when each began, how long it ran, how many resolvers were affected at the peak, and which. This is the tool for "was there a DNS outage recently".

• ksk_boardFree

  The RFC 8509 root key sentinel across the public resolvers: which resolvers trust which root KSK, and the root DNSKEY set as read now.

• resolver_historyFree

  The incident record for the public resolvers: start time, duration and severity of each. Notable incidents by default; all=true includes short degradations. Windows where several operators failed at once are excluded as our own seat's path, and the answer says how many.

• resolver_statusFree

  The live board: is public DNS OK right now? Every public resolver isitdns watches, its latest reading (status, latency, DNSSEC), read every 3 minutes over DoT, with the time it was read. Give a resolver to get one card.

• top_domainsFree

  The DNS health of the top 100 domains as of the last DAILY snapshot: rcode, addresses, DNSSEC and rank movement for each. Those come from one probe per day at 11:11:11 UTC and do not move intraday. The nameservers and the points are read separately, at Cloudflare's recursive, and are refreshed through the day. Ask for one domain to get its row, or omit to get the board and its summary. To check any domain right now rather than as of the snapshot, use check_domain.

• traceFree

  Walk the delegation from the root servers down to the authoritative server for a name, like dig +trace, and say in plain steps whether the delegation is healthy.

• –Code scanremote-only server, no package to scann/a
• Live reliabilityremote reachable in 526ms20/20
• Tool poisoning8 tool descriptions checked15/15
• Auth qualityopen endpoint, read-only tools10/15
• Maintenanceno repository listed3/15
• Maintainer identityverified namespace with website, no repo4/10

is it DNS?: common questions

Is is it DNS? MCP server safe?

With care: it is graded C, so read the findings first (69/100). Read the is it DNS? safety report

How do I install is it DNS??

It runs remotely at isitdns.net. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.

Does is it DNS? need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is is it DNS? maintained?

The latest release is v2026-09-10.

Is is it DNS? up?

100% of our last 5 checks got an answer. We check remote servers about four times a day.

What can I use instead of is it DNS??

Servers from other publishers that do the same job: Domain Liveness MCP server.