All servers · Cloud & networking

Front Sentinel

com.frontsentinel/domain-security · v1.0.0

Measured by MCP Station

Description written by the publisher, not verified

Read-only security checks for dApp domains: registry lock, DNSSEC, CAA, SRI, SEAL DNS controls

Connect

claude mcp add --transport http domain-security https://frontsentinel.com/mcp

{
  "mcpServers": {
    "domain-security": {
      "url": "https://frontsentinel.com/mcp"
    }
  }
}

Tools as reported by the server

• scan_domain
  Scores how well a dApp or website domain is protected against hijacking: registrar transfer/update locks, registry lock, DNSSEC, CAA, expiry, nameserver consistency across resolvers, SRI on third-party scripts and the Content-Security-Policy header. Returns a 0-100 score, each check with pass/fail/u
• check_registry_lock
  Reads the domain's EPP status codes from RDAP and tells whether registry lock (serverUpdateProhibited + serverTransferProhibited) is on, partly on or off, and which registrar-level locks are set.
• check_sri
  Loads a public page and lists every script, stylesheet and preload it pulls in. For third-party files, checks whether an integrity= hash is present and matches, and returns a ready sha384 hash for files that have none.
• check_seal_dns_registrar
  Goes through the 16 controls of the SEAL Security Frameworks certification for DNS & Registrar and marks what public data shows for each: ok, partial, gap, not visible from outside, or a process control the team has to document itself. Includes DNSSEC, CAA, SPF/DMARC/MTA-STS, locks, expiry and secur

Website · JSON · Text for agents · Registry updated 2026-10-23