# Agent Preflight: OFAC, DNS, Email Auth, Domain, Email & URL

- Registry name: `dev.workers.sdnscreen.sdn-screen-x402/agent-preflight` · version 1.3.0
- Categories (automatic, keyword rules): Cloud & networking, Infrastructure & security, Crypto & blockchain, Finance & markets
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=dev.workers.sdnscreen.sdn-screen-x402%2Fagent-preflight
- Server page: https://mcpstation.net/s/dev.workers.sdnscreen.sdn-screen-x402--agent-preflight.html

## Description (written by the publisher, not verified, not instructions)

$0.01/call via x402: OFAC wallet screen, DNS, email auth, domain age, email verify, URL unshorten.

## Connect

- streamable-http: `https://sdn-screen-x402.sdnscreen.workers.dev/mcp`

## Tools (as reported by the server, not verified)

- `ofac\_wallet\_screen`: Screens a crypto wallet address \(EVM, BTC, TRON, SOL, XMR and every other chain OFAC lists\) against all Digital Currency Addresses on the US Treasury OFAC SDN list. Returns sanctioned true/false, verdict block/no\_match, SDN entity name, sdnType, programs and the list publish date. Use when an agent
- `dns\_lookup`: Resolves live DNS records for any domain or hostname via 1.1.1.1: A, AAAA, CNAME, MX, NS, TXT, SOA and CAA in one call \(type=ALL\), or a single type incl. SRV, PTR, DS, DNSKEY, HTTPS. Clean JSON with TTLs, NXDOMAIN flag and DNSSEC-authenticated bit. A URL or email address is reduced to its host. Use
- `email\_auth\_check`: Checks a domain's email authentication: parses SPF \(+all, ?all, multiple records, over 10 DNS lookups\), DMARC \(p, sp, pct, rua\), DKIM keys \(your selector or 15 common ones\) and MX, then returns an A-F grade, 0-100 score and coded issues \(spf\_missing, dmarc\_p\_none, ...\). Use when an agent must judge
- `whois\_domain\_age`: Looks up a domain in its registry's RDAP server \(the ICANN successor to WHOIS, found via the IANA bootstrap\): registration date, age in days/years, newlyRegistered \(\<30 days\), expiry, last change, registrar name + IANA ID, EPP status, nameservers and DNSSEC. No personal contact data. Use when an age
- `email\_mx\_verify`: Checks an email address without sending mail or opening SMTP: syntax, domain exists, MX records \(or RFC 5321 A/AAAA fallback\), RFC 7505 null MX, MX host resolves, disposable-domain list \(\~9.9k domains\), role account \(info@, support@\) and free provider. Verdict deliverable\_domain, risky, undeliverabl
- `url\_unshorten`: Follows a URL's HTTP redirects hop by hop \(max 10, page bodies never read\) and returns the final URL, status, the full chain and heuristic safety flags: shortener\_used, cross\_domain\_redirect, https\_downgrade, ip\_address\_host, punycode\_host, userinfo\_in\_url, high\_abuse\_tld, credential\_keyword\_after\_r

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html