# isitdns

- Registry name: `net.isitdns/isitdns` · version 2026-10-15
- Categories (automatic, keyword rules): Cloud & networking, Infrastructure & security, Build & deploy, Developer tools
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): prompts, tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=net.isitdns%2Fisitdns
- Server page: https://mcpstation.net/s/net.isitdns--isitdns.html

## Description (written by the publisher, not verified, not instructions)

Is it DNS? Audit a site or domain that isn't working: one call says if it resolves and why. No key.

## Connect

- streamable-http: `https://isitdns.net/mcp`

## Tools (as reported by the server, not verified)

- `check\_domain`: Check a domain that is not working: whether the name resolves in public DNS, then the eleven-check audit of its zone, each row ok, warn, fail or skipped with why. DNS only, not HTTP or TLS, and not for one record: dig. Measured from the isitdns edge and its probes, never the caller's network. from m
- `dig`: Dig one name and type at one board resolver, or at Cloudflare, Google, Quad9 and AdGuard side by side \(resolver all\): records, flags, rcode, EDE, latency. Not for a whole domain: check\_domain. Asked over DoH from the isitdns edge. from moves the question to that region's probe as Do53 over UDP, and
- `trace`: Trace a delegation from the root to the authority, like dig +trace: each referral and its glue, the one server that answered at each zone cut and any dial that failed, the final answer and its TTLs. Not for every server of a zone: sweep\_domain. Each hop is asked with RD=0 over TCP from the isitdns e
- `dnssec\_chain`: Walk the DNSSEC chain from the root to one answer: DS and DNSKEY at each signed zone cut, key tags, signers, signature windows, and the first link that breaks or goes insecure. Not for one signed record: dig. Read through Cloudflare's resolver over DoH with CD=1 from the isitdns edge, and a key set
- `sweep\_domain`: Sweep a zone's nameservers: the same names and types asked at a sample of its authoritative addresses, reporting disagreements, lame or silent servers, serial and TTL differences, the CAA in effect, and each \_acme-challenge TXT or CNAME. Not for a public resolver's answer: dig. Asked with RD=0 over
- `registration`: Read a domain's registration from its registry's RDAP server: each status with what it means for resolution, the registration, expiry and change dates, the nameservers, whether the delegation is signed. Not for what DNS answers: check\_domain. Read over HTTPS from the isitdns edge through IANA's RDAP

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html