io.uptimeify/mcp-server

Fetch and evaluate a host's TLS/SSL certificate over a live handshake: subject and issuer, validity window, days until expiry, hostname match, chain trust, self-signed and expired flags, SANs, serial and SHA-256 fingerprint. Takes a hostname, not an IP address, plus an optional port (default 443).…

Resolve a domain's DNS records in one call (A, AAAA, CNAME, MX, TXT, NS, SOA and more), returning each record type with its values and a per-type error where a lookup failed. Answers come from the resolver Uptimeify uses, so this is one vantage point: to see whether the answer is already the same e…

Query the same domain against several public resolvers and compare the answers, so a recent record change can be told apart from a stale cache. Returns each resolver with the values it gave, plus a consistent flag that stays false while the answers still differ. Use it after changing DNS; for a sin…

Look up a domain's MX records and resolve each mail exchanger to its IPv4 and IPv6 addresses, ordered by priority and flagged when a host resolves into private address space. Tells you where mail for the domain is delivered; it does not connect to those servers, does not test SMTP, and says nothing…

Fetch a domain's SPF record and evaluate the policy: the raw record, every parsed term with its qualifier, the number of DNS lookups it costs against the RFC 7208 limit of ten, the final all qualifier, and warnings for the failure modes that silently break sending. Covers the sending policy only --…

Fetch and validate the DKIM public key published at a given selector (<selector>._domainkey.<domain>) and report the parsed tags, key type, key size in bits, and warnings such as a revoked or malformed key. The selector is required and cannot be derived from the domain: read it from a message's DKI…

Fetch a domain's DMARC record from _dmarc.<domain> and evaluate it: the raw record, every parsed tag, the policy and subdomain policy, the percentage the policy applies to, and warnings for records that parse but do not protect (p=none, missing rua, syntax receivers ignore). Reports the published p…

Query a public IP address against common DNS blacklists and return, per list, whether it is listed, the reason code the list gave and its delisting URL, plus totals and a clean flag. Takes an IP address, not a domain: resolve the sending host first with mx_lookup or check_dns. Slow blocklists are d…

Retrieve WHOIS registration data for a domain: registrar, creation, update and expiry dates, EPP status codes, nameservers and the contact roles the registry still publishes. Registries redact personal data since GDPR, so contacts are usually roles without names. Not every TLD has a WHOIS server Up…

Report a domain's registration expiry from WHOIS together with daysUntilExpiry, plus registrar, creation and update dates and the EPP status codes that reveal a domain already in redemption or pending delete. This is the registration, not the certificate: an expiring TLS certificate is check_ssl. t…

Fetch a URL and return its HTTP response headers verbatim as a name/value map, with the status line and every redirect hop taken to get there. Use it to inspect caching, security and server headers as they are actually sent; the response body is never returned, so this says nothing about page conte…

Check a domain's HTTP Strict Transport Security configuration: whether the header is present, its raw value, max-age in seconds, the includeSubDomains and preload flags, whether plain HTTP redirects to HTTPS, whether the configuration would qualify for the browser preload list, and warnings for val…

Follow a URL's HTTP redirect chain hop by hop and return every step with its status code, source and target, the final URL and status, the hop count, and warnings for chains that loop, drop from HTTPS to HTTP, or run longer than they should. Answers where a URL ends up and how many round trips that…

Open a TCP connection to one or more ports on a host and report each as open, closed or filtered with the time the attempt took. Pass a single port or a list of up to 10; a single-port call also gets its answer flat, exactly as before the list form existed. partial=true means not every requested po…

Measure reachability and round-trip time by opening repeated TCP connections to a host, reporting every attempt plus the count sent and received, packet loss percentage and min/avg/max milliseconds. This is a TCP handshake against a port (default 443), not an ICMP echo: a host that drops ICMP still…

Is a website up right now? Start here for any is-the-site-down question: up/down verdict, HTTP status and status text, response time in milliseconds, the server header and the number of redirects followed, in one call. This is a single sample from one location taken now -- it is not uptime, and a s…

Measure how fast a URL answers by taking several samples and returning each one plus min, average and max milliseconds, the HTTP status and an up flag. partial=true means fewer samples came back than were requested, so the average rests on a smaller base. This measures the response, not the rendere…

Locate a public IP address, or a domain resolved to one, at network level: country code, allocating registry, announced prefix, PTR hostname and the autonomous systems the address belongs to. It is registry-based, so it names the network operator's country, which for hosted or CDN-fronted addresses…

Resolve a public IP address, or a domain, to the autonomous system that announces it: AS number and name, the announced prefix, country code, registry and allocation date. Answers who operates the network an address sits on, which tells a hosting provider from a CDN from a corporate network. It doe…

Resolve a public IP address to the PTR hostnames published for it, returning every name the pointer record carries, or the resolver's error where there is none. A PTR is set by whoever controls the address block, so it names the host rather than necessarily the site running on it, and a missing PTR…