drwho.me network and developer tools is a remote MCP server that gives an AI agent 29 tools, among them base64_decode, base64_encode, dns_lookup. It answers at https://drwho.me/mcp/mcp over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 6 of 6 times since 12 September 2026; the last check, on 24 October 2026, succeeded.
Remote MCP server: 10 developer utilities (base64, JWT, DNS, UUID, URL, JSON, UA, IP lookup).
Description as the publisher wrote it.
| Tool | What it does |
|---|---|
base64_decode | Decode base64 to UTF-8 text. Accepts the standard and the URL-safe alphabet, with or without padding or line breaks. Fails when the input is not valid base64 or does not decode to text (binary data is not returned). Runs locally. Inputs: text |
base64_encode | Encode UTF-8 text as base64. Set url_safe for the URL-safe alphabet (- and _ in place of + and /, no padding), as used in JSON Web Tokens. Runs locally. Returns the encoded string. Inputs: text, url_safe |
dns_lookup | Resolve one DNS record type (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA or SRV) for a name and return the raw answers. Use for a quick, targeted lookup, including on subdomains and names such as _dmarc.example.com; prefer dossier_dns for a domai Inputs: name, type |
dossier_ai_crawlers | Report what a domain's robots.txt says to the major AI crawlers (GPTBot, ClaudeBot, Google-Extended, PerplexityBot, CCBot, meta-externalagent): allowed, blocked or unspecified for each. Use to answer whether a site lets AI models train on o Inputs: domain |
dossier_cors | Send a CORS preflight (OPTIONS) to https://<domain>/ and return the access-control-* headers in the answer. Use to check whether a site accepts cross-origin requests from a given origin and method. One request, 5 s timeout. Returns JSON wit Inputs: domain, origin, method |
dossier_ct_log | List subdomains of a domain that appear in Certificate Transparency logs. Use to map what hosts a domain has exposed through the certificates issued for it. Queries crt.sh, then certspotter if crt.sh fails; capped at 100 unique names, 10 s Inputs: domain |
dossier_dkim | Probe a domain for DKIM public keys at <selector>._domainkey.<domain>. Pass selectors when you know them; omit to probe a built-in list of common selectors used by large mail providers. A selector not on the list will not be found, so an em Inputs: domain, selectors |
dossier_dmarc | Find and parse the DMARC policy at _dmarc.<domain> into its tags (p, sp, pct, rua, ruf, adkim, aspf). Use to see whether spoofed mail is rejected, quarantined or only reported. Queries Cloudflare DNS-over-HTTPS, 5 s timeout. Returns JSON wi Inputs: domain |
dossier_dns | Fetch a domain's A, AAAA, NS, SOA, CAA and TXT records in one call. Use as the first step of a DNS review; prefer dns_lookup for a single record type or for MX, CNAME and SRV. Sends six Cloudflare DNS-over-HTTPS queries in parallel, 5 s tim Inputs: domain |
dossier_dnssec | Check whether a domain's zone is signed with DNSSEC and validates: DS and DNSKEY records plus the resolver's AD (authenticated data) flag. Queries Cloudflare DNS-over-HTTPS with DO=1, 8 s timeout. Returns JSON with a status field: {status:" Inputs: domain |
dossier_headers | Fetch https://<domain>/ and return every response header, so you can review Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy. Returns the final URL after red Inputs: domain |
dossier_llms_txt | Check whether a domain publishes an llms.txt, the markdown index some sites provide for AI agents. Requires a non-HTML content type and a leading markdown heading, so a catch-all page that answers 200 with HTML does not count. One fetch, 10 Inputs: domain |
dossier_mta_sts | Fetch and validate a domain's MTA-STS policy (mode, mx, max_age). Use to confirm inbound mail to the domain must be delivered over TLS. Resolves the _mta-sts TXT record, then fetches https://mta-sts.<domain>/.well-known/mta-sts.txt, 10 s ti Inputs: domain |
dossier_mx | List a domain's MX (mail exchanger) records sorted by priority. Use to see where a domain's inbound mail goes, or before checking SPF and DMARC. Queries Cloudflare DNS-over-HTTPS, 5 s timeout. Returns JSON with a status field: {status:"ok", Inputs: domain |
dossier_redirects | Trace the redirect chain from https://<domain>/, one entry per hop with its status code and target, up to 10 hops. Use to debug redirect loops or confirm an HTTP to HTTPS or apex to www redirect. 5 s per hop. Returns JSON with a status fiel Inputs: domain |
dossier_security_txt | Check whether a domain publishes /.well-known/security.txt (RFC 9116), the standard way to tell researchers where to report a vulnerability. Returns the Contact and Expires fields. Requires a non-HTML content type and a Contact field. One f Inputs: domain |
dossier_spf | Find and parse a domain's SPF record into its mechanisms. Use to check which servers may send mail for a domain, or to debug delivery failures; pair with dossier_dmarc and dossier_dkim for the whole email-authentication picture. Reads TXT r Inputs: domain |
dossier_summary | Run the nine DNS, email-authentication and TLS checks on a domain in parallel and return one graded line per check: DNS records, MX, SPF, DMARC, DKIM, DNSSEC, TLS-RPT, MTA-STS and the TLS certificate. Use it first when asked how a domain is Inputs: domain |
dossier_tls | Read the TLS certificate a domain presents on port 443: subject, issuer, validity dates, days remaining, subject alternative names, SHA-256 fingerprint and whether the chain validated. Use to check expiry or a name mismatch. It does not tes Inputs: domain |
dossier_tlsrpt | Look up a domain's SMTP TLS Reporting policy at _smtp._tls.<domain>. Use to confirm the domain receives reports about failed TLS delivery of its inbound mail. Queries Cloudflare DNS-over-HTTPS. Returns JSON with a status field: {status:"ok" Inputs: domain |
dossier_web_surface | Summarise a domain's public web surface: robots.txt, sitemap.xml and the home page's title, description, OpenGraph and Twitter card tags. Use for a quick SEO or link-preview review. Three parallel HTTPS fetches capped at 64 KB each. Returns Inputs: domain |
dossier_whois | Look up a domain's registrar, creation date, expiry date and registry statuses. Use for an ownership or expiry check. Tries WHOIS over TCP port 43, then RDAP over HTTPS when the registry refuses; returns not_applicable when neither answers, Inputs: domain |
ip_lookup | Look up an IPv4 or IPv6 address: city, region, country, coordinates, timezone and the network (ASN and organisation) that announces it. Use when you need location or ownership context for an address; it does not accept hostnames, so resolve Inputs: ip |
json_format | Validate JSON and re-print it with an indent of 2 or 4 spaces, or minified with indent 0. Use to check whether a string is valid JSON or to make it readable. Runs locally. Returns the formatted JSON, or the parser's error message. Inputs: text, indent |
jwt_decode | Decode a JSON Web Token's header and payload. It does NOT verify the signature, so never treat the claims as trusted on the strength of this tool. Use to inspect claims such as exp, iss and aud while debugging. Runs locally; the token is no Inputs: token |
url_decode | Decode percent-encoded text. Fails on a malformed sequence such as a lone % sign. A plus sign is left as a plus; replace it with a space first if the text came from an HTML form. Runs locally. Inputs: text |
url_encode | Percent-encode text for use in a URL query value or path segment (encodeURIComponent rules: everything except letters, digits and - _ . ! ~ * ' ( ) is encoded). Runs locally. Returns the encoded string. Inputs: text |
user_agent_parse | Parse a User-Agent header into browser, operating system, device and rendering engine. Use when reading server logs or request headers. Runs locally with no network call. Returns JSON {browser:{name,version}, os:{name,version}, device:{type Inputs: ua |
uuid_generate | Generate UUIDs. Version 4 is fully random. Version 7 starts with a millisecond timestamp, so values sort by creation time, which suits database keys. Runs locally with a cryptographic random source. Returns a JSON array of strings. Inputs: version, count |
Every block below points at https://drwho.me/mcp/mcp. Pick your client and copy.
claude mcp add --transport http drwho-me-network-and-developer-t https://drwho.me/mcp/mcp
{
"mcpServers": {
"drwho-me-network-and-developer-t": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://drwho.me/mcp/mcp"]
}
}
}{
"mcpServers": {
"drwho-me-network-and-developer-t": {
"url": "https://drwho.me/mcp/mcp"
}
}
}{
"servers": {
"drwho-me-network-and-developer-t": {
"type": "http",
"url": "https://drwho.me/mcp/mcp"
}
}
}{
"context_servers": {
"drwho-me-network-and-developer-t": {
"url": "https://drwho.me/mcp/mcp"
}
}
}{
"mcpServers": {
"drwho-me-network-and-developer-t": {
"serverUrl": "https://drwho.me/mcp/mcp"
}
}
}{
"mcpServers": {
"drwho-me-network-and-developer-t": {
"url": "https://drwho.me/mcp/mcp"
}
}
}name: drwho.me network and developer tools
version: 0.0.1
schema: v1
mcpServers:
- name: drwho.me network and developer tools
type: streamable-http
url: https://drwho.me/mcp/mcp{
"mcpServers": {
"drwho-me-network-and-developer-t": {
"httpUrl": "https://drwho.me/mcp/mcp"
}
}
}{
"mcpServers": {
"drwho-me-network-and-developer-t": {
"type": "http",
"url": "https://drwho.me/mcp/mcp"
}
}
}{
"mcpServers": {
"drwho-me-network-and-developer-t": {
"url": "https://drwho.me/mcp/mcp"
}
}
}goose://extension?url=https%3A%2F%2Fdrwho.me%2Fmcp%2Fmcp&type=streamable_http&id=drwho-me-network-and-developer-t&name=drwho.me%20network%20and%20developer%20tools
It answered our last check on 24 October 2026 in 884 ms. Over 6 checks since 12 September 2026 it answered 6. Status here comes from Neuronto's own probes, not from the publisher.
Yes. It is published by drwho.me and served from drwho.me, the vendor's own domain: https://drwho.me/mcp/mcp.
29, as returned by the server's own tools/list on 22 September 2026: base64_decode, base64_encode, dns_lookup, dossier_ai_crawlers, dossier_cors, dossier_ct_log, dossier_dkim, dossier_dmarc, and 21 more.
It answered our last check on 24 October 2026 in 884 ms. Over 6 checks since 12 September 2026 it answered 6.
Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://drwho.me/mcp/mcp. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.
It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.
Publisher: me.drwho. Endpoint host: drwho.me. ARD identifier: urn:air:me.drwho:mcp:tools.
First indexed 10 September 2026. The tools are exactly what the server returned; nothing on this page
is inferred from its name. Ranking in Neuronto search is never for sale.