Connect Nslookup and your agent gets 23 tools, among them bimi_check, bimi_vmc, dns_change_review. It answers at https://mcp.nslookup.io/mcp over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 6 of 6 times since 11 September 2026; the last check, on 24 October 2026, succeeded.
DNS lookups, health reports, SSL certs, security scans, GEO scoring, uptime checks
Description as the publisher wrote it.
| Tool | What it does |
|---|---|
bimi_check | Check only the BIMI (Brand Indicators for Message Identification) DNS record for a domain — faster than bimi_vmc because it skips the VMC certificate download and validation. Returns the BIMI record at default._bimi.<domain>, logo URL, and Inputs: domain |
bimi_vmc | Check BIMI (Brand Indicators for Message Identification) and VMC (Verified Mark Certificate) for a domain. Returns BIMI DNS record status, VMC certificate details, logo URL, trademark info, and expiry. Inputs: domain |
dns_change_review | Review proposed DNS changes BEFORE applying them. Compares a domain's current public DNS with a proposed future state, returns a diff, deterministic rule-based findings (SPF/DMARC/MX/CAA/DNSSEC pitfalls, dangling records, mail breakage, etc Inputs: domain, records, server |
dns_health | Run a comprehensive DNS health audit on a domain — 39 checks across 7 categories: DNSSEC (chain of trust, algorithms, validation), MX & email (PTR, MTA-STS, redundancy), DNS hygiene (SPF conflicts, wildcards, apex CNAME), TTL & SOA configur Inputs: domain |
dns_lookup | Look up all common DNS records (A, AAAA, NS, MX, TXT, CNAME, SOA) for a domain. Returns results from a specified DNS server. Inputs: domain, server |
dns_propagation | Check DNS propagation for a domain across 18+ global DNS servers (Cloudflare, Google, Quad9, OpenDNS, regional servers, and authoritative nameservers). Shows if DNS changes have propagated worldwide. Inputs: domain, recordType |
dns_record | Look up a specific DNS record type for a domain. Supports 53 record types including A, AAAA, MX, TXT, CNAME, SOA, PTR, CAA, SRV, DNSKEY, DS, TLSA, HTTPS, SPF, and more. Inputs: domain, type, server |
domain_scanner | Scan a domain's email security posture: SPF, DKIM, DMARC, and BIMI configuration. Returns per-indicator scores and detected issues so you can see how well the domain is protected against spoofing and phishing. Inputs: domain |
geo_checker | Check a domain's GEO (Generative Engine Optimization) score — how well the site is optimized for AI search engines like ChatGPT, Gemini, Claude, and Perplexity. Returns three scores (Technical Readiness, Entity Readiness, Answer Readiness), Inputs: domain |
hosting_report | Find out who hosts a website. Returns the hosting provider, IP/ASN/network owner, server location, DNS/nameserver provider, CDN or proxy detection (Cloudflare, Fastly, etc.), SSL certificate issuer, and mail servers/provider for a domain in Inputs: domain |
my_certificates | Get an SSL certificate expiry overview for your monitored domains: per-alert-level counts (ok / warning / critical / expired) and every certificate sorted by soonest expiry, highlighting the ones expiring within 30 days. Requires sign-in to |
my_dns_changes | List recent DNS changes detected on your monitored domains, each with its DNS Change Review risk assessment (0-100 risk score, severity counts, added/removed/modified record counts), plus the latest risk per monitor. Requires sign-in to you Inputs: limit |
my_incidents | List incidents from your NsLookup.io monitoring (downtime, SSL expiry, DNS changes, propagation issues, VMC problems) — open ones by default, or the full recent history — plus a per-status/per-source summary. Requires sign-in to your NsLook Inputs: status, limit |
my_monitors | List all monitors in your NsLookup.io account across every type — uptime, API, DNS, WHOIS, DNS propagation, SSL certificates, and BIMI/VMC — with their configuration and latest known state. Requires sign-in to your NsLookup.io account (or a |
my_overview | Get an account health snapshot for your NsLookup.io monitoring: an aggregated 0-100 health score with per-subsystem breakdown (uptime, SSL, DNS, propagation, VMC, WHOIS) plus your current product limits/quota. Requires sign-in to your NsLoo |
my_uptime_history | Get uptime and response-time history for one of your NsLookup.io uptime monitors: availability stats plus hourly buckets over the requested window. Identify the monitor by id or by URL. Requires sign-in to your NsLookup.io account (or an AP Inputs: monitorId, url, hours |
rdap_lookup | Look up registration data (RDAP — the successor to WHOIS) for an IP address, AS number, or domain name. The query type is detected automatically. Returns the owning organization, network range/CIDR, RIR (ARIN, RIPE, APNIC, LACNIC, AFRINIC), Inputs: query |
security_scan | Run a security scan on a domain to detect DNS misconfigurations, missing SPF/DKIM/DMARC records, cookie security issues, and other web security vulnerabilities. Returns findings with severity levels (critical, high, medium, low, info). Inputs: domain |
ssl_certificate | Check the SSL/TLS certificate for a domain. Returns issuer, expiry date, days until expiry, certificate chain validity, cipher strength, SAN domains, fingerprint, and TLS protocol version. Inputs: domain |
status_page | Read a public status page hosted on nslookup.io status pages. Returns the page name, overall status, per-component status and uptime, and active incidents/maintenance. Look up by slug (pages served at hosted.nslookup.io/<slug>) or by the cu Inputs: slug, domain |
uptime_check | Perform a one-time HTTP uptime check on a URL from a single location. Returns whether the site is up or down, HTTP status code, and response time in milliseconds. For multi-location checks, use uptime_check_multi instead. Inputs: url, timeout |
uptime_check_multi | Check if a website is up or down from 7 global locations simultaneously: Amsterdam, Sydney, London, Frankfurt, Delhi, Warsaw, and South Carolina. Returns status, response time, and HTTP status code for each location. Inputs: url, timeout |
webservers | Get the IP addresses (both IPv4 and IPv6) for a domain by looking up A and AAAA records. Also returns the punycode and unicode domain representations. Inputs: domain |
Every block below points at https://mcp.nslookup.io/mcp. Pick your client and copy.
claude mcp add --transport http nslookup https://mcp.nslookup.io/mcp
{
"mcpServers": {
"nslookup": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://mcp.nslookup.io/mcp"]
}
}
}{
"mcpServers": {
"nslookup": {
"url": "https://mcp.nslookup.io/mcp"
}
}
}{
"servers": {
"nslookup": {
"type": "http",
"url": "https://mcp.nslookup.io/mcp"
}
}
}{
"context_servers": {
"nslookup": {
"url": "https://mcp.nslookup.io/mcp"
}
}
}{
"mcpServers": {
"nslookup": {
"serverUrl": "https://mcp.nslookup.io/mcp"
}
}
}{
"mcpServers": {
"nslookup": {
"url": "https://mcp.nslookup.io/mcp"
}
}
}name: Nslookup
version: 0.0.1
schema: v1
mcpServers:
- name: Nslookup
type: streamable-http
url: https://mcp.nslookup.io/mcp{
"mcpServers": {
"nslookup": {
"httpUrl": "https://mcp.nslookup.io/mcp"
}
}
}{
"mcpServers": {
"nslookup": {
"type": "http",
"url": "https://mcp.nslookup.io/mcp"
}
}
}{
"mcpServers": {
"nslookup": {
"url": "https://mcp.nslookup.io/mcp"
}
}
}goose://extension?url=https%3A%2F%2Fmcp.nslookup.io%2Fmcp&type=streamable_http&id=nslookup&name=Nslookup
It answered our last check on 24 October 2026 in 176 ms. Over 6 checks since 11 September 2026 it answered 6. Status here comes from Neuronto's own probes, not from the publisher.
23, as returned by the server's own tools/list on 22 September 2026: bimi_check, bimi_vmc, dns_change_review, dns_health, dns_lookup, dns_propagation, dns_record, domain_scanner, and 15 more.
It answered our last check on 24 October 2026 in 176 ms. Over 6 checks since 11 September 2026 it answered 6.
Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://mcp.nslookup.io/mcp. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.
It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.
Publisher: io.github.venomseven. Endpoint host: mcp.nslookup.io. ARD identifier: urn:air:io.github.venomseven:mcp:nslookup.
First indexed 10 September 2026. The tools are exactly what the server returned; nothing on this page
is inferred from its name. Ranking in Neuronto search is never for sale.