{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:39:13.094Z","url":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary","markdownUrl":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary.md","server":{"slug":"com-domaincanary-mcp","name":"DomainCanary","registryName":"com.domaincanary/mcp","description":"Check a domain's DMARC, SPF and DKIM, build SPF records, explain bounces, read DMARC reports.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"domaincanary","type":"remote","identifier":"https://domaincanary.com/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary","version":"1.0.0","transport":null,"scoredAt":"2026-11-05T02:29:22.822Z"},"score":{"total":86,"tier":"high trust","status":"scored","weekDelta":1,"history":[{"date":"2026-11-05","total":86},{"date":"2026-11-04","total":86},{"date":"2026-11-03","total":86},{"date":"2026-11-02","total":86},{"date":"2026-11-01","total":86},{"date":"2026-10-31","total":85},{"date":"2026-10-30","total":85},{"date":"2026-10-29","total":85},{"date":"2026-10-28","total":84},{"date":"2026-10-27","total":84},{"date":"2026-10-26","total":83},{"date":"2026-10-25","total":83},{"date":"2026-10-24","total":82},{"date":"2026-10-23","total":82},{"date":"2026-10-22","total":81},{"date":"2026-10-21","total":81},{"date":"2026-10-20","total":80},{"date":"2026-10-19","total":80},{"date":"2026-10-18","total":79},{"date":"2026-10-17","total":79},{"date":"2026-10-16","total":78},{"date":"2026-10-15","total":78},{"date":"2026-10-14","total":78},{"date":"2026-10-13","total":77},{"date":"2026-10-12","total":77},{"date":"2026-10-11","total":76},{"date":"2026-10-10","total":76},{"date":"2026-10-07","total":74},{"date":"2026-10-06","total":74},{"date":"2026-10-04","total":73}]},"categories":[{"name":"Endpoint Security","score":80,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS is enforced; there's no plaintext access path.","The HSTS (Strict-Transport-Security) header is present.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_present","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":69,"verdict":"fail","reasons":["AI-judged instruction clarity (excellent).","Context-footprint check failed: tool/resource definitions use about 910 tokens (~227/item across 4 items; 4 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"excellent"}},{"code":"schema.footprint_heavy","args":{"avg":"227","items":"4","tools":"4","tokens":"910","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":100,"verdict":"pass","reasons":["No destabilizing schema changes in the last 30 days."],"codes":[{"code":"stability.stable","args":{}}]},{"name":"Tool Coverage","score":100,"verdict":"pass","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","100% of tool parameters carry a description.","Structured output schemas are declared (100% of tools); any adoption earns full credit."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"100"}},{"code":"toolquality.output_present","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 4 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 5 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"4"}},{"code":"toolsafety.manipulation_clean","args":{"units":"5","judged":"5"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a current MCP spec version (2026-07-28)."],"codes":[{"code":"protocol.current","args":{"version":"2026-07-28"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"domaincanary","type":"remote","identifier":"https://domaincanary.com/mcp","withdrawn":false,"score":86,"current":true,"url":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary","markdownUrl":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary.md"}],"facts":[{"label":"Endpoint","value":"https://domaincanary.com/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"1.0.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"check_domain","title":"Check a domain's email authentication","description":"Use this when someone asks whether a domain's email authentication is set up correctly, why mail from a domain fails DMARC, SPF or DKIM, or which DNS records to publish for it. Reads the domain's live DMARC, SPF and DKIM records and returns what is wrong with each, plus the records to add or change. Pass a DKIM selector when you know it. Without one, common selectors are tried. Takes a domain name only, not a mailbox address or an IP address.","inputs":[{"name":"domain","type":"string","required":true,"description":"The domain to check, such as example.com. A URL is cut down to its host."},{"name":"selector","type":"string","required":false,"description":"The DKIM selector, the s= value in a DKIM-Signature header. Leave it out to try common ones."}],"outputs":[{"name":"dkim","type":"object","required":true,"description":null},{"name":"dmarc","type":"object","required":true,"description":null},{"name":"domain","type":"string","required":true,"description":null},{"name":"external_data","type":"object","required":true,"description":null},{"name":"records_to_publish","type":"array","required":true,"description":null},{"name":"spf","type":"object","required":true,"description":null},{"name":"url","type":"string","required":true,"description":null},{"name":"verdict","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":166},{"name":"build_spf","title":"Build an SPF record","description":"Use this when someone lists the services that send their email and wants the SPF record to publish, or wants a sender added to the SPF record they already have. Takes provider names such as Google Workspace or Mailchimp, include terms such as include:spf.example.com, or IP addresses, and returns one merged record with its count of DNS lookups against the limit of ten. Pass the domain when you know it, so the result includes the senders already in its published record.","inputs":[{"name":"all","type":"string","required":false,"description":"How the record ends. A new record ends in ~all unless you pass -all. A record the domain already publishes keeps its own ending unless you pass one."},{"name":"domain","type":"string","required":false,"description":"The domain the record is for. When given, the SPF record it publishes today is read and the senders are added to it, so nothing already in it is lost."},{"name":"ip4","type":"array","required":false,"description":"IPv4 addresses or ranges that send this domain's mail directly, such as 192.0.2.10 or 192.0.2.0/24."},{"name":"ip6","type":"array","required":false,"description":"IPv6 addresses or ranges that send this domain's mail directly, such as 2001:db8::1 or 2001:db8::/32."},{"name":"senders","type":"array","required":true,"description":"The platforms that send this domain's mail: provider names such as Google Workspace or Mailchimp, or include terms such as include:spf.example.com."}],"outputs":[{"name":"added","type":"array","required":true,"description":null},{"name":"after","type":"string|null","required":true,"description":null},{"name":"domain","type":"string|null","required":true,"description":null},{"name":"external_data","type":"object","required":true,"description":null},{"name":"findings","type":"array","required":true,"description":null},{"name":"findings_omitted","type":"integer","required":true,"description":null},{"name":"lookups","type":"integer","required":true,"description":null},{"name":"no_include","type":"array","required":true,"description":null},{"name":"outcome","type":"string","required":true,"description":null},{"name":"over_limit","type":"boolean","required":true,"description":null},{"name":"published","type":"boolean","required":true,"description":null},{"name":"skipped","type":"array","required":true,"description":null},{"name":"unrecognised","type":"integer","required":true,"description":null},{"name":"url","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":305},{"name":"explain_bounce","title":"Explain a bounce or SMTP error","description":"Use this when someone pastes a bounce message, an SMTP reply such as 550 5.7.26, or an Authentication-Results header and asks what it means or how to fix it. Returns what the receiving server refused, what to change, when it clears, and the page that explains it. Works from the pasted text alone and reads no DNS records.","inputs":[{"name":"text","type":"string","required":true,"description":"The bounce message, the SMTP reply or the Authentication-Results line, as pasted. When the bounce runs past 4,000 characters, pass the lines with the error code and the reason."}],"outputs":[{"name":"change","type":"string|null","required":true,"description":null},{"name":"clears","type":"string|null","required":true,"description":null},{"name":"code","type":"string|null","required":true,"description":null},{"name":"faq","type":"array","required":true,"description":null},{"name":"matched","type":"boolean","required":true,"description":null},{"name":"meaning","type":"string","required":true,"description":null},{"name":"page","type":"object","required":true,"description":null},{"name":"related","type":"array","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":129},{"name":"analyze_report","title":"Read a DMARC aggregate report","description":"Use this when someone has a DMARC aggregate report and wants to know which senders passed and which failed. The report is the XML, .gz or .zip file that receivers such as Google and Yahoo email to the address in a domain's rua tag. In ChatGPT, pass the uploaded file. Elsewhere, pass the report XML as text. Returns totals per report and each sending IP address with its SPF, DKIM and DMARC results. The result gives a next step for the report's domain and a link to a live check of that domain's DNS records. Nothing from the report is stored.","inputs":[{"name":"file","type":"object","required":false,"description":"The report file the user uploaded in ChatGPT: the .xml, .xml.gz or .zip a mailbox provider emailed them."},{"name":"report_xml","type":"string","required":false,"description":"The report XML as text, from <feedback> to </feedback>. Use this when there is no uploaded file, or when the user pasted the XML."}],"outputs":[{"name":"analyzer_url","type":"string|null","required":true,"description":null},{"name":"external_data","type":"object","required":true,"description":null},{"name":"next_steps","type":"array","required":true,"description":null},{"name":"record_limit_reached","type":"boolean","required":true,"description":null},{"name":"reports","type":"array","required":true,"description":null},{"name":"reports_omitted","type":"number","required":true,"description":null},{"name":"skipped_payloads","type":"number","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":201}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T02:29:22.000Z","track":"remote","endpoint":"https://domaincanary.com/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=domaincanary.com","issuer":"CN=WE1,O=Google Trust Services,C=US","notBefore":"2026-10-13T18:52:07Z","notAfter":"2027-01-11T19:52:04Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=WE1,O=Google Trust Services,C=US","issuer":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","notBefore":"2023-12-13T09:00:00Z","notAfter":"2029-02-20T14:00:00Z","keyType":"ECDSA","keyBits":256,"isCa":true},{"subject":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","issuer":"CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE","notBefore":"2023-11-15T03:43:21Z","notAfter":"2028-01-28T00:00:42Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"domaincanary.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"domaincanary.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":308},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-03","recent":[{"id":"chg_01a19a0f-d8ad-7d26-bc08-743024873d6a","kind":"check.verdict","summary":"Stability (0.97 → pass)","materiality":"security","direction":"neutral","scoreDelta":null,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary#chg-chg_01a19a0f-d8ad-7d26-bc08-743024873d6a"},{"id":"chg_01a194e9-3780-7324-be7e-32e53a029b80","kind":"score.total_changed","summary":"Trust score (85 → 86)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary#chg-chg_01a194e9-3780-7324-be7e-32e53a029b80"},{"id":"chg_01a1856f-7cfe-737a-8b45-dad499f634fc","kind":"score.total_changed","summary":"Trust score (84 → 85)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary#chg-chg_01a1856f-7cfe-737a-8b45-dad499f634fc"},{"id":"chg_01a17b20-ad77-73c3-851e-2813fa35c463","kind":"score.total_changed","summary":"Trust score (83 → 84)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary#chg-chg_01a17b20-ad77-73c3-851e-2813fa35c463"},{"id":"chg_01a170cf-c6ef-7200-b001-d7a22c6e39d6","kind":"score.total_changed","summary":"Trust score (82 → 83)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary#chg-chg_01a170cf-c6ef-7200-b001-d7a22c6e39d6"},{"id":"chg_01a16682-8c0c-726d-8c9c-180e2e2f1b6f","kind":"score.total_changed","summary":"Trust score (81 → 82)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-23","url":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary#chg-chg_01a16682-8c0c-726d-8c9c-180e2e2f1b6f"},{"id":"chg_01a15c31-1ea0-7e3e-9b38-e162ff3abc55","kind":"score.total_changed","summary":"Trust score (80 → 81)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary#chg-chg_01a15c31-1ea0-7e3e-9b38-e162ff3abc55"},{"id":"chg_01a151e4-6ea8-73e0-b923-ab5cb1913f2f","kind":"score.total_changed","summary":"Trust score (79 → 80)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-19","url":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary#chg-chg_01a151e4-6ea8-73e0-b923-ab5cb1913f2f"},{"id":"chg_01a14797-b2df-7777-8371-edcd81b19d9c","kind":"score.total_changed","summary":"Trust score (78 → 79)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-17","url":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary#chg-chg_01a14797-b2df-7777-8371-edcd81b19d9c"},{"id":"chg_01a13823-e9cf-7a36-bc1e-9caa3604ef0e","kind":"score.total_changed","summary":"Trust score (77 → 78)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-14","url":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary#chg-chg_01a13823-e9cf-7a36-bc1e-9caa3604ef0e"},{"id":"chg_01a12eba-b9db-794b-8b9b-8d3563ebe3b9","kind":"score.total_changed","summary":"Trust score (76 → 77)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-12","url":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary#chg-chg_01a12eba-b9db-794b-8b9b-8d3563ebe3b9"},{"id":"chg_01a125db-48a8-7a04-8d51-9b709da3f23e","kind":"score.total_changed","summary":"Trust score (74 → 76)","materiality":"functional","direction":"improvement","scoreDelta":2,"occurredOn":"2026-10-10","url":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary#chg-chg_01a125db-48a8-7a04-8d51-9b709da3f23e"},{"id":"chg_01a10eb4-16a9-756d-a64c-e1f5bc8fcde8","kind":"score.total_changed","summary":"Trust score (73 → 74)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-06","url":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary#chg-chg_01a10eb4-16a9-756d-a64c-e1f5bc8fcde8"},{"id":"chg_01a104a4-13e5-782e-9987-614be588e3a1","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-04","url":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary#chg-chg_01a104a4-13e5-782e-9987-614be588e3a1"},{"id":"chg_01a104a4-13e5-7de1-86b0-7dcfb6cc1c24","kind":"score.total_changed","summary":"Trust score (72 → 73)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-04","url":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary#chg-chg_01a104a4-13e5-7de1-86b0-7dcfb6cc1c24"},{"id":"chg_01a0ff7d-d75e-7517-9fe9-a78f0893bcd7","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-03","url":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary#chg-chg_01a0ff7d-d75e-7517-9fe9-a78f0893bcd7"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary/changelog.json"},"links":{"html":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary","markdown":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary.md","changelogJson":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary/changelog.json","changelogRss":"https://verifymcp.io/servers/com-domaincanary-mcp/domaincanary.xml","external":[{"label":"Remote endpoint","href":"https://domaincanary.com/mcp"},{"label":"Website","href":"https://domaincanary.com/guides/check-your-domain-from-chatgpt-or-claude"}]}}