dev.domainee/domainee

REMOTE · MCP.DOMAINEE.DEV · SCANNED AUG 3

Custom domains API for SaaS: connect, verify, and manage customer domains, SSL, and DNS

Available components

−29 this week 36 36 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →

Endpoint Security89

The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
The endpoint enforces authorisation, advertised via RFC 9728 protected-resource metadata. View diagnostics → Pass
HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents. View diagnostics → Partial

Transport & Reachability0

Transport blocked by authentication: the endpoint requires auth we don't have to verify streamable-http. See how to fix → View diagnostics → Unverified

Schema Quality & AI Usability0

Schema blocked by authentication: the endpoint requires auth we don't have to read it. See how to fix → Unverified

Stability & Change Management0

Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified

Tool Coverage0

Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools.Unverified

Capabilities0

Capabilities blocked by authentication: the endpoint requires auth we don't have to read them. See how to fix → Unverified

Unverified: 5 categories

Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

remote · mcp.domainee.dev

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add --transport http dev-domainee-domainee https://mcp.domainee.dev/mcp

# ~/.codex/config.toml

[mcp_servers.dev-domainee-domainee]
url = "https://mcp.domainee.dev/mcp"

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "dev-domainee-domainee": {
      "type": "remote",
      "url": "https://mcp.domainee.dev/mcp",
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add dev-domainee-domainee --url https://mcp.domainee.dev/mcp --transport streamable-http

# ~/.hermes/config.yaml

mcp_servers:
  dev-domainee-domainee:
    url: "https://mcp.domainee.dev/mcp"

// mcp.json

{
  "mcpServers": {
    "dev-domainee-domainee": {
      "type": "http",
      "url": "https://mcp.domainee.dev/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

3 Aug 26 −31
- Endpoint reachability: reachable → behind authorisation ▼ security
- Stability: 0.23 → unverified ▼ security
- Transport: pass → unverified ▼ security
- Authorization: unverified → pass ▲ security
- First check of Authorization: partial security
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- First check of Schema quality: unverified functional
1 Aug 26 +1

No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.
31 Jul 26 −1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 +1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
28 Jul 26 +1

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
27 Jul 26 +1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
26 Jul 26 64

First indexed and scored.

Show 6 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Probed https://mcp.domainee.dev/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject	Issuer	Valid from	Valid until	Key	Signature	Serial
CN=mcp.domainee.dev	CN=YR2,O=Let's Encrypt,C=US	5 Jul 2026	3 Oct 2026	RSA 2048	SHA256-RSA	58a36eca9a17938854e1832ef912819b19f
SANs: mcp.domainee.dev
CN=YR2,O=Let's Encrypt,C=US (CA)	CN=Root YR,O=ISRG,C=US	3 Sept 2025	2 Sept 2028	RSA 2048	SHA256-RSA	4ebd24947e24d394802d84a52fd5b319
CN=Root YR,O=ISRG,C=US (CA)	CN=ISRG Root X1,O=Internet Security Research Group,C=US	13 May 2026	2 Sept 2032	RSA 4096	SHA256-RSA	f24b6d17f9d9ad7cb1c9fea78782699f

DNSSEC insecure

Validation of mcp.domainee.dev. — Not signed

Zone	DS	Keys	Algorithms	Outcome
.	trust_anchor	20326, 38696	8, 8	Verified
dev.	present	60074	8	Verified
domainee.dev.	absent			Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation

Authentication Enforced and verified

The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.

Result	Enforced and verified
Enforced	On connection
HTTP status	401

WWW-Authenticate challenge Bearer resource_metadata="https://mcp.domainee.dev/.well-known/oauth-protected-resource"

Bearer resource_metadata="https://mcp.domainee.dev/.well-known/oauth-protected-resource"

Header	Value
www-authenticate	Bearer resource_metadata="https://mcp.domainee.dev/.well-known/oauth-protected-resource"

Protected resource metadata

Document	https://mcp.domainee.dev/.well-known/oauth-protected-resource
Retrieved	Yes
Resource	https://mcp.domainee.dev
Authorisation server	https://api.domainee.dev

Transports 2 probes

Transport	URL	Outcome	Status	Location
streamable-http	https://mcp.domainee.dev/mcp	Auth required	401
http (plaintext)	http://mcp.domainee.dev/mcp	HTTPS enforced	301	https://mcp.domainee.dev/mcp

MCP tools — 16 exposed · ~968 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

tools_cname_lookup ~49

Free public API. Resolve a hostname's CNAME chain. Useful for debugging custom-domain CNAME setups.

Input Output Examples

Name	Type	Req	Description
host	string	yes	Hostname to resolve, e.g. www.example.com.

No output schema declared.

No examples provided.

tools_dkim_record_checker ~79

Free public API. Look up the DKIM record at <selector>._domainkey.<domain>, parse the public key, flag issues.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Domain to check DKIM for.
selector	string	yes	DKIM selector — `google`, `k1`, `mxvault`, `s1`, etc.

No output schema declared.

No examples provided.

tools_dmarc_record_checker ~60

Free public API. Look up the DMARC record at _dmarc.<domain>, parse policy/alignment/reporting tags, flag missing or too-permissive settings.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Domain to check DMARC for.

No output schema declared.

No examples provided.

tools_dns_propagation_checker ~68

Free public API. Query the same hostname across ~10 public DNS resolvers worldwide and report which ones return the same answer. Useful right after a DNS change.

Input Output Examples

Name	Type	Req	Description
host	string	yes	Hostname to check.
type	string	—	Record type. Default: A.

No output schema declared.

No examples provided.

tools_dns_record_lookup ~75

Free public API. Look up DNS records (A, AAAA, CNAME, MX, TXT, NS, SOA) for any domain.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Domain to query, e.g. example.com.
type	string	—	Restrict to one record type. Default: all common types.

No output schema declared.

No examples provided.

tools_domain_age_checker ~45

Free public API. Returns a domain's registration date, age in days + years, last-updated date, and expiration.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Domain to check.

No output schema declared.

No examples provided.

tools_domain_availability_checker ~102

Free public API. Check availability of a name across one or more TLDs. Pass a `name` (no TLD) and an optional `tlds` array.

Input Output Examples

Name	Type	Req	Description
name	string	yes	Bare name without TLD, e.g. `mybrand`.
tlds	array	—	Optional list of TLDs to check, e.g. ['com', 'io', 'dev']. Default: a standard SaaS set.

No output schema declared.

No examples provided.

tools_http_header_checker ~50

Free public API. Fetch a URL and return its response headers + security grade based on common security headers.

Input Output Examples

Name	Type	Req	Description
url	string	yes	Full URL with scheme, e.g. https://example.com.

No output schema declared.

No examples provided.

tools_redirect_checker ~42

Free public API. Follow a URL's redirect chain and return every hop with status code, response time, final destination.

Input Output Examples

Name	Type	Req	Description
url	string	yes	Starting URL.

No output schema declared.

No examples provided.

tools_reverse_ip_lookup ~60

Free public API. Reverse-DNS (PTR) lookup for an IP address. Returns one or more hostnames if configured.

Input Output Examples

Name	Type	Req	Description
ip	string	yes	IPv4 or IPv6 address, e.g. 8.8.8.8.

No output schema declared.

No examples provided.

tools_spf_record_checker ~63

Free public API. Look up and validate the SPF record for a domain. Counts void/total DNS lookups, flags syntax issues, validates against RFC 7208's 10-lookup limit.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Domain to check SPF for.

No output schema declared.

No examples provided.

tools_ssl_check ~74

Free public API. Check the TLS certificate of any public hostname. Returns issuer, subject, validity dates, days until expiry, full chain, cipher, protocol, and SAN list. No Bearer required.

Input Output Examples

Name	Type	Req	Description
host	string	yes	Hostname to check. Optionally with port, e.g. example.com:443.

No output schema declared.

No examples provided.

tools_subdomain_finder ~42

Free public API. Enumerate subdomains for a target domain via Certificate Transparency logs + DNS resolution.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Apex domain to enumerate.

No output schema declared.

No examples provided.

tools_txt_record_lookup ~56

Free public API. Fetch all TXT records on a domain, classifying each as SPF, DKIM, DMARC, BIMI, verification token, or general.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Domain to fetch TXT records for.

No output schema declared.

No examples provided.

tools_website_status_checker ~53

Free public API. Check if a website is up or down. Returns HTTP status, response time, final URL after redirects, basic SSL info.

Input Output Examples

Name	Type	Req	Description
url	string	yes	URL to check (include scheme).

No output schema declared.

No examples provided.

tools_whois_lookup ~50

Free public API. WHOIS / RDAP lookup for a domain — registrar, status, created/updated/expires dates, nameservers.

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Domain to look up.

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

26 Jul 3 Aug

Day	Score
26 Jul	64
27 Jul	65
28 Jul	66
29 Jul	66
30 Jul	67
31 Jul	66
1 Aug	67
2 Aug	67
3 Aug	36