Every change Wellknown observed on this MCP server, newest first, with what it was before and what it became. Tool-surface changes carry the definition diff. Nothing here is edited after the fact.
Changed the definition of "osint_investigation_report"
Retrieve the final report of a completed OSINT investigation by investigationId. For a deep_infrastructure investigation the report also composes discover_subdomains for the target (a cached CT sample under `ctDiscovery`, never an inventory). Operator-deploy only; targets must be operator-authorized on the ⟨11 unchanged words⟩
Authorization not required, issuer https://dns-mcp.blackveilsecurity.com
Authorization not required, issuer https://dns-mcp.blackveilsecurity.com
Authorization not required, issuer https://dns-mcp.blackveilsecurity.com
Authorization not required, issuer https://dns-mcp.blackveilsecurity.com
Changed the definition of "brand_audit_batch_start", "brand_audit_get_report", "brand_audit_single" and 42 more
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
Changed the definition of "osint_investigate_domain_start", "osint_investigate_infrastructure_start", "osint_investigate_supply_chain_start" and 5 more
Start an async OSINT investigation for a domain. Operator-deploy only; targets must be operator-authorized on the recon watchlist; degrades to info when unprovisioned. Returns an investigationId ⟨10 unchanged words⟩
⟨9 unchanged words⟩ domain, IP, or org). Operator-deploy only; targets must be operator-authorized on the recon watchlist; degrades to info when unprovisioned. Returns an investigationId ⟨5 unchanged words⟩
Authorization not required, issuer https://dns-mcp.blackveilsecurity.com
Authorization not required, issuer https://dns-mcp.blackveilsecurity.com
Added "check_llms_txt" (80 tools before, 81 now)
Inspect a domain's published /llms.txt and /llms-full.txt for links and install instructions an AI agent could inherit from someone else. Parses and dedupes the links (same-origin vs external), sweeps external link hosts for dangling CNAMEs and deprovisioned-service fingerprints (evidence of a dangling service, not proof it can be claimed), and checks package names in npm/npx/pnpm/yarn/pip/uv/pipx install commands against the npm or PyPI registry (an unregistered name is claimable) and OSV malicious-package (MAL-) advisories. Detection only; not scored. Anything not measured is listed under n…
Authorization not required, issuer https://dns-mcp.blackveilsecurity.com
Authorization not required, issuer https://dns-mcp.blackveilsecurity.com
Authorization not required, issuer https://dns-mcp.blackveilsecurity.com
Authorization not required, issuer https://dns-mcp.blackveilsecurity.com
Changed the definition of "check_authoritative_dns_infra" and "check_root_server_set"
CheckMeasure authoritative DNS infrastructure posture for ahostname.hostnameUsesoverBV_INFRA_PROBEdirectwhenDNS-over-TCP/53availablefrom a single vantage: TCP/53 reachability, the authoritative AA flag, recursion exposure, SOA serial consistency across nameservers, DNSKEY/RRSIG presence (not validation), IPv4/IPv6 answer parity, and unsupported-query handling — plus, forrawauthenticated callers, a zone-transfer refusal test (first response only, no zone data retrieved) and CHAOS version.bind/id.server disclosure. Reports UDP/53 reachability, amplification, EDNS large-response/truncation,
Authorization not required, issuer https://dns-mcp.blackveilsecurity.com
Authorization not required, issuer https://dns-mcp.blackveilsecurity.com
Changed the definition of "check_dane"
⟨14 unchanged words⟩ and looks up TLSA records at _25._tcp.<mx-host>,verifyingvalidatingwhethertheirSMTPsyntax,mail-serverusage/selector/matching-typecertificatesfieldsareandboundDNSSECinbackingDNSon(DNSSEC-backed
Authorization not required, issuer https://dns-mcp.blackveilsecurity.com
Changed the definition of "sge_quickscan"
⟨15 unchanged words⟩ agencies must satisfy by October 2026. Reports allsixseven SGE controls — DMARC p=reject, SPF -all, DKIM, SMTP transport TLS, MTA-STS enforce, TLS-RPT, full sub-domain coverage — each as satisfied, not satisfied, or NOT MEASURED, with the structured evidence behind every verdict. Neither SMTP transport TLScannotnor sub-domain coverage can be observed fromDNSa single domain scan, so a DNS-only result tops out at ⟨15 unchanged words⟩
Authorization not required, issuer https://dns-mcp.blackveilsecurity.com
Authorization not required, issuer https://dns-mcp.blackveilsecurity.com
Added "sge_quickscan" (79 tools before, 80 now)
Answer, for ONE domain, whether it meets the New Zealand Secure Government Email (SGE) requirements agencies must satisfy by October 2026. Reports all six SGE controls — DMARC p=reject, SPF -all, DKIM, SMTP transport TLS, MTA-STS enforce, TLS-RPT — each as satisfied, not satisfied, or NOT MEASURED, with the structured evidence behind every verdict. SMTP transport TLS cannot be observed from DNS, so a DNS-only result tops out at INDETERMINATE, which is not a pass. Distinct from map_compliance, which maps findings to NIST/PCI/SOC 2/CIS.
Certificate recorded, valid to 2026-11-20
Authorization not required, issuer https://dns-mcp.blackveilsecurity.com
First tool surface recorded: 79 tools (server version 3.78.0)
Showing the latest 26 events. The API returns up to 500 and filters by kind: ?kind=tool_surface_changed
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
⟨22 unchanged words⟩ "},"score":{"type":"number"},"verdictWithheld":{"type":"boolean"}},"required":["category","score"," ⟨4 unchanged words⟩
Start an async supply-chain OSINT investigation for a query. Operator-deploy only; targets must be operator-authorized on the recon watchlist; degrades to info when unprovisioned. Returns an investigationId ⟨5 unchanged words⟩
⟨5 unchanged words⟩ a completed OSINT investigation by investigationId. Operator-deploy only; targets must be operator-authorized on the recon watchlist; degrades to info when unprovisioned or not yet complete.
Poll the status of an OSINT investigation by investigationId. Operator-deploy only; targets must be operator-authorized on the recon watchlist; degrades to info when unprovisioned. Returns current status ⟨8 unchanged words⟩
Retrieve findings from a completed cloud-bucket discovery scan by scanId. Operator-deploy only; targets must be operator-authorized on the recon watchlist; degrades to info when unprovisioned. The scanId is ⟨12 unchanged words⟩
Start an async cloud-bucket discovery scan for a target domain. Operator-deploy only; targets must be operator-authorized on the recon watchlist; degrades to info when unprovisioned. Returns a scanId ⟨11 unchanged words⟩
Poll the status of a cloud-bucket discovery scan by scanId. Operator-deploy only; targets must be operator-authorized on the recon watchlist; degrades to info when unprovisioned. Returns scan status ⟨8 unchanged words⟩
CheckQuerytheaDNSrotating sample of 3 rootserverservers per call and compare the priming NS set, glue, SOA serials, and cross-root consistency against the embedded official roothints,hints.rootUsesglue,BV_INFRA_PROBEdelegation,whenserialavailable; without it,andreturnsDNSKEYthecross-rootembeddedevidence.hints as reference data only.