{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_fesmn353hr6h","handle":"com-domainposture-mcp","url":"https://wellknown.network/agents/com-domainposture-mcp","links":{"self":"https://wellknown.network/agents/com-domainposture-mcp/record.json","html":"https://wellknown.network/agents/com-domainposture-mcp","markdown":"https://wellknown.network/agents/com-domainposture-mcp/record.md","api":"https://wellknown.network/api/v1/agents/com-domainposture-mcp","status":"https://wellknown.network/api/v1/agents/com-domainposture-mcp/status","claim":"https://wellknown.network/agents/com-domainposture-mcp/claim","claimApi":"https://wellknown.network/api/v1/claims","badge":"https://wellknown.network/agents/com-domainposture-mcp/badge.svg","openapi":"https://wellknown.network/openapi.json"},"ard":{"identifier":"urn:air:www.domainposture.com:server:com-domainposture-mcp","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"mcp","summary":"Remote MCP server: 19 domain-hygiene and email-auth tools (DNS, SPF, DMARC, DKIM, TLS).","description":"Remote MCP server: 19 domain-hygiene and email-auth tools (DNS, SPF, DMARC, DKIM, TLS).","publisher":{"name":"com.domainposture","url":null},"homepage":"https://www.domainposture.com/mcp","repository":null,"version":"1.0.0","license":null,"protocols":["mcp"],"tags":[],"pricing":null,"endpoints":[{"url":"https://www.domainposture.com/mcp/mcp","type":"mcp_streamable_http","auth":null,"probeable":true}],"skills":null,"tools":null,"extra":{"updatedAt":"2026-07-09T13:41:39.693018Z","publishedAt":"2026-07-09T13:41:39.693018Z","registryName":"com.domainposture/mcp"},"attribution":{"kind":"mcp_registry","name":"mcp_registry","summary":"mcp_registry","version":"mcp_registry","description":"mcp_registry","homepageUrl":"mcp_registry","publisherName":"mcp_registry"}},"derived":{"capabilities":[{"slug":"productivity.email","name":"Email","confidence":1,"provenance":"derived"},{"slug":"security.identity","name":"Identity & Access","confidence":0.95,"provenance":"derived"},{"slug":"content.social","name":"Social Media","confidence":0.51,"provenance":"derived"},{"slug":"data.web-scraping","name":"Web Scraping","confidence":0.51,"provenance":"derived"},{"slug":"communication.chat","name":"Team Chat","confidence":0.51,"provenance":"derived"},{"slug":"infra.browser-automation","name":"Browser Automation","confidence":0.51,"provenance":"derived"}],"categories":["communication","content","data","infra","productivity","security"]},"observed":{"status":"live","statusReason":"Responded 1h ago.","lastOkAt":"2026-09-05T20:25:52.753Z","lastProbedAt":"2026-09-05T20:25:52.753Z","statusComputedAt":"2026-09-05T20:26:17.708Z","reliability30d":{"probes":1,"successRate":1,"p50Ms":791},"latestObservations":[{"at":"2026-09-05T20:25:52.753Z","kind":"mcp_initialize","ok":true,"httpStatus":200,"latencyMs":791,"error":null,"detail":{"tools":[{"name":"ip_lookup","description":"Context lookup: Resolve an IPv4 or IPv6 address to its geolocation, ASN, org name, and city/country. Use when you need network or location context for a raw IP "},{"name":"dns_lookup","description":"Context lookup: Resolve a single DNS record type (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA, or SRV) and return the raw answers. Use for quick, targeted lookups of "},{"name":"dossier_dns","description":"Core dossier check: Fetch a domain's full DNS profile — A, AAAA, NS, SOA, CAA, and TXT records — all in parallel. Use as the first step of a domain audit or whe"},{"name":"dossier_mx","description":"Core dossier check: Look up a domain's MX (mail exchanger) records and return them sorted ascending by priority. Use when verifying inbound-mail routing or as a"},{"name":"dossier_spf","description":"Core dossier check: Retrieve and parse a domain's SPF record, decomposing it into mechanisms and qualifiers. Use to verify email sender policy, debug delivery f"},{"name":"dossier_dmarc","description":"Core dossier check: Retrieve and parse a domain's DMARC policy from its _dmarc.<domain> TXT record, returning all tags. Use to audit email authentication policy"},{"name":"dossier_dkim","description":"Core dossier check: Probe a domain's DKIM public keys by querying <selector>._domainkey.<domain> for each selector. Use to verify signing configuration or disco"},{"name":"dossier_tls","description":"Core dossier check: Fetch and inspect the TLS certificate presented by a domain on port 443, returning chain details and validity period. Use to verify certific"},{"name":"dossier_redirects","description":"Core dossier check: Trace the full HTTP redirect chain starting from https://<domain>/, recording each hop's status code and destination URL. Use to debug redir"},{"name":"dossier_headers","description":"Core dossier check: Fetch https://<domain>/ and return all HTTP response headers, with an audit highlighting missing or misconfigured security headers. Use to r"},{"name":"dossier_cors","description":"Core dossier check: Send a CORS preflight OPTIONS request to https://<domain>/ and return the access-control-* response headers. Use to verify CORS policy for a"},{"name":"dossier_web_surface","description":"Core dossier check: Snapshot a domain's public web surface: robots.txt, sitemap.xml, and the home-page <head> metadata (title, description, OpenGraph, Twitter c"},{"name":"user_agent_parse","description":"Context lookup: Parse a User-Agent header string into structured browser, OS, device type, and rendering-engine components. Use to identify client capabilities "},{"name":"dossier_dnssec","description":"Core dossier check: Verify DNSSEC chain-of-trust for a domain (DS, DNSKEY, AD flag). Use to confirm the zone is signed and resolvers accept the chain; prefer do"},{"name":"dossier_mta_sts","description":"Core dossier check: Fetch and validate a domain's MTA-STS policy (mode, mx, max_age, policy id). Use to confirm inbound SMTP is locked to TLS for this domain. R"},{"name":"dossier_tlsrpt","description":"Core dossier check: Look up a domain's TLS-RPT (SMTP TLS Reporting) policy. Use to confirm the domain receives reports of SMTP-TLS failures. Resolves _smtp._tls"},{"name":"dossier_whois","description":"Core dossier check: Look up the registrar, creation date, expiry date, and registry statuses for a domain. Use for ownership/expiry audit. Queries WHOIS over TC"},{"name":"dossier_ct_log","description":"Core dossier check: Discover subdomains visible in Certificate Transparency logs. Use for attack-surface mapping; prefer dossier_full when running a complete au"},{"name":"dossier_ai_crawlers","description":"Core dossier check: Report a domain's AI-crawler policy — whether robots.txt allows, blocks, or is silent on the six major AI agents (GPTBot, ClaudeBot, Google-"},{"name":"dossier_llms_txt","description":"Core dossier check: Detect whether a domain publishes an llms.txt at its root — the emerging convention that gives AI agents a curated markdown index of a site'"},{"name":"dossier_security_txt","description":"Core dossier check: Verify a domain publishes a security.txt (RFC 9116) at /.well-known/security.txt — the standard machine-readable channel for reporting vulne"},{"name":"dossier_full","description":"Aggregate dossier check: Run all 10 Domain Dossier checks — dns, mx, spf, dmarc, dkim, tls, redirects, headers, cors, web-surface — in parallel and return all r"}],"toolCount":22,"serverName":"domainposture.com","capabilities":["tools"],"serverVersion":"0.1.0","protocolVersion":"2025-06-18"}}],"tools":[{"name":"ip_lookup","description":"Context lookup: Resolve an IPv4 or IPv6 address to its geolocation, ASN, org name, and city/country. Use when you need network or location context for a raw IP "},{"name":"dns_lookup","description":"Context lookup: Resolve a single DNS record type (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA, or SRV) and return the raw answers. Use for quick, targeted lookups of "},{"name":"dossier_dns","description":"Core dossier check: Fetch a domain's full DNS profile — A, AAAA, NS, SOA, CAA, and TXT records — all in parallel. Use as the first step of a domain audit or whe"},{"name":"dossier_mx","description":"Core dossier check: Look up a domain's MX (mail exchanger) records and return them sorted ascending by priority. Use when verifying inbound-mail routing or as a"},{"name":"dossier_spf","description":"Core dossier check: Retrieve and parse a domain's SPF record, decomposing it into mechanisms and qualifiers. Use to verify email sender policy, debug delivery f"},{"name":"dossier_dmarc","description":"Core dossier check: Retrieve and parse a domain's DMARC policy from its _dmarc.<domain> TXT record, returning all tags. Use to audit email authentication policy"},{"name":"dossier_dkim","description":"Core dossier check: Probe a domain's DKIM public keys by querying <selector>._domainkey.<domain> for each selector. Use to verify signing configuration or disco"},{"name":"dossier_tls","description":"Core dossier check: Fetch and inspect the TLS certificate presented by a domain on port 443, returning chain details and validity period. Use to verify certific"},{"name":"dossier_redirects","description":"Core dossier check: Trace the full HTTP redirect chain starting from https://<domain>/, recording each hop's status code and destination URL. Use to debug redir"},{"name":"dossier_headers","description":"Core dossier check: Fetch https://<domain>/ and return all HTTP response headers, with an audit highlighting missing or misconfigured security headers. Use to r"},{"name":"dossier_cors","description":"Core dossier check: Send a CORS preflight OPTIONS request to https://<domain>/ and return the access-control-* response headers. Use to verify CORS policy for a"},{"name":"dossier_web_surface","description":"Core dossier check: Snapshot a domain's public web surface: robots.txt, sitemap.xml, and the home-page <head> metadata (title, description, OpenGraph, Twitter c"},{"name":"user_agent_parse","description":"Context lookup: Parse a User-Agent header string into structured browser, OS, device type, and rendering-engine components. Use to identify client capabilities "},{"name":"dossier_dnssec","description":"Core dossier check: Verify DNSSEC chain-of-trust for a domain (DS, DNSKEY, AD flag). Use to confirm the zone is signed and resolvers accept the chain; prefer do"},{"name":"dossier_mta_sts","description":"Core dossier check: Fetch and validate a domain's MTA-STS policy (mode, mx, max_age, policy id). Use to confirm inbound SMTP is locked to TLS for this domain. R"},{"name":"dossier_tlsrpt","description":"Core dossier check: Look up a domain's TLS-RPT (SMTP TLS Reporting) policy. Use to confirm the domain receives reports of SMTP-TLS failures. Resolves _smtp._tls"},{"name":"dossier_whois","description":"Core dossier check: Look up the registrar, creation date, expiry date, and registry statuses for a domain. Use for ownership/expiry audit. Queries WHOIS over TC"},{"name":"dossier_ct_log","description":"Core dossier check: Discover subdomains visible in Certificate Transparency logs. Use for attack-surface mapping; prefer dossier_full when running a complete au"},{"name":"dossier_ai_crawlers","description":"Core dossier check: Report a domain's AI-crawler policy — whether robots.txt allows, blocks, or is silent on the six major AI agents (GPTBot, ClaudeBot, Google-"},{"name":"dossier_llms_txt","description":"Core dossier check: Detect whether a domain publishes an llms.txt at its root — the emerging convention that gives AI agents a curated markdown index of a site'"},{"name":"dossier_security_txt","description":"Core dossier check: Verify a domain publishes a security.txt (RFC 9116) at /.well-known/security.txt — the standard machine-readable channel for reporting vulne"},{"name":"dossier_full","description":"Aggregate dossier check: Run all 10 Domain Dossier checks — dns, mx, spf, dmarc, dkim, tls, redirects, headers, cors, web-surface — in parallel and return all r"}],"package":null},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"mcp_registry","key":"com.domainposture/mcp","url":"https://registry.modelcontextprotocol.io/v0/servers/com.domainposture%2Fmcp","firstSeenAt":"2026-09-05T18:20:03.391Z","fetchedAt":"2026-09-05T18:20:03.391Z","normalizedAt":"2026-09-05T18:20:03.391Z"}]},"firstSeenAt":"2026-09-05T18:20:03.391Z","updatedAt":"2026-09-05T20:26:25.786Z"}