Give your AI agent 20 domain-recon tools in one line

DechoNet speaks the Model Context Protocol. Point Claude Code, Claude Desktop, Cursor or any MCP client at the URL below and it can check DNS, certificates, security headers, email authentication, subdomains, lookalike domains and OWASP posture — every result interpreted with severity, cause and the action to take. Free, no account, no API key.

https://dechonet.com/mcp

Connect in ten seconds

Claude Code (remote, zero install)

claude mcp add --transport http dechonet https://dechonet.com/mcp

Cursor / Windsurf / any HTTP client (mcp.json)

{
  "mcpServers": {
    "dechonet": {
      "url": "https://dechonet.com/mcp"
    }
  }
}

Claude Desktop (npm package, stdio)

{
  "mcpServers": {
    "dechonet": {
      "command": "npx",
      "args": [
        "-y",
        "dechonet-mcp"
      ]
    }
  }
}

Claude Desktop connects to local stdio servers; the npm package calls the same backend. Config: claude_desktop_config.json.

The workflow the server suggests to the agent

1. security_scan

One call, nine checks in parallel, a 0–100 health score and the areas that need attention.

2. Drill into the flagged area

ssl_check, http_security, email_auth, subdomain_discovery, lookalike_domains, owasp_check, impersonation_exposure — each with a link to the full report for the human.

3. watch_domain

When the domain matters beyond today, the agent starts a daily watch. No email, no account; the history page is a shareable link.

4. domain_changes, first thing next time

What changed since the last check — grade drops, new issues, certificate renewals, DNS drift. Works from stored lookups even without a watch. A fresh one-off scan cannot tell you this.

The 20 tools

Passive and read-only, except watch_domain which creates a watch. Same engine as the free web tools.

  • dns_lookupDNS Lookup
  • ssl_checkSSL Certificate Check
  • http_securityHTTP Security Headers Audit
  • email_authEmail Authentication Check
  • port_scanOpen Port Scan
  • dns_propagationDNS Propagation Check
  • reverse_dnsReverse DNS (PTR) Lookup
  • asn_lookupASN / BGP Lookup
  • whois_lookupWHOIS / RDAP Domain Lookup
  • subdomain_discoverySubdomain Discovery
  • lookalike_domainsLookalike Domain Check
  • ip_infoMy IP Info
  • email_header_analysisEmail Header Analysis
  • subnet_calcIPv4 Subnet Calculator
  • security_scanFull Domain Security Scan
  • owasp_checkOWASP Security Checkup
  • impersonation_exposureBrand Impersonation Exposure
  • domain_changesDomain Change History
  • watch_domainWatch a Domain (daily re-check)
  • golive_checkGo-Live Readiness Checklist

Principles

  • Interpretation over raw data: every result carries status, key numbers, issues with confidence, and concrete actions.
  • Passive by design: DNS, certificates, CT logs, HTTP headers, RDAP. No exploitation. A registered lookalike is reported as a fact to verify, never as an accusation.
  • Cross-verification: independent sources are compared where possible (multiple DNS resolvers, CT logs plus live TLS).
npm: dechonet-mcp GitHub: node-man/dechonet-mcp Same tools on the web Daily monitoring (Pro)