
Domain Health checks any domain the way a mail server, a browser and a registry do, and explains what it finds in plain words.
Email: MX, SPF expanded through every include and counted against the 10-lookup limit, DMARC policy, alignment and report permissions, DKIM keys at common selectors or ones you name, BIMI, MTA-STS, TLS-RPT, and the DNS requirements Google, Yahoo and Microsoft set for bulk senders. Website: certificate issuer, expiry, chain and name match, accepted TLS versions, CAA, and browser security headers including HSTS, CSP and clickjacking protection.
https://mcp.modernmustardseed.com/domain-healthDomain Health checks any public domain. covers MX, SPF, DKIM, DMARC, BIMI, MTA-STS and TLS-RPT; covers the certificate and TLS versions; covers browser security headers; reads RDAP and DNSSEC; runs all four. All tools are read-only and reach only public DNS resolvers, registries and web servers.
None in the store listings or on the server