Domain Scan

Check your domain security

Domain Scan by CYBERACE checks a domain's email, HTTPS and DNS security, including SPF, DKIM, DMARC, TLS certificates, security headers, DNSSEC and blocklists. Get a security score, per-check findings and suggested fixes, with a temporary report link when available.

What you can ask

Scan example.com and explain its domain security issues.
Example path

MCP connector

Server URL: https://api.domainscan.tools/functions/v1/mcp-server
Login: None
Protocol: MCP 2025-03-26
Instructions: Domain Scan by CYBERACE MCP server. Always pass bare domains (e.g. example.com): never include https://, paths, ports or subprotocol prefixes. Rate limits: anonymous is limited to 20 scans per 10 minutes per IP, and anonymous / to 20 lookups per 10 minutes per IP. Authenticated calls (API key via 'Authorization: Bearer ds_live_...') depend on the account plan: free accounts 30 calls/day and lists up to 50, trial 200 calls/day and lists up to 150, Pro up to 1,000 calls/hour with complete lists. and are read-only public lookups: they create no report and do not consume the scan quota. Deep neighbour discovery in runs automatically for everyone; anonymous replies list up to 20 domains; with an API key the list grows with the plan (50 free, 150 trial, complete on Pro). creates a temporary public report (expires in 7 days) behind an opaque link; do not publish that link publicly. Never send secrets, passwords or personal data in tool arguments. Results of , and include an optional signup_url for users who want ongoing monitoring. If the user asks for monitoring or alerts for a domain, returns the same link. Tools list_domains, get_domain_report, get_uptime and list_incidents require the user's personal API key, only expose that user's own data, and log API usage plus update the key's last-used timestamp. and scan_my_domain create records, consume quota and may send irreversible administrative notifications, so confirm with the user before running them repeatedly. A widget resource (ui://domain-scan/widget) is exposed for ChatGPT Apps discovery; the actual rendering depends on OpenAI's client support.

Tools

Reads data1

Changes data2

Deletes or can't be undone1

Skills

None in the store listings or on the server

MCP connector

Server URL

https://api.domainscan.tools/functions/v1/mcp-server

None

Protocol

MCP 2025-03-26

Instructions

Domain Scan by CYBERACE MCP server. Always pass bare domains (e.g. example.com): never include https://, paths, ports or subprotocol prefixes. Rate limits: anonymous is limited to 20 scans per 10 minutes per IP, and anonymous / to 20 lookups per 10 minutes per IP. Authenticated calls (API key via 'Authorization: Bearer ds_live_...') depend on the account plan: free accounts 30 calls/day and lists up to 50, trial 200 calls/day and lists up to 150, Pro up to 1,000 calls/hour with complete lists. and are read-only public lookups: they create no report and do not consume the scan quota. Deep neighbour discovery in runs automatically for everyone; anonymous replies list up to 20 domains; with an API key the list grows with the plan (50 free, 150 trial, complete on Pro). creates a temporary public report (expires in 7 days) behind an opaque link; do not publish that link publicly. Never send secrets, passwords or personal data in tool arguments. Results of , and include an optional signup_url for users who want ongoing monitoring. If the user asks for monitoring or alerts for a domain, returns the same link. Tools list_domains, get_domain_report, get_uptime and list_incidents require the user's personal API key, only expose that user's own data, and log API usage plus update the key's last-used timestamp. and scan_my_domain create records, consume quota and may send irreversible administrative notifications, so confirm with the user before running them repeatedly. A widget resource (ui://domain-scan/widget) is exposed for ChatGPT Apps discovery; the actual rendering depends on OpenAI's client support.