brand_audit_single
ActiveTool of com.blackveilsecurity/dns
Run a full brand audit on a single target with optional standard/deep discovery depth, brand aliases, and caller-supplied candidate domains. Discovers brand-related domains, looks up registrar + registrant for each candidate, and classifies each into consolidated, real registrar-sprawl shadowIt, authorized vendor dependency, indeterminate, or impersonation relationships. Gated tier-wide by monthly BRAND_AUDIT_QUOTAS (free/agent=0, developer=50, partner=200, enterprise=500, owner=unlimited).
Parameters schema
{
"type": "object",
"required": [
"domain"
],
"properties": {
"view": {
"enum": [
"standard",
"csc_complement"
],
"type": "string",
"description": "Output view mode. 'csc_complement' produces a CSC-tuned payload; requires enterprise tier. Default 'standard'."
},
"depth": {
"enum": [
"standard",
"deep"
],
"type": "string",
"description": "Discovery depth. standard is default; deep expands candidate seeding and enrichment fanout."
},
"domain": {
"type": "string",
"maxLength": 253,
"minLength": 1,
"description": "Target domain to audit (e.g., apple.com)."
},
"format": {
"anyOf": [
{
"type": "string",
"const": "json"
},
{
"type": "string",
"const": "markdown"
},
{
"type": "string",
"const": "both"
}
],
"description": "Inline output mode. Defaults to \"both\"."
},
"planner_mode": {
"enum": [
"off",
"observe",
"enforce"
],
"type": "string",
"description": "Planner mode for staged discovery fanout. observe emits metrics; enforce applies candidate-backed signal caps."
},
"brand_aliases": {
"type": "array",
"items": {
"type": "string",
"maxLength": 64,
"minLength": 2
},
"maxItems": 20,
"description": "Optional public brand aliases to seed, such as product or legal-entity labels."
},
"force_refresh": {
"type": "boolean",
"description": "Bypass cache and run a fresh check. Useful after DNS changes."
},
"discovery_mode": {
"enum": [
"classic",
"tiered"
],
"type": "string",
"description": "Brand-discovery pipeline mode. classic = legacy sweep; tiered = tenant/graph/evidence wrappers first (BlackVeil-internal)."
},
"min_confidence": {
"type": "number",
"maximum": 1,
"minimum": 0,
"description": "Drop candidates whose combined confidence falls below this threshold (0-1, default 0.5)."
},
"candidate_domains": {
"type": "array",
"items": {
"type": "string",
"maxLength": 253,
"minLength": 1
},
"maxItems": 250,
"description": "Optional candidate domains supplied by the caller for corroboration."
},
"ownership_verified": {
"type": "boolean",
"description": "Caller attests that the target domain is owned or authorized for scanning. Required when discovery_mode is \"tiered\" and the caller is not an enterprise/owner/partner principal."
}
}
}No endpoints wrapped at confidence ≥ 0.70.
Parent server
com.blackveilsecurity/dns
https://github.com/MadaBurns/bv-mcp
2/7 registries