generate
ActiveTool of com.blackveilsecurity/dns
Generate a DNS/email security remediation artifact. Artifact types: spf_record (build a new SPF record), dmarc_record (create a DMARC policy), dkim_config (DKIM key setup), mta_sts_policy (generate an MTA-STS policy file), fix_plan (prioritized remediation plan for all findings), or rollout_plan (phased DMARC enforcement timeline). Use when asked to generate or create a record or policy.
Parameters schema
{
"type": "object",
"required": [
"artifact",
"domain"
],
"properties": {
"domain": {
"type": "string",
"maxLength": 253,
"minLength": 1,
"description": "Domain (e.g., example.com)"
},
"format": {
"enum": [
"full",
"compact"
],
"type": "string",
"description": "Output verbosity. Auto-detected if omitted."
},
"policy": {
"enum": [
"none",
"quarantine",
"reject"
],
"type": "string",
"description": "dmarc_record: policy (default \"reject\")."
},
"artifact": {
"enum": [
"fix_plan",
"spf_record",
"dmarc_record",
"dkim_config",
"mta_sts_policy",
"rollout_plan"
],
"type": "string",
"description": "Which artifact to generate (e.g., \"dmarc_record\", \"fix_plan\")."
},
"mx_hosts": {
"type": "array",
"items": {
"type": "string",
"pattern": "^[^\\s\\x00-\\x1f\\x7f]*$",
"maxLength": 253,
"minLength": 1
},
"maxItems": 20,
"description": "mta_sts_policy: MX hosts. Omit to detect from DNS."
},
"provider": {
"type": "string",
"maxLength": 100,
"description": "dkim_config: provider (e.g., \"google\"). Omit for generic."
},
"timeline": {
"enum": [
"aggressive",
"standard",
"conservative"
],
"type": "string",
"description": "rollout_plan: rollout speed (default: standard)."
},
"rua_email": {
"type": "string",
"pattern": "^[^\\s;,@\\x00-\\x1f\\x7f]+@[^\\s;,@\\x00-\\x1f\\x7f]+\\.[^\\s;,@\\x00-\\x1f\\x7f]+$",
"maxLength": 254,
"description": "dmarc_record: report email. Default: dmarc-reports@{domain}."
},
"force_refresh": {
"type": "boolean",
"description": "fix_plan: bypass cache and run a fresh scan."
},
"target_policy": {
"enum": [
"quarantine",
"reject"
],
"type": "string",
"description": "rollout_plan: target DMARC policy (default: reject)."
},
"include_providers": {
"type": "array",
"items": {
"type": "string",
"pattern": "^[a-z0-9._-]+$",
"maxLength": 253,
"minLength": 1
},
"maxItems": 15,
"description": "spf_record: providers to include (e.g., [\"google\"])."
}
}
}No endpoints wrapped at confidence ≥ 0.70.
Parent server
com.blackveilsecurity/dns
https://github.com/MadaBurns/bv-mcp
2/7 registries