scan_domain
ActiveTool of com.blackveilsecurity/dns
declared in 3.29.5
Run a full DNS and email security audit for a single domain. Aggregates every scan-included check in parallel (SPF, DKIM, DMARC, DNSSEC, TLS/SSL, MTA-STS, CAA, BIMI, subdomain takeover, and more) and returns an overall security score, NIST-aligned letter grade (6-band A+/A/B/C/D/F), maturity stage, and prioritized findings. Use for a comprehensive single-domain audit, to get a domain's overall security grade, or to assess email security maturity.
Parameters schema
{
"type": "object",
"required": [
"domain"
],
"properties": {
"domain": {
"type": "string",
"maxLength": 253,
"minLength": 1,
"description": "Domain to check (e.g., example.com)"
},
"format": {
"enum": [
"full",
"compact"
],
"type": "string",
"description": "Output verbosity. Auto-detected if omitted."
},
"profile": {
"enum": [
"auto",
"mail_enabled",
"enterprise_mail",
"non_mail",
"web_only",
"minimal",
"authoritative_dns_infra"
],
"type": "string",
"description": "Scoring profile. Default \"auto\" detects."
},
"force_refresh": {
"type": "boolean",
"description": "Bypass cache and run a fresh scan. Useful after DNS changes."
}
}
}No endpoints wrapped at confidence ≥ 0.50.
Parent server
com.blackveilsecurity/dns
https://github.com/MadaBurns/bv-mcp
2/7 registries