thenetworkery

com.thenetworkeryPublished by thenetworkery.comOfficial publisherv1.1.0Updated Nov 4, 2026

DNS, email auth, TLS, BGP/RPKI, WHOIS and subnet tools with plain-English fixes, plus webhook URLs.

VerifiedStreamable HTTPWeb executableCloud & InfrastructureDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Remote MCP server for DNS, email authentication, TLS, BGP/RPKI, WHOIS and subnet checks, plus temporary webhook URLs that record callbacks.

What you can do
  • Run a combined domain report covering DNS, DNSSEC, email security, blocklists, certificates and HTTPS with a security grade.
  • Look up DNS records, DNSSEC status, nameserver health, WHOIS/RDAP holders and reverse DNS.
  • Grade SPF, DKIM, DMARC, MTA-STS and BIMI, inspect pasted email headers, build SPF/DMARC records and check blocklist listings.
  • Check TLS certificates and HTTP security headers, search certificate transparency logs, and test whether a TCP port is reachable.
  • Inspect IP, prefix and AS data: BGP origin and RPKI validity, PeeringDB records, MAC vendor lookup, subnet math and DN42 registry lookups and peering configs.
  • Create a webhook URL that records incoming requests for 7 days…
When to use it
Useful when you want an assistant to diagnose why a domain, mail setup, certificate or route is misbehaving, or to audit security posture with plain-English fixes. Also handy for inspecting webhook callbacks without standing up your own endpoint.
Requirements
A remote streamable HTTP endpoint; no package, environment variables or headers declared. No authentication is declared. The assistant needs network access to the provider's endpoint.
Before you install
The webhook tools create a public URL that records every request sent to it for 7 days, so anything posted there is captured by a third party; treat the returned bin id and key as secrets. Email headers and JWT contents you submit are sent to the provider (the JWT tool states the token is not stored). Checks are read-only lookups of public data, but results are saved and returned as URLs.

Installation

In SourceWeft

  1. Open thenetworkery in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.thenetworkery%2Fnetwork-tools/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "thenetworkery": {
      "type": "http",
      "url": "https://thenetworkery.com/mcp"
    }
  }
}

Tools

28

domain_report

Domain health report

DNS, DNSSEC, email security, blocklists, certificates, HTTPS and registration in one report with a security grade (A+ to F) and what to fix first.

Parametersdomainrequired

dns_lookup

DNS lookup

Every record for a name from its authoritative nameservers or a public resolver, or one record compared across 13 resolvers worldwide.

Parametersnamerequiredtyperesolver

dnssec

DNSSEC check

Is the zone signed, does the chain of trust validate, and are the algorithms current?

Parametersnamerequired

nameserver_check

Nameserver health check

Tests every nameserver of a domain directly: lame or unreachable servers, NS and glue mismatches, SOA serials, open recursion, TCP and EDNS.

Parameterszonerequired

email_auth

Email security check

SPF, DKIM, DMARC, MTA-STS, TLS-RPT and BIMI graded, with the exact records to fix what is missing.

Parametersdomainrequired

email_headers

Email test

Paste a message's headers to see its route and delays, SPF, DKIM and DMARC results with alignment, and why it may have gone to spam.

Parametersheadersrequired

email_record_builder

Email record builder

Build an SPF record from the services that send your mail, or a DMARC record from a policy, and compare it with the one you publish now.

Parametersptspallpctruarufaspftypeadkimextradomainrequired+1 more

blacklist

Blacklist check

Is an IP, a domain or its mail servers on the spam blocklists receivers use – and how to get delisted.

Parameterstargetrequired

ssl_check

SSL/TLS certificate check

Certificate, chain, expiry, hostname match, key strength and the TLS version a server negotiates.

Parametershostrequiredport

http_headers

HTTP headers & security check

Redirect chain, response headers and a graded check of HSTS, CSP and the other security headers.

Parametersurlrequired

network_report

Network report

Who holds an IP address, prefix or AS number, how it is routed (origin AS, RPKI, IRR), its reverse DNS, blocklist listings and PeeringDB record, with what to fix first.

Parametersqueryrequired

whois

WHOIS / RDAP lookup

Who holds a domain, IP address or AS number – from the registry, via RDAP.

Parametersqueryrequired

bgp

ASN & BGP prefix lookup

Origin AS, visibility, RPKI validity, upstreams and announced prefixes from the global routing table.

Parametersqueryrequired

rpki

RPKI / ROA validator

Whether a route is RPKI valid, invalid or not found, with the ROAs covering the prefix, max-length mistakes and how to fix them.

Parametersasnprefixrequired

peeringdb

PeeringDB lookup

A network’s peering policy, internet exchange ports, facilities and NOC contacts from PeeringDB.

Parametersasnrequired

reverse_dns

Reverse DNS (PTR) check

The PTR name of an IP address, whether it resolves back to the same IP (FCrDNS), and whether it looks generic.

Parametersqueryrequired

port_check

Open port check

Whether a TCP port is open, closed or filtered from the internet, from one timed connection from our server.

Parametershostrequiredportrequired

subnet_calculator

IP calculator

Subnet ranges, masks and splits for IPv4 and IPv6, IPv6 and EUI-64 address details, and merging lists into the fewest CIDRs.

Parameterscidrlistmodesplitprefixaddressexclude

mcp_server_test

MCP server tester

Connect to a remote MCP server like an AI assistant would: handshake, tools, resources, prompts, OAuth discovery and context cost, checked against the spec.

Parametersurlrequiredtooltokenarguments

jwt_decoder

JWT decoder

Decode a JSON Web Token's header and claims, check alg, exp, nbf and iat, and verify its signature if you give a key; the token is never stored.

Parameterskeytokenrequired

mac_lookup

MAC address vendor lookup

Who made a network card, from the IEEE registry – and whether the address is randomised.

Parametersmacrequired

dn42_registry

DN42 registry search

Look up any DN42 object – AS, IP, prefix, maintainer, person or .dn42 domain – with everything linked to it.

Parametersqueryrequired

dn42_free

DN42 free resource finder

Unregistered AS numbers, free IPv4 blocks and a random unused IPv6 /48 – checked against the live registry.

Parameterssize

dn42_peering_config

DN42 peering config generator

WireGuard, BIRD 2 and RouterOS 7 configs for a DN42 peering, following the wiki conventions.

Parametersenhour_asnrequiredour_ll6endpointour_ipv4peer_asnrequiredpeer_ll6requiredpeer_ipv4peer_pubkey

create_webhook_url

Create a webhook URL

Creates a public URL that records every request sent to it (webhooks, callbacks) for 7 days, and returns its bin id and key for the other webhook tools.

Parametersnameresponse_bodyresponse_typeresponse_status

list_webhook_requests

List requests received by a webhook URL

Requests a webhook URL received, oldest first: pass after_id for only newer ones, and wait_seconds to wait briefly for the next.

Parametersbinrequiredkeylimitafter_idwait_seconds

get_webhook_request

Get one request received by a webhook URL

One request received by a webhook URL in full (every header, the body, base64 if binary) with a curl command that sends it again.

Parametersbinrequiredkeyrequest_idrequired

Version history

2
  1. v1.1.0LatestNov 4, 2026
  2. v1.0.0Nov 3, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.