Dotmoose Tools

io.github.dotmoosehostingPublished by GitHub account dotmoosehostingv1.0.0Updated Oct 24, 2026

Public DNS, mail, TLS, and web diagnostics plus Looking Glass probes via remote MCP.

Overview

AI-generated overview

Anonymous remote MCP server for public DNS, domain, mail, TLS, HTTP and website diagnostics, Looking Glass probes from Canada, and network calculators.

What you can do
Run DNS checks: propagation across resolvers, delegation, DNSSEC, CNAME chains, RDAP and IP/ASN lookups, reverse DNS, blacklists, and subnet or range-to-CIDR math. Audit mail setup: SPF, DMARC, DKIM, MX, SMTP STARTTLS, MTA-STS, TLS-RPT and BIMI, plus SPF and DMARC record builders. Inspect TLS and HTTP: certificate and configuration checks, redirect chains, status, timing, compression, IPv6, security headers, security.txt, favicon, page metadata, robots.txt, sitemaps and same-page link audits. Probe the network from the DotMoose node in Canada with ping, traceroute and path sampling. Estimate bandwidth, storage growth and backup retention locally.
When to use it
Useful when troubleshooting a domain's DNS, email deliverability or TLS setup, checking a site's public security and SEO-facing metadata, or comparing reachability from a Canadian vantage point. All checks are read-only and need no account.
Requirements
A remote Streamable HTTP endpoint; no local install, account or API key. Targets must resolve only to public addresses, since private, loopback, link-local and reserved destinations are rejected.
Before you install
Results are point-in-time observations, not uptime guarantees. Do not send passwords, API keys, private hostnames or customer data; the service says it does not collect them. Each result links to a dotmoose.com tool page, and account, billing and purchase operations live in separate endpoints, not this one.

Installation

In SourceWeft

  1. Open Dotmoose Tools in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.dotmoosehosting%2Fdotmoose-tools/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "dotmoose-tools": {
      "type": "http",
      "url": "https://mcp.dotmoose.com/tools/mcp"
    }
  }
}

README

DotMoose MCP

Official Model Context Protocol endpoints for DotMoose hosting, domains, support, diagnostics, and managed application deployment.

This repository contains public connection metadata and documentation. The production implementation remains operated by DotMoose so customers do not need to install or run a local server.

Endpoints

EndpointAuthenticationIntended use
https://mcp.dotmoose.com/public/mcpNoneProduct and domain discovery, quotes, publication planning, and a secure first-party signup handoff
https://mcp.dotmoose.com/tools/mcpNonePublic DNS, domain, mail, TLS, HTTP, and website diagnostics, Looking Glass probes from Canada, and network calculators
https://mcp.dotmoose.com/mcpOAuth 2.1Existing-customer account, service, support, diagnostics, and confirmation-gated operations

Health checks:

  • https://mcp.dotmoose.com/public/healthz
  • https://mcp.dotmoose.com/tools/healthz
  • https://mcp.dotmoose.com/healthz

The service uses stateless Streamable HTTP with the MCP 2026-07-28 protocol revision and a 2025-11-25 compatibility path for established clients.

Open any endpoint in a normal web browser to see its tool inventory, setup examples, and safety model. These documentation pages do not require authentication. MCP protocol requests to the account endpoint still require OAuth 2.1; strict content negotiation keeps browser HTML and protocol traffic separate.

Quick connection

For product and domain discovery, add this remote server to an MCP client:

json
{  "mcpServers": {    "dotmoose-public": {      "url": "https://mcp.dotmoose.com/public/mcp"    }  }}

For the free diagnostic tools, add the Tools endpoint instead:

json
{  "mcpServers": {    "dotmoose-tools": {      "url": "https://mcp.dotmoose.com/tools/mcp"    }  }}

Existing DotMoose customers can use the authenticated endpoint. Compatible clients open DotMoose authorization in the browser and request the scopes needed for the selected tool:

json
{  "mcpServers": {    "dotmoose": {      "url": "https://mcp.dotmoose.com/mcp"    }  }}

Do not put a DotMoose password, API token, payment detail, MFA code, domain transfer code, or deployment secret in an MCP configuration file or chat prompt.

Client setup

ChatGPT and Codex

The repository includes a portable Agent Plugin manifest. In supported local Codex clients, add this repository as a plugin marketplace source:

text
codex plugin marketplace add dotmoosehosting/dotmoose-mcp

Restart the desktop app, open the Plugins Directory, select the DotMoose source, and install DotMoose. The install includes the public discovery, public diagnostic, and OAuth-protected account endpoints. Authentication opens only when an account-scoped tool needs it.

For direct testing in ChatGPT Developer Mode, add https://mcp.dotmoose.com/mcp as a custom MCP server.

The root plugin is the all-in-one local install. OpenAI's public review flow accepts one MCP server per plugin, so docs/openai-submission.md documents the separately validated account, discovery, and diagnostics submission bundles.

Cursor

Add either endpoint to your user or project mcp.json. Cursor can also install portable Agent Plugins from a public Git repository, so this repository can be submitted directly to the Cursor Marketplace.

Claude, VS Code, and other MCP clients

Use the remote Streamable HTTP URL in the client's MCP server settings. Choose the public endpoint for anonymous discovery or the account endpoint for OAuth-protected customer operations.

What the tools do

The anonymous endpoint exposes eight intentionally narrow tools:

  • list_public_products
  • quote_public_product
  • recommend_product
  • list_current_promotions
  • check_domain_availability
  • quote_domain
  • plan_app_publication
  • start_signup

The Tools endpoint exposes 40 read-only tools that need no account:

  • 33 diagnostics that run the same public checks as the free tools at dotmoose.com/tools: DNS propagation, delegation, DNSSEC, CNAME chains, RDAP, IP and reverse DNS lookups, TLS certificate and configuration, HTTP chains and status, web timing, website security, security.txt, compression, IPv6, favicon, link audits, page metadata, robots.txt, sitemaps, SPF, DMARC, DKIM, MX, SMTP STARTTLS, MTA-STS, TLS-RPT, BIMI, blacklist checks, and Looking Glass ping, traceroute, and path probes from the DotMoose network in Canada.
  • 7 local calculators and builders: subnet calculation, IP range to CIDR conversion, bandwidth calculation, storage growth and backup retention estimates, and SPF and DMARC record builders.

Targets must resolve only to public addresses. The diagnostic service rejects private, loopback, link-local, and reserved destinations. Results are point-in-time observations and each one links to the matching tool page on dotmoose.com.

The account endpoint exposes tools for session and service discovery, support, diagnostics, security assessment, deployment planning, source and image deployment preparation, launch-readiness verification, and other account operations. See docs/tools.md for the supported workflows and safeguards.

Safe action model

DotMoose separates planning from execution:

  1. Read tools inspect the authenticated account and service state.
  2. Prepare tools validate the requested change and store a short-lived action intent.
  3. The client shows the action, consequences, and required confirmation.
  4. Execute tools accept only the prepared action ID. They cannot replace its target or payload.
  5. The service rechecks OAuth scopes, service version, capacity, billing state, and provider preconditions before mutation.

Managed App deployment accepts either an immutable OCI image digest or an exact GitHub HTTPS repository and safe build settings. Secrets remain saved references in DotMoose and are never accepted as tool input.

Commercial boundary

The public MCP can create a short-lived selection intent and send the user to clients.dotmoose.com for first-party signup and checkout. It does not collect personal, password, MFA, payment, or credential data.

Managed App purchasing and general availability are controlled separately from the MCP software release. A working MCP deployment path does not by itself promise that a product is available for new purchase.

Support and policies

License

The distribution metadata and documentation in this repository are licensed under the MIT License. DotMoose service use remains governed by the linked service terms.

Source: README.md at commit 8ff4476

Tools

40

check_dns_propagation

Check DNS propagation

Check A, AAAA, MX, NS, and TXT answers for a hostname at the Cloudflare, Google, and Quad9 resolvers.

Parametersdomainrequired

check_domain_delegation

Check domain delegation

List the delegation nameservers for a domain and the A and AAAA glue addresses for each one.

Parametersdomainrequired

check_dnssec

Check DNSSEC

Check the DS and DNSKEY records for a domain and whether a validating resolver sets the AD flag on its answers.

Parametersdomainrequired

trace_cname_chain

Trace a CNAME chain

Follow the CNAME chain for a hostname, up to 12 aliases, and report loops.

Parametersdomainrequired

lookup_domain_rdap

Look up domain registration (RDAP)

Return the public RDAP registration summary for a domain. Registrant contact fields are not returned.

Parametersdomainrequired

lookup_ip_info

Look up IP information

Resolve a hostname, or take an IP address directly, and return RDAP network data and the ASN for each public address.

Parameterstargetrequired

check_forward_confirmed_rdns

Check forward-confirmed reverse DNS

Check the PTR record for an IP address and whether the name it returns resolves back to the same address.

Parametersiprequired

check_tls_certificate

Check a TLS certificate

Connect to a host on port 443 and return the TLS version, cipher, and certificate details including expiry and subject alternative names.

Parameterstargetrequired

check_tls_configuration

Check TLS configuration

Observe which TLS protocol versions a host accepts and summarize its TLS configuration.

Parameterstargetrequired

check_http_chain

Check an HTTP redirect chain

Fetch a URL and return each redirect hop with status codes and response headers.

Parameterstargetrequired

check_http_status

Check HTTP status

Fetch a URL and return the final status after following redirects.

Parameterstargetrequired

measure_web_performance

Measure web timing

Measure DNS, connect, TLS, and time to first byte for a URL from the DotMoose diagnostic node. This is a network timing sample. It is not a browser rendering benchmark.

Parameterstargetrequired

check_website_security

Check website security controls

Review the security controls a site exposes in its public responses, including security headers, cookie attributes, and CORS policy.

Parameterstargetrequired

check_security_txt

Check security.txt

Fetch and parse the security.txt file for a site.

Parameterstargetrequired

check_compression

Check compression

Check whether a URL is served with gzip or Brotli compression and report the sizes with and without compression.

Parameterstargetrequired

check_ipv6_website

Check IPv6 website reachability

Check whether a site answers over IPv6 and compare the result with IPv4.

Parameterstargetrequired

check_favicon

Check a favicon

Locate the favicon a site declares and report its URL, type, and size.

Parameterstargetrequired

check_page_metadata

Check page metadata

Return the title, meta description, canonical URL, headings, hreflang entries, and JSON-LD types found on a page.

Parameterstargetrequired

test_robots_txt

Test robots.txt rules

Fetch the robots.txt for a site and test whether a user agent may fetch a given path.

ParameterspathtargetrequireduserAgent

validate_sitemap

Validate a sitemap

Fetch the sitemap for a site and report its structure, URL count, and fetch errors.

Parameterstargetrequired

check_spf

Check an SPF record

Read the SPF record for a domain and count the DNS lookup terms in the full include chain against the limit of 10.

Parametersdomainrequired

check_dmarc

Check a DMARC record

Read the DMARC record published at _dmarc for a domain.

Parametersdomainrequired

check_dkim

Check a DKIM record

Read the DKIM public key record for a domain and selector.

Parametersdomainrequiredselectorrequired

check_mx_records

Check MX records

List the MX records for a domain with the A and AAAA addresses of each mail server.

Parametersdomainrequired

check_smtp_starttls

Check SMTP STARTTLS

Connect to the mail servers for a domain on port 25 and report the banner, EHLO response, and STARTTLS support. No mail is sent and no recipient is tested.

Parametersdomainrequired

check_mta_sts

Check MTA-STS

Read the MTA-STS DNS record and the published policy file for a domain.

Parametersdomainrequired

check_tls_rpt

Check TLS-RPT

Read the TLS-RPT record published at _smtp._tls for a domain.

Parametersdomainrequired

check_bimi

Check a BIMI record

Read the BIMI record for a domain and selector. The selector defaults to default.

Parametersdomainrequiredselector

check_ip_blacklists

Check IP blacklists

Check an IP address, or the public addresses a hostname resolves to, against the reviewed DNS blacklist providers.

Parameterstargetrequired

looking_glass_ping

Looking Glass ping

Send four ICMP echo probes from the DotMoose network in Canada to a public host or IP address.

Parametersfamilytargetrequired

looking_glass_traceroute

Looking Glass traceroute

Trace the route from the DotMoose network in Canada to a public host or IP address, up to 20 hops with one probe per hop.

Parametersfamilytargetrequired

looking_glass_path

Looking Glass path sample

Sample the route from the DotMoose network in Canada to a public host or IP address, up to 20 hops with three probes per hop.

Parametersfamilytargetrequired

calculate_subnet

Subnet calculator

Compute the network address, broadcast or last address, and address counts for an IPv4 or IPv6 CIDR block.

Parameterscidrrequired

ip_range_to_cidr

IP range to CIDR

Convert an IPv4 or IPv6 address range into the smallest set of CIDR blocks that covers it exactly.

Parametersendrequiredstartrequired

calculate_bandwidth

Bandwidth calculator

Convert a link speed into maximum daily and monthly transfer, convert monthly transfer into an average rate, and estimate how long a file transfer takes at a given rate.

ParameterslinkMbpsfileSizeGbmonthlyTransferGb

estimate_storage_growth

Storage growth estimator

Project storage size over up to 120 months at a constant monthly growth rate.

ParametersmonthsrequiredcurrentGbrequiredmonthlyGrowthPercentrequired

estimate_backup_retention

Backup retention estimator

Estimate backup storage for a grandfather-father-son retention plan where weekly and monthly copies are full backups and daily copies are increments.

ParametersdailyCopiesrequiredfullBackupGbrequiredweeklyCopiesrequiredmonthlyCopiesrequireddailyIncrementGbrequired

build_spf_record

SPF record builder

Assemble an SPF record from IP ranges, includes, and the a and mx mechanisms, and count its DNS lookup terms against the limit of 10.

Parametersipv4ipv6useAuseMxincludesallQualifierredirectDomain

build_dmarc_record

DMARC record builder

Assemble a DMARC record from a policy, optional subdomain policy, report addresses, and enforcement percentage.

ParametersruarufpolicyrequiredpercentsubdomainPolicyfailureReporting

Version history

1
  1. v1.0.0LatestOct 24, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts