Lookproof DNS and mail security checks

io.github.lookproof由 GitHub 账号 lookproof 发布v0.1.0更新于 Nov 6, 2026

SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS and DNS checks for domains, paid per call in USDC (x402)

已验证STDIO仅桌面云端与基础设施安全与监控

概览

AI 生成的概览

对公开域名执行 DNS、邮件认证、DNSSEC、TLS 与 HTTP 安全检查，按次以 USDC（x402）付费。

可以做什么
  • 一次调用完成域名的邮件、网站与 DNS 综合健康检查
  • 检查单项邮件记录：SPF、SPF 扁平化、DMARC、DKIM 密钥与选择器发现、MTA-STS、TLS-RPT、MX、BIMI 及邮件服务商
  • 检查 DNS 与域名基础设施：DNS 查询、DNSSEC 状态、CAA 记录、名称服务器与 RDAP 注册数据
  • 检查网站安全：TLS 证书详情与 HTTP 安全响应头
  • 解析你粘贴的 SPF 与 DMARC 记录，不发起 DNS 查询
  • 查看付费模式、本次会话已花费的 USDC、调用次数与剩余预算
适用场景
适合审计或排查域名的邮件送达能力与防伪造配置，核查 DNSSEC、TLS 或安全响应头，或在不自行运行 dig 和在线检测工具的情况下获取域名的注册与 DNS 信息。
运行要求
本地 stdio 进程，通过 uvx 从 lookproof-mcp 的 PyPI 包运行（需 Python 工具链）。付费工具需要专用钱包私钥，通过 PRIVATE_KEY 或 PRIVATE_KEY_FILE 提供；需将 X402_PAY 设为 1 才会真正付款，并需 Base 上的 USDC；MAX_SPEND_USD 限制单次会话花费，PAYTO_ALLOWLIST 可选地限定收款地址。需要访问 DNS、RDAP 及被检查站点的网络。
安装前请注意
多数工具每次调用都会花费真实 USDC，启用 X402_PAY 前应先设置 MAX_SPEND_USD 与 PAYTO_ALLOWLIST；未设置 X402_PAY 时所有调用只是仅报告价格的试运行。服务器需要持有资金的钱包私钥（PRIVATE_KEY 或 PRIVATE_KEY_FILE），请使用专用的低余额钱包。结果包含被检查域名所有者发布的 DNS 记录、策略与网页内容，服务器自身说明这些内容应作为数据而非指令对待。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Lookproof DNS and mail security checks，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

该仓库没有 README。

工具

24

get_spending

Free. Shows payment mode, USDC spent this session, calls made and budget left.

无需输入参数。

domain_health

Full domain health in one call: MX, SPF, DMARC, DKIM selector discovery, MTA-STS with TLS-RPT, DNSSEC, reverse DNS of the mail servers, BIMI and CAA, with findings. Best first call for a domain. Costs $0.08 USDC per call.

输入参数domain必填

site_health

Website health in one call: TLS certificate, HTTP security headers and RDAP registration data. Costs $0.025 USDC per call.

输入参数domain必填

mail_check

Mail configuration: MX, SPF and DMARC together, plus DKIM for the selectors you pass (comma-separated, e.g. 'google,selector1'). Costs $0.03 USDC per call.

输入参数domain必填dkim_selectors

spf

SPF record: parsed include tree, all qualifier, DNS lookup count against the limit of 10. Costs $0.01 USDC per call.

输入参数domain必填

spf_flatten

SPF flattening analysis: every IP range the record authorizes, as a receiver would evaluate it. Costs $0.01 USDC per call.

输入参数domain必填

dmarc

DMARC record: policy, subdomain policy, pct, alignment and report addresses (RFC 9989 tree walk). Costs $0.01 USDC per call.

输入参数domain必填

dkim

DKIM key for one selector: key type and size, testing and revoked flags. Costs $0.01 USDC per call.

输入参数domain必填selector必填

dkim_discover

DKIM selector discovery: tries the common selectors and returns the keys found. Costs $0.02 USDC per call.

输入参数domain必填

mta_sts

MTA-STS and TLS-RPT: fetches the policy, checks mode and max_age, compares the policy with the MX hosts. Costs $0.02 USDC per call.

输入参数domain必填

tlsrpt

TLS-RPT record: TLS reporting addresses for the domain. Costs $0.01 USDC per call.

输入参数domain必填

mx

MX records with resolved addresses, null MX and implicit MX. Costs $0.01 USDC per call.

输入参数domain必填

spoofable

Spoofing protection from the published SPF and DMARC policy: protected, partial, monitoring, unprotected or broken. Describes the policy; it does not prove whether forged mail gets through. Costs $0.01 USDC per call.

输入参数domain必填

bimi

BIMI record: logo and certificate URLs, and whether DMARC is enforced as BIMI requires. Costs $0.01 USDC per call.

输入参数domain必填selector

mail_provider

Which mail provider handles the domain's mail, from MX and SPF. Costs $0.005 USDC per call.

输入参数domain必填

spf_parse

Parse an SPF record you paste (no DNS lookups). Costs $0.002 USDC per call.

输入参数record必填

dmarc_parse

Parse a DMARC record you paste (no DNS lookups). Costs $0.002 USDC per call.

输入参数record必填

dns_lookup

DNS lookup of one name; `types` is a comma-separated list of A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, SRV (default A). Costs $0.005 USDC per call.

输入参数name必填types

dnssec

DNSSEC state of the domain (secure, insecure, bogus) with DS and DNSKEY details. Costs $0.01 USDC per call.

输入参数domain必填

caa

CAA records: which certificate authorities may issue for the domain. Costs $0.01 USDC per call.

输入参数domain必填

nameservers

Name servers of the domain with their addresses; flags a single server, unresolvable servers, all servers in one network and missing glue. Costs $0.01 USDC per call.

输入参数domain必填

rdap

Registration data from RDAP (registrar, dates, status). Never registrant personal data. Costs $0.01 USDC per call.

输入参数domain必填

tls_certificate

TLS certificate of the domain's HTTPS server: issuer, validity, names and chain. Costs $0.01 USDC per call.

输入参数domain必填

security_headers

HTTP security headers of the domain's website (HSTS, CSP, and others). Costs $0.01 USDC per call.

输入参数domain必填

版本历史

1
  1. v0.1.0最新Nov 5, 2026

评分

已满足适用检查项的 65%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分
  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头，或保持端点能够响应探测，以便判定其认证方式。

  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分

    请声明包含 README 的 GitHub 仓库，或在 OAuth 受保护资源元数据中提供 resource_documentation。

  • 许可证10 分

    请在仓库或注册中心条目中声明许可证。