Lookproof DNS and mail security checks

io.github.lookproof由 GitHub 帳號 lookproof 發布v0.1.0更新於 Nov 6, 2026

SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS and DNS checks for domains, paid per call in USDC (x402)

已驗證STDIO僅桌面雲端與基礎設施安全與監控

概覽

AI 產生的概覽

對公開網域執行 DNS、郵件認證、DNSSEC、TLS 與 HTTP 安全檢查，依次以 USDC（x402）付費。

可以做什麼
  • 一次呼叫完成網域的郵件、網站與 DNS 綜合健康檢查
  • 檢查單項郵件記錄：SPF、SPF 扁平化、DMARC、DKIM 金鑰與選擇器探索、MTA-STS、TLS-RPT、MX、BIMI 及郵件服務商
  • 檢查 DNS 與網域基礎設施：DNS 查詢、DNSSEC 狀態、CAA 記錄、名稱伺服器與 RDAP 註冊資料
  • 檢查網站安全：TLS 憑證詳情與 HTTP 安全標頭
  • 解析你貼上的 SPF 與 DMARC 記錄，不進行 DNS 查詢
  • 查看付費模式、本次工作階段已花費的 USDC、呼叫次數與剩餘預算
適用情境
適合稽核或排查網域的郵件送達能力與防偽造設定、查核 DNSSEC、TLS 或安全標頭，或在不自行執行 dig 與線上檢測工具的情況下取得網域的註冊與 DNS 資訊。
執行需求
本機 stdio 程序，透過 uvx 從 lookproof-mcp 的 PyPI 套件執行（需 Python 工具鏈）。付費工具需要專用錢包私鑰，透過 PRIVATE_KEY 或 PRIVATE_KEY_FILE 提供；需將 X402_PAY 設為 1 才會實際付款，並需 Base 上的 USDC；MAX_SPEND_USD 限制單一工作階段的花費，PAYTO_ALLOWLIST 可選擇性限定收款地址。需要連線至 DNS、RDAP 及被檢查的網站。
安裝前請注意
多數工具每次呼叫都會花費真實 USDC，啟用 X402_PAY 前應先設定 MAX_SPEND_USD 與 PAYTO_ALLOWLIST；未設定 X402_PAY 時所有呼叫僅為只回報價格的試跑。伺服器需要持有資金的錢包私鑰（PRIVATE_KEY 或 PRIVATE_KEY_FILE），請使用專用的低餘額錢包。結果包含被檢查網域擁有者發布的 DNS 記錄、政策與網頁內容，伺服器本身說明這些內容應視為資料而非指令。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Lookproof DNS and mail security checks，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

該儲存庫沒有 README。

工具

24

get_spending

Free. Shows payment mode, USDC spent this session, calls made and budget left.

無需輸入參數。

domain_health

Full domain health in one call: MX, SPF, DMARC, DKIM selector discovery, MTA-STS with TLS-RPT, DNSSEC, reverse DNS of the mail servers, BIMI and CAA, with findings. Best first call for a domain. Costs $0.08 USDC per call.

輸入參數domain必填

site_health

Website health in one call: TLS certificate, HTTP security headers and RDAP registration data. Costs $0.025 USDC per call.

輸入參數domain必填

mail_check

Mail configuration: MX, SPF and DMARC together, plus DKIM for the selectors you pass (comma-separated, e.g. 'google,selector1'). Costs $0.03 USDC per call.

輸入參數domain必填dkim_selectors

spf

SPF record: parsed include tree, all qualifier, DNS lookup count against the limit of 10. Costs $0.01 USDC per call.

輸入參數domain必填

spf_flatten

SPF flattening analysis: every IP range the record authorizes, as a receiver would evaluate it. Costs $0.01 USDC per call.

輸入參數domain必填

dmarc

DMARC record: policy, subdomain policy, pct, alignment and report addresses (RFC 9989 tree walk). Costs $0.01 USDC per call.

輸入參數domain必填

dkim

DKIM key for one selector: key type and size, testing and revoked flags. Costs $0.01 USDC per call.

輸入參數domain必填selector必填

dkim_discover

DKIM selector discovery: tries the common selectors and returns the keys found. Costs $0.02 USDC per call.

輸入參數domain必填

mta_sts

MTA-STS and TLS-RPT: fetches the policy, checks mode and max_age, compares the policy with the MX hosts. Costs $0.02 USDC per call.

輸入參數domain必填

tlsrpt

TLS-RPT record: TLS reporting addresses for the domain. Costs $0.01 USDC per call.

輸入參數domain必填

mx

MX records with resolved addresses, null MX and implicit MX. Costs $0.01 USDC per call.

輸入參數domain必填

spoofable

Spoofing protection from the published SPF and DMARC policy: protected, partial, monitoring, unprotected or broken. Describes the policy; it does not prove whether forged mail gets through. Costs $0.01 USDC per call.

輸入參數domain必填

bimi

BIMI record: logo and certificate URLs, and whether DMARC is enforced as BIMI requires. Costs $0.01 USDC per call.

輸入參數domain必填selector

mail_provider

Which mail provider handles the domain's mail, from MX and SPF. Costs $0.005 USDC per call.

輸入參數domain必填

spf_parse

Parse an SPF record you paste (no DNS lookups). Costs $0.002 USDC per call.

輸入參數record必填

dmarc_parse

Parse a DMARC record you paste (no DNS lookups). Costs $0.002 USDC per call.

輸入參數record必填

dns_lookup

DNS lookup of one name; `types` is a comma-separated list of A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, SRV (default A). Costs $0.005 USDC per call.

輸入參數name必填types

dnssec

DNSSEC state of the domain (secure, insecure, bogus) with DS and DNSKEY details. Costs $0.01 USDC per call.

輸入參數domain必填

caa

CAA records: which certificate authorities may issue for the domain. Costs $0.01 USDC per call.

輸入參數domain必填

nameservers

Name servers of the domain with their addresses; flags a single server, unresolvable servers, all servers in one network and missing glue. Costs $0.01 USDC per call.

輸入參數domain必填

rdap

Registration data from RDAP (registrar, dates, status). Never registrant personal data. Costs $0.01 USDC per call.

輸入參數domain必填

tls_certificate

TLS certificate of the domain's HTTPS server: issuer, validity, names and chain. Costs $0.01 USDC per call.

輸入參數domain必填

security_headers

HTTP security headers of the domain's website (HSTS, CSP, and others). Costs $0.01 USDC per call.

輸入參數domain必填

版本歷史

1
  1. v0.1.0最新Nov 5, 2026

評分

已滿足適用檢查項的 65%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分
  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分

    請宣告包含 README 的 GitHub 儲存庫，或在 OAuth 受保護資源後設資料中提供 resource_documentation。

  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。