domain-health
by Hasan UzunUpdated Oct 17, 2026
Domain and website health for AI agents: RDAP/WHOIS registration, DNS records, e-mail security (SPF, DKIM, DMARC, MX, MTA-STS), TLS certificate expiry, HTTP security headers grade, redirect chain trace, bulk HTTP status check, robots.txt and sitemap summary. Read-only, no API keys, SSRF-guarded.
dns
whois
ssl
+3
|Domain and website health for AI agents
Ask your agent who owns a domain, when its certificate expires, or why its email lands in spam, and get a structured answer in one call. Eight read-only tools, no API keys, no paid upstream services.
Tools
- domain_whois_rdap: registrar, creation and expiry dates, days until expiry, status, nameservers, DNSSEC (RDAP, the modern WHOIS)
- dns_records: A, AAAA, MX, NS, TXT, CAA, SOA, CNAME
- email_security_check: SPF, DMARC, DKIM (16 common selectors), MTA-STS, BIMI, MX; 0-100 score with plain-English issues
- tls_certificate: issuer, validity, days until expiry, SAN names, chain trust, TLS version
- http_security_headers: HSTS, CSP, clickjacking, referrer and permissions policy, cookie flags; graded 0-100
- redirect_trace: every hop with status code, loop and HTTPS-downgrade detection
- http_status_bulk: up to 25 URLs per call for broken-link checks
- robots_sitemap_summary: robots.txt rules, AI crawler blocks (GPTBot, ClaudeBot, CCBot...), sitemap counts, llms.txt
Use cases
- Agency audits: check a client portfolio for expiring domains and certificates
- Email deliverability triage before a cold campaign
- SEO and AI-crawler readiness checks
- Incident response: where does this link really go?
Safety
Read-only. Requests to private, loopback and link-local addresses are blocked (SSRF guard), and every redirect hop is re-checked.