# Dns Security Scanner — REST API endpoint `dns-security-scanner`

Return a DNS security report for a domain: SPF, DMARC, MX and CAA records with issues, a 0-100 score, a letter grade and recommendations. Records are resolved through Cloudflare DNS-over-HTTPS.

- Category: network
- MCP server: https://mcp.findutils.com/ (Streamable HTTP, no API keys, 120 req/min per IP)
- REST endpoint: POST https://api.findutils.com/api/tools/dns-security-scanner/execute (no API keys, 60 req/min per IP)
- Network tool: fetches a fixed, hard-coded public upstream (never a private host).
- Reference page: https://findutils.com/api/dns-security-scanner/
- Same tool on the other surface: https://findutils.com/mcp/dns-security-scanner/

## Call the endpoint (verified example)

```bash
curl -X POST https://api.findutils.com/api/tools/dns-security-scanner/execute \
  -H "Content-Type: application/json" \
  -d '{
    "domain": "example.com"
  }'

# Parameter schema
curl https://api.findutils.com/api/tools/dns-security-scanner
```

## Input schema

| Argument | Type | Required | Description |
|---|---|---|---|
| `domain` | string | yes | Domain to scan, e.g. "example.com". A URL is accepted; only the hostname is used. |

Example arguments (verified):

```json
{
  "domain": "example.com"
}
```

OpenAPI 3.1 spec: https://findutils.com/api/openapi.json · Interactive docs: https://findutils.com/api/docs/

## Also an MCP tool

```bash
claude mcp add findutils --transport http https://mcp.findutils.com/
```

Then ask the client to call `findutils:dns_security_scanner`. Full MCP reference: https://findutils.com/mcp/dns-security-scanner/

---
Full catalog: GET https://api.findutils.com/api/tools · https://findutils.com/api/ · https://findutils.com/llms.txt