Atlas entry
tamingdns.
20 capabilities over MCP. The inventory is incomplete. First atlas observation.
20 capabilities, 19 of them tools. 13 only read. 6 have no reading.◇
AI reading, beta. side-effects v1 on claude-haiku-5.5, calibrated on MCP (golden-3). Only readings above a measured precision count. Counts are tools, not calls: no tool was called.
AI readings summary · beta
The service lists 19 tools, and 13 have AI readings.
13 tools are read as read-only, including check_dane, check_txt and check_dkim.
check_website: Checks a public website's TLS, HTTPS redirects, security headers and cookies, returning an ok, warn or fail verdict.
check_txt: Checks a domain's DNS TXT records, labels each by vendor or purpose, and flags misplaced, duplicate or conflicting entries.
Written by code from the AI readings on this page: it groups them and says nothing they do not.
What an agent can do here
AI readings, beta · Readings on 13 of 19 MCP tools.
Moves money
0
No tool read this way.
Deletes or cancels records
0
No tool read this way.
Sends messages to people
0
No tool read this way.
Changes permissions
0
No tool read this way.
Runs code
0
No tool read this way.
Should ask a person first
0
No tool read this way.
No counted reading 6 tools No reading was counted, so any effect above is possible for them: analyze_dmarc_report, analyze_email_headers, check_dnssec, check_mta_sts, check_website, decode_bounce.
What changed
First atlas observation. Atlas history
Look first
AI reading, beta: AI adds items here; it never removes one.
No tool is read as one of the six effects. A zero is a count, not a clearance.
Surfaces
5 protocols checked
| ARD | Not found | No document retrieved |
|---|---|---|
| A2A | Not found | 0 skills |
| MCP | Valid | 2025-11-25 · 19 tools · 1 resource · 0 prompts retained · listing incomplete |
| OpenAPI | Not detected | 0 operations |
| WebMCP | Not detected | 0 declarative form tools · experimental |
Exact states and meaning
- ARDabsent
Exact state: not found · No document retrieved
The supported discovery location returned no matching document.
Not found does not prove the service exposes no such interface elsewhere.
Not observed / not fetched
- A2Aabsent
Exact state: not found · 0 skills
The supported discovery location returned no matching document.
Not found does not prove the service exposes no such interface elsewhere.
Not observed / not fetched
- MCPobserved
Exact state: valid · Revision 2025-11-25 · 19 tools · 1 resource · 0 prompts retained · listing incomplete
A usable protocol document was retrieved and validated.
Directly observed
- OpenAPIabsent
Exact state: not detected · 0 operations
No endpoint was established from the evidence and scope that InterfaceDelta inspected.
Not detected does not prove that no endpoint exists.
Not observed / not fetched
- WebMCPabsent
Exact state: not detected · 0 declarative form tools · experimental
No named declarative WebMCP form tools were observed in the origin root HTML.
Script-registered tools and other pages are not observed, so this does not mean the site has no WebMCP tools.
Not observed / not fetched
Capabilities
Showing 20 of 20.
| Tool and inputs | ◇ AI reading, beta · confidence | ||||||
|---|---|---|---|---|---|---|---|
| Read as none of the six 13 Not a clearance. | |||||||
| Checks a domain's BIMI setup, including its logo, VMC certificate and DMARC prerequisites, and returns a graded report.domain* | Reads only0.84 | ||||||
| |||||||
| domain* | Reads only0.83 | ||||||
| |||||||
| Checks a domain's DKIM signing key for a given selector, reporting its strength, revocation, test mode and hash algorithms.domain*, selector* | Reads only0.82 | ||||||
| |||||||
| No purpose line: the tool declares too little to read.domain* | Reads only0.85 | ||||||
| |||||||
| Checks whether public DNS resolvers worldwide agree on a record's answer after a change, reporting per-resolver values and TTLs.domain*, type | Reads only0.82 | ||||||
| |||||||
| Checks a domain's DNS for Google Workspace setup, covering mail routing, SPF, DKIM, DMARC and related policies.domain* | Reads only0.80 | ||||||
| |||||||
| domain* | Reads only0.88 | ||||||
| |||||||
| Checks a domain's MCP Registry DNS verification keys and reports whether each published key is usable.domain* | Reads only0.80 | ||||||
| |||||||
| Checks a domain's mail (MX) DNS setup, grading it A-F and listing misconfigurations and per-host details without changing anything.domain* | Reads only0.82 | ||||||
| |||||||
| Verifies a domain's SPF email record and reports its grade, lookup count and findings, without making changes.domain* | Reads only0.85 | ||||||
| |||||||
| domain* | Reads only0.85 | ||||||
| |||||||
| Checks a domain's DNS TXT records, labels each by vendor or purpose, and flags misplaced, duplicate or conflicting entries.domain* | Reads only0.88 | ||||||
| |||||||
| Checks a domain's DKIM keys against hundreds of known selectors and returns a graded A-F verdict on their strength.domain* | Reads only0.84 | ||||||
| |||||||
| No counted reading 6 No reading was counted, so any effect is possible. | |||||||
| Summarizes a pasted DMARC aggregate report XML, flagging unauthenticated mail, policy gaps and per-sender results.report* | unknown | unknown | unknown | unknown | unknown | unknown | No reading |
| |||||||
| headers* | unknown | unknown | unknown | unknown | unknown | unknown | No reading |
| |||||||
| Checks whether a domain's DNSSEC signing is valid, from root down to the domain, returning a grade, verdict and findings.domain* | unknown | unknown | unknown | unknown | unknown | unknown | No reading |
| |||||||
| domain* | unknown | unknown | unknown | unknown | unknown | unknown | No reading |
| |||||||
| Checks a public website's TLS, HTTPS redirects, security headers and cookies, returning an ok, warn or fail verdict.domain* | unknown | unknown | unknown | unknown | unknown | unknown | No reading |
| |||||||
| Reports the SMTP and enhanced status codes from a pasted email bounce, with its provider, meaning and suggested fixes.bounce* | unknown | unknown | unknown | unknown | unknown | unknown | No reading |
| |||||||
| MCP resources 1 Not read by AI. | |||||||
| no inputs | Not read | ||||||
| |||||||
Read as this effect No reading: unknown Not read as this effect◇ AI readings, beta. A zero is a count, not a clearance.
MCP prompts 0+ observed
Inventory incomplete. The displayed count is a lower bound; missing items do not prove removal.
None recorded in this Passport.
Not observed in this Passport: A2A skills, OpenAPI operations.
The atlas shows each capability by its plain identifier, inputs and declared sign-in. Publisher descriptions, paths, links and source evidence are not published here.
The comparison with the previous observation is shown only to the account that recorded it.
Atlas history
1 observation
- 20 capabilities · MCP 2025-11-25 · MCP endpoint truncated · 1 incomplete inventory groupFirst observation
Fingerprint and versions
- Fingerprint
39dd8d489bf6fc13b13b76f4013b0ca4988891ddc1059f36ca88cba08250616b(incomplete)- Passport schema
- 0.5.0, passport-semantic-v4
- Consistency
- MCP_PROMPTS_ADVERTISEMENT_LIST: indeterminate · MCP_RESOURCES_ADVERTISEMENT_LIST: match · MCP_TOOLS_ADVERTISEMENT_LIST: match · OPENAPI_MCP_EXPLICIT_MAPPING: not applicable
Each class compares an observation with the previous atlas observation. Runs of unchanged observations are grouped. Struck values are what the previous observation recorded; inserted values are what this one recorded.
Declared and observed
19 tools declare hints; the AI readings agree with all 13 that have a reading.
A disagreement is not a finding about the service: either side can be wrong. How we compare declarations and readings.
About this entry
com.tamingdns/mcpListedOfficial MCP Registry · first listed 12 Nov 2026 · last listed 12 Nov 2026
Passive observations of a public interface listed in the Official MCP Registry. An observation does not verify security, ownership or compliance, and InterfaceDelta assigns no scores or rankings. Methodology · Report an inaccuracy · Ask for removal
Identity and snapshot
- Target key
sha256:7737e4266f92a260cabd1f22fb46b1dcda1ca0985203b434ed36bb2bd3e6c1cc- Locator SHA-256
9e23284eb6ac90eefea4faae0f74afdfb5685931b6dee83060aeb87e2870fc12- Snapshot generated
- 13 Nov 2026, 00:06 UTC
The entry is one exact observed target, not a real-world service identity, and implies no ownership. Endpoint paths are not published; the locator hash lets an operator confirm their own URL.