dnsbin.ca MCP server

dnsbin exposes a streamable HTTP Model Context Protocol endpoint for agents at /mcp. It uses the same DNS and snapshot cores as the REST API, so tool results match the browser and JSON endpoints.

Endpoint

https://dnsbin.ca/mcp

Auth

OAuth or Bearer API keys from https://pastebin.ca

Scopes

dns:read dns:create dns:delete

Discovery

GET https://dnsbin.ca/.well-known/agent.json
GET https://dnsbin.ca/.well-known/oauth-protected-resource/mcp
GET https://dnsbin.ca/llms.txt
GET https://dnsbin.ca/api/v1/openapi.json

Tools

Tool	Scope	Purpose
`whoami`	none	Echo account id, scopes, audience, and token kind.
`dns_lookup`	`dns:read`	Resolve DNS records through a selected DoH resolver.
`dns_propagation`	`dns:read`	Compare answers across public resolvers.
`dnssec_check`	`dns:read`	Summarize DNSSEC AD/DS/RRSIG status.
`reverse_dns`	`dns:read`	Resolve PTR records for an IP address.
`rdap_lookup`	`dns:read`	Fetch RDAP data for a domain or IP.
`mail_health`	`dns:read`	Inspect MX, SPF, DMARC, and DKIM records.
`discover_subdomains`	`dns:read`	Probe common subdomains for DNS records.
`save_snapshot`	`dns:create`	Persist a shareable read-only DNS result snapshot.

Example

curl -i https://dnsbin.ca/mcp \
  -H 'Authorization: Bearer pbca_live_…' \
  -H 'Content-Type: application/json' \
  --data '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

MCP access tokens are audience-bound to https://dnsbin.ca/mcp. REST API keys are audience-bound to https://dnsbin.ca.