check_agent_discovery

The check_agent_discovery tool is provided by BlackVeil DNS & Email Security Scanner. Install that server in your AI client and the assistant can call it directly.

Servers exposing check_agent_discovery

• BlackVeil DNS & Email Security ScannerB · 79HTTP

  From the publisher:Assess the security posture of IETF BANDAID agent-discovery records (draft-mozleywilliams-dnsop-dnsaid). Detects SVCB agent records under _agents/_index._{protocol}._agents, reports whether the discovery zone is DNSSEC-anchored (unsigned = spoofable agent endpoints), evaluates DANE/TLSA binding trust (RFC 6698 §10.1), and checks capability-document integrity (cap / cap-sha256). Read-only; uses Pri

  Parameter	Type	Description
  domain*	string	Domain to check for published agent-discovery records (e.g., example.com).
  protocol	string	Scope discovery to a single agent protocol index (_index._{protocol}._agents). Omit to sweep the zone.
  name	string	Resolve a single named agent ({name}.{domain}) instead of enumerating the zone.
  verify_cap	boolean	Fetch each declared capability document (cap=) over HTTPS via safeFetch and verify it against the cap-sha256 integrity pin. Default false (declaration/existence check only).
  force_refresh	boolean	Bypass cache and run a fresh check. Useful after DNS changes.
  format	string	Output verbosity. Auto-detected if omitted.

  Install BlackVeil DNS & Email Security Scanner →

Tool lists are read from the live servers (or, for packaged servers, from their documentation) each morning, so this reflects what they exposed at the last refresh. Search all tools.