MCP tool
check_dane_https
Verify DANE certificate pinning for HTTPS connections.
The check_dane_https tool is provided by BlackVeil DNS & Email Security Scanner. Install that server in your AI client and the assistant can call it directly.
Servers exposing check_dane_https
From the publisher:Verify DANE certificate pinning for HTTPS connections. Looks up TLSA records at _443._tcp.{domain} (port 443) and validates their syntax, usage/selector/matching-type fields and DNSSEC backing. The record is reported as present but UNVERIFIED in every deployment: comparison against the certificate the host actually serves is currently withdrawn because the operator probe vantage cannot observe the
Install BlackVeil DNS & Email Security Scanner →Parameter Type Description domain*string Domain to check (e.g., example.com) force_refreshboolean Bypass cache and run a fresh check. Useful after DNS changes. formatstring Output verbosity. Auto-detected if omitted.
Related tools
The same action under a namespaced name on other servers.
Tool lists are read from the live servers (or, for packaged servers, from their documentation) each morning, so this reflects what they exposed at the last refresh. Search all tools.