MCP tool
check_dnskey_strength
Audit the cryptographic strength of DNSKEY signing algorithms used for DNSSEC.
The check_dnskey_strength tool is provided by BlackVeil DNS & Email Security Scanner. Install that server in your AI client and the assistant can call it directly.
Servers exposing check_dnskey_strength
From the publisher:Audit the cryptographic strength of DNSKEY signing algorithms used for DNSSEC. Reports which algorithm is used for DNSSEC signing keys (RSA/SHA-1, RSA/SHA-256, ECDSA P-256, Ed25519, etc.), flags deprecated algorithms (RSA/SHA-1, DSA), independent of whether the DNSSEC chain validates. Use when asked what algorithm is used for DNSSEC signing keys, or if deprecated DNSKEY algorithms are in use. Part
Install BlackVeil DNS & Email Security Scanner →Parameter Type Description domain*string Domain to check (e.g., example.com) force_refreshboolean Bypass cache and run a fresh check. Useful after DNS changes. formatstring Output verbosity. Auto-detected if omitted.
Tool lists are read from the live servers (or, for packaged servers, from their documentation) each morning, so this reflects what they exposed at the last refresh. Search all tools.