MCP tool
check_dnssec_chain
Walk the full DNSSEC chain of trust from the DNS root down to the target domain, tracing DS/DNSKEY records and algorithm usage at each zone level.
The check_dnssec_chain tool is provided by BlackVeil DNS & Email Security Scanner. Install that server in your AI client and the assistant can call it directly.
Servers exposing check_dnssec_chain
From the publisher:Walk the full DNSSEC chain of trust from the DNS root down to the target domain, tracing DS/DNSKEY records and algorithm usage at each zone level. Use when asked to trace the chain of trust from the DNS root, or to see the full DNSSEC delegation path step by step.
Install BlackVeil DNS & Email Security Scanner →Parameter Type Description domain*string Domain to check (e.g., example.com) force_refreshboolean Bypass cache and run a fresh check. Useful after DNS changes. formatstring Output verbosity. Auto-detected if omitted.
Related tools
The same action under a namespaced name on other servers.
Tool lists are read from the live servers (or, for packaged servers, from their documentation) each morning, so this reflects what they exposed at the last refresh. Search all tools.