Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "httpfy": {
      "type": "http",
      "url": "https://httpfy.io/mcp"
    }
  }
}

claude mcp add --transport http httpfy https://httpfy.io/mcp

[mcp_servers.httpfy]
url = "https://httpfy.io/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "httpfy": {
      "type": "remote",
      "url": "https://httpfy.io/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "httpfy": {
      "type": "http",
      "url": "https://httpfy.io/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=httpfy&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vaHR0cGZ5LmlvL21jcCJ9"
}

{
  "servers": {
    "httpfy": {
      "type": "http",
      "url": "https://httpfy.io/mcp"
    }
  }
}

{
  "mcpServers": {
    "httpfy": {
      "httpUrl": "https://httpfy.io/mcp"
    }
  }
}

extensions:
  "httpfy":
    enabled: true
    name: "httpfy"
    type: streamable_http
    uri: "https://httpfy.io/mcp"
    timeout: 300

Quality 100 / 100new

protocol100 · weight 25

pass
protocol.modernsupports 2026-07-28 (server/discover)
pass
protocol.statelessanswers without a session
pass
protocol.transportstreamable HTTP
pass
protocol.list_ttltool list is cacheable (ttlMs 3600000)

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene100 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations24 of 24 tools declare readOnlyHint or destructiveHint
pass
tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
pass
tools.token_costabout 2,923 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump
pass
tools.hidden_textno hidden text in tool names, descriptions, schemas or annotations

stabilityn/a · weight 15

n/a
stability.changes, stability.rug_pull, stability.new_linkstool history recorded for 2 of the 7 days needed

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

24 tools, about 2,923 tokens to load them all · tool set acbce66d88bf · tools last changed 2026-11-13 · checked 2026-11-14 07:03 UTC

Tool changes

2026-11-13dkim_checkchangedinput schema
2026-11-13certificate_transparency_searchchangeddescription
before
List certificates logged in Certificate Transparency for a domain (via crt.sh): issuer, validity window and names, with a summary by issuer.
after · 63% of words in common
List certificates logged in Certificate Transparency for a domain (via crt.sh): issuer, validity window and names, with a summary by issuer. Source: crt.sh, with SSLMate Cert Spotter as a fallback when crt.sh is slow (Cert Spotter covers unexpired certificates only).
2026-11-13bimi_checkchangeddescriptionmeaning changed
before
Check the BIMI record of a domain, whether DMARC meets BIMI requirements, and whether the SVG logo and certificate URLs are reachable and well formed.
after · 46% of words in common
Check the BIMI record of a domain, whether DMARC meets BIMI requirements, the SVG logo (SVG Tiny PS checks) and the VMC/CMC certificate (validity dates, domain coverage, BIMI usage); the certificate chain is not verified.
2026-11-13mac_vendor_lookupchangedinput schema
2026-11-13ip_blacklist_checkchangeddescription, input schema
before
Check whether a public IPv4 address is listed on common DNS-based blocklists such as Spamhaus, Barracuda and SpamCop.
after · 57% of words in common
Check whether a public IPv4 address is listed on about 20 DNS-based blocklists such as Barracuda and SpamCop, showing listed, not listed or not checked (with the reason) per list.
2026-11-13ip_whoischangeddescription, input schema
before
WHOIS / registry data for a public IPv4 address: ASN, network range, owner organisation and registry.
after · 55% of words in common
Registry data (RDAP) for a public IPv4 or IPv6 address: network range, holder organisation, abuse contact, registry and the announcing ASN.
2026-11-13traceroutechangeddescription, input schema
before
Traceroute to a public host from httpfy servers (up to 10 hops). Internal hops of httpfy's own network are masked.
after · 53% of words in common
Traceroute to a public host from httpfy servers (up to 15 hops, one probe per hop; partial results are returned if the time limit is reached). Internal hops of httpfy's own network are masked.
2026-11-13pingchangedinput schema
2026-11-13ssl_certificate_checkchangeddescription
before
Connect to a domain on port 443 and report the certificate chain: subject, issuer, validity dates, days remaining, SANs and chain details.
after · 50% of words in common
Connect to a domain on port 443 and report a validity verdict (valid, expired, hostname mismatch, self-signed, untrusted, with the reason) plus the certificate chain: subject, SANs, issuer, validity dates, days remaining, TLS version and cipher. Revocation is not checked.
2026-11-13domain_expirychangeddescription
before
Registration and expiry dates of a domain, with the time remaining before it expires.
after · 64% of words in common
Registration and expiry dates of a domain (RDAP, WHOIS fallback), with the time remaining before it expires or how long ago it expired.

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 96 / 100

provenance85

liveness100

freshness100

hygiene100

+repository +dns-namespace +website +reachable +uptime-100% +updated-3d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://httpfy.io/mcp` streamable-http	none	yes	100%	554 ms	2026-07-28, 2025-11-25, 2025-06-18, 2025-03-26	2026-11-14

Tools (24)

`asn_lookup`read-only	Look up the autonomous system (ASN) for a public IP address, or details for an ASN such as AS15169: name, country, announced prefixes and address counts.
`bimi_check`read-only	Check the BIMI record of a domain, whether DMARC meets BIMI requirements, the SVG logo (SVG Tiny PS checks) and the VMC/CMC certificate (validity dates, domain coverage, BIMI usage); the certificate chain is not verified.
`caa_check`read-only	Find the CAA records that apply to a domain (climbing to parent domains per RFC 8659) and list which certificate authorities may issue certificates.
`certificate_transparency_search`read-only	List certificates logged in Certificate Transparency for a domain (via crt.sh): issuer, validity window and names, with a summary by issuer. Source: crt.sh, with SSLMate Cert Spotter as a fallback when crt.sh is slow (Cert Spotter covers unexpired certificates only).
`dkim_check`read-only	Check DKIM public keys for a domain. With a selector it checks that selector; without one it probes common selectors. Reports key type and RSA key length and flags weak or revoked keys.
`dmarc_check`read-only	Find and explain the DMARC record of a domain (policy, pct, rua/ruf, alignment) and flag weaknesses such as p=none or missing external report authorization.
`dns_lookup`read-only	Look up DNS records of one type (A, AAAA, CNAME, MX, NS, SOA, TXT, SRV) for a domain using public resolvers.
`dns_propagation_check`read-only	Query a domain's A or NS records on about 30 well-known public resolvers (all queried from httpfy.io's server; anycast resolvers answer from their nearest site) and report each resolver's answer, NXDOMAIN, NODATA or failure, to see whether a DNS change has propagated. CDN and GeoDNS names can legitimately differ between resolvers.
`dns_report`read-only	Full DNS report for a domain: delegation from the root, every authoritative name server checked individually (reachability, recursion, TCP, consistency), SOA values, MX records and their reverse DNS, SPF, DMARC, DKIM and DNSSEC.
`dnssec_check`read-only	Inspect a domain's DNSSEC chain from the root down: DS and DNSKEY records per zone, whether each DS matches a published key, signature expiry, and whether validating resolvers (Cloudflare, Google) treat the domain as secure, insecure or bogus. Signatures are judged by those resolvers, not recomputed.
`domain_expiry`read-only	Registration and expiry dates of a domain (RDAP, WHOIS fallback), with the time remaining before it expires or how long ago it expired.
`domain_health_report`read-only	Grade a domain A to F across 11 checks (name servers, SOA, DNSSEC, MX, SPF, DMARC, CAA, HTTPS certificate, HTTP to HTTPS redirect, HSTS, IPv6), with a reason and fix for each failed check.
`domain_whois`read-only	Registration data for a domain via RDAP (port-43 WHOIS as fallback): registrar, dates, status and name servers (personal contact data is redacted by registries).
`ip_blacklist_check`read-only	Check whether a public IPv4 address is listed on about 20 DNS-based blocklists such as Barracuda and SpamCop, showing listed, not listed or not checked (with the reason) per list.
`ip_whois`read-only	Registry data (RDAP) for a public IPv4 or IPv6 address: network range, holder organisation, abuse contact, registry and the announcing ASN.
`mac_vendor_lookup`read-only	Identify the manufacturer registered for a MAC address prefix (OUI) using the IEEE registry.
`mta_sts_check`read-only	Check MTA-STS (TXT record and the HTTPS policy file, mode and MX patterns) and the TLS-RPT reporting record for a domain.
`mx_lookup`read-only	List the mail exchanger (MX) records of a domain with their preferences, detect null MX (RFC 7505) and implicit MX, and flag MX targets that are CNAMEs, IP literals or do not resolve.
`ping`read-only	Ping a public host from httpfy servers (4 ICMP echo requests) and report packet loss and round-trip times. Useful to test reachability from outside your own network.
`port_check`read-only	Check whether one TCP port on a public host is open, closed or filtered when tested from httpfy servers on the internet.
`spf_lookup`read-only	Fetch the SPF record of a domain from its authoritative name server and list its mechanisms (ip4, ip6, include, redirect, all).
`spf_validate`read-only	Validate the SPF record of a domain: RFC 7208 syntax, single-record rule, DNS lookup count across includes and redirect (limit 10, a static estimate), void lookups, include loops and the all mechanism.
`ssl_certificate_check`read-only	Connect to a domain on port 443 and report a validity verdict (valid, expired, hostname mismatch, self-signed, untrusted, with the reason) plus the certificate chain: subject, SANs, issuer, validity dates, days remaining, TLS version and cipher. Revocation is not checked.
`traceroute`read-only	Traceroute to a public host from httpfy servers (up to 15 hops, one probe per hop; partial results are returned if the time limit is reached). Internal hops of httpfy's own network are masked.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "io.httpfy/httpfy",
  "title": "HTTPfy network & DNS tools",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://httpfy.io/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.0",
  "repository": {
    "url": "https://github.com/cloudaidnet/httpfy.io",
    "source": "github"
  },
  "websiteUrl": "https://httpfy.io/agents",
  "description": "Free DNS, SPF/DKIM/DMARC, TLS, WHOIS, IP/ASN, blocklist, ping, traceroute and port checks. No key."
}