Use DNS Doctor in Claude
Check and fix a domain's email authentication (SPF, DMARC, DKIM), propagation and DNS health from a Claude conversation. Free checks need no account.
Add the connector
- Open Customize → Connectors, choose Add, then Add custom connector.
- Name: DNS Doctor.
- MCP server URL:
https://dnsdoctor.dev/mcp - Under Authentication, choose Sign in when needed. Claude may pre-select “No sign-in”. With that, the free checks work, but Claude can never connect your DNS Doctor account.
- OAuth client: keep the default, Use Claude's published identity.
- Choose Add.
If DNS Doctor appears in Claude's Connectors directory, you can add it from there instead.
Add it to Claude Code
Run this once in your terminal:
claude mcp add --transport http dns-doctor https://dnsdoctor.dev/mcpWhen a tool needs your account, sign in from Claude Code with /mcp.
Or install the plugin, which adds the same server plus a skill that walks the scan, diagnose and fix steps:
/plugin marketplace add dnsdoctor/claude-plugin/plugin install dns-doctorWhat works without an account
Every check and lookup is free and needs no sign-in:
- A full domain scan and its report: SPF, DMARC, DKIM, MX, DNS health, blacklists, and domain and SSL expiry.
- SPF: the DNS lookup count against the limit of 10, and an audit of every include (who can send as your domain).
- DMARC: check a record, generate one for a domain that has none, and the next policy step when the evidence supports it.
- DKIM: check a specific selector and its key.
- Propagation: whether a DNS change has reached resolvers around the world, and a quick read of any single record.
- Reverse DNS for a mail server IP.
- WHOIS and registration: registrar, expiry date, locks and nameservers.
- Lookalike domains: which close variants of your name resolve and accept mail.
- DMARC aggregate reports: upload one and get it in readable form.
- A protection pack for a domain that sends no mail.
What needs your DNS Doctor account
- Add a domain to monitoring and get the ownership record to publish.
- Check whether that record is visible yet and mark the domain verified.
- Get the records a monitored domain still needs.
- Read your alerts, DMARC readiness and lookalike watches.
When Claude needs your account, it shows a Connect button. You sign in to DNS Doctor (Google, GitHub or an emailed sign-in link), approve “claude.ai wants to connect to your DNS Doctor account”, and Claude continues the same request. A new account starts with a 14-day free trial, no card required. One sign-in covers all of the above.
What Claude can and can't do
- It never changes your DNS. You publish every record yourself.
- Every record it shows comes from DNS Doctor's record engine, not written by AI.
- You can disconnect Claude any time: in DNS Doctor, open Settings → API tokens and revoke the token marked “linked from claude.ai”.
What is sent to DNS Doctor
The domains you ask about are sent to dnsdoctor.dev. A domain scan saves a public report page for that domain, which anyone with the link can open. Details are in the privacy policy.
If something goes wrong
- Claude never offers to connect
- The connector was added with “No sign-in”. Remove it and add it again with “Sign in when needed”.
- Connect failed
- Email hello@dnsdoctor.dev and say what you saw.