HTTPfy for AI agents

A free remote MCP server with 24 DNS, email-security, certificate, IP and network tools. No sign-up, no API key. Your agent gets real answers from the public internet instead of guessing or writing its own lookups.

MCP server URL (Streamable HTTP, no authentication)

https://httpfy.io/mcp

Add to Cursor Add to VS Code Download Agent Skill llms.txt

The fastest way: let your agent set it up

Coding agents such as Claude Code, Codex, Cursor or Gemini CLI can add the server themselves. Paste this into your agent:

Add the httpfy MCP server to your MCP configuration. It is a remote MCP server using Streamable HTTP with no authentication, at https://httpfy.io/mcp (name it "httpfy"). After adding it, list its tools. Use them whenever I ask about DNS records, email authentication (SPF, DKIM, DMARC, BIMI, MTA-STS), SSL certificates, domain WHOIS or expiry, IP or ASN data, blocklists, or reachability (ping, traceroute, TCP ports). Setup reference: https://httpfy.io/agents

Install in your client

claude mcp add --transport http httpfy https://httpfy.io/mcp

Add --scope user to make it available in every project. Optional: install the Agent Skill into ~/.claude/skills/ so Claude knows which tool to pick.

Open Settings → Connectors and choose Add custom connector.
Name it httpfy and paste the URL https://httpfy.io/mcp.
Leave authentication empty and save. Enable the connector in a chat from the tools menu.

In Settings → Apps (or Connectors), open Advanced and turn on Developer mode.
Create a new app/connector, name it httpfy and use the server URL https://httpfy.io/mcp.
Choose No authentication, save, and enable it in a chat.

Add to Cursor

Or add to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "httpfy": { "url": "https://httpfy.io/mcp" }
  }
}

Add to VS Code

Or from a terminal:

code --add-mcp '{"name": "httpfy", "type": "http", "url": "https://httpfy.io/mcp"}'

codex mcp add httpfy --url https://httpfy.io/mcp

gemini mcp add --transport http httpfy https://httpfy.io/mcp

Add to ~/.codeium/windsurf/mcp_config.json:

{
  "mcpServers": {
    "httpfy": { "serverUrl": "https://httpfy.io/mcp" }
  }
}

Any MCP client that supports remote servers: transport streamable-http (often called http), URL below, no headers or auth.

{
  "mcpServers": {
    "httpfy": { "type": "http", "url": "https://httpfy.io/mcp" }
  }
}

Agent Skill

For agents that support skills (Claude Code, Claude.ai and others using the SKILL.md format): a short guide telling the agent which httpfy tool fits which question. Download the skill or view SKILL.md. In Claude Code, unzip it into ~/.claude/skills/.

Tools (24)

dns_lookup

domain, record_type

Look up DNS records of one type (A, AAAA, CNAME, MX, NS, SOA, TXT, SRV) for a domain using public resolvers. Try it on the web

lookup

dns_propagation_check

domain_name, query_type

Query a domain on about 40 public resolvers in different regions and report which ones return which answers, to see whether a DNS change has propagated. Try it on the web

active

dnssec_check

domain

Validate the DNSSEC chain of trust for a domain from the root down (DS, DNSKEY, RRSIG) and report each zone as secure, insecure or broken. Try it on the web

lookup

mx_lookup

domain

List the mail exchanger (MX) records of a domain with their preferences. Try it on the web

lookup

spf_lookup

domain

Fetch the SPF record of a domain from its authoritative name server and list its mechanisms (ip4, ip6, include, redirect, all). Try it on the web

lookup

spf_validate

domain

Validate the SPF record of a domain: syntax, single-record rule, DNS lookup count (limit 10), void lookups, includes and the all mechanism. Try it on the web

lookup

domain_whois

domain

WHOIS registration data for a domain: registrar, dates, status and name servers (personal contact data is redacted by registries). Try it on the web

lookup

domain_expiry

domain_name

Registration and expiry dates of a domain, with the time remaining before it expires. Try it on the web

lookup

ssl_certificate_check

domain

Connect to a domain on port 443 and report the certificate chain: subject, issuer, validity dates, days remaining, SANs and chain details. Try it on the web

lookup

ping

host

Ping a public host from httpfy servers (4 ICMP echo requests) and report packet loss and round-trip times. Useful to test reachability from outside your own network. Try it on the web

active

traceroute

host

Traceroute to a public host from httpfy servers (up to 10 hops). Internal hops of httpfy's own network are masked. Try it on the web

probe

ip_whois

ip_address

WHOIS / registry data for a public IPv4 address: ASN, network range, owner organisation and registry. Try it on the web

lookup

ip_blacklist_check

ip_address

Check whether a public IPv4 address is listed on common DNS-based blocklists such as Spamhaus, Barracuda and SpamCop. Try it on the web

active

mac_vendor_lookup

mac_address

Identify the manufacturer registered for a MAC address prefix (OUI) using the IEEE registry. Try it on the web

lookup

asn_lookup

query

Look up the autonomous system (ASN) for a public IP address, or details for an ASN such as AS15169: name, country, announced prefixes and address counts. Try it on the web

lookup

bimi_check

domain

Check the BIMI record of a domain, whether DMARC meets BIMI requirements, and whether the SVG logo and certificate URLs are reachable and well formed. Try it on the web

lookup

caa_check

domain

Find the CAA records that apply to a domain (climbing to parent domains per RFC 8659) and list which certificate authorities may issue certificates. Try it on the web

lookup

certificate_transparency_search

domain

List certificates logged in Certificate Transparency for a domain (via crt.sh): issuer, validity window and names, with a summary by issuer. Try it on the web

lookup

dkim_check

domain, selector

Check DKIM public keys for a domain. With a selector it checks that selector; without one it probes common selectors. Reports key type and RSA key length and flags weak or revoked keys. Try it on the web

lookup

dmarc_check

domain

Find and explain the DMARC record of a domain (policy, pct, rua/ruf, alignment) and flag weaknesses such as p=none or missing external report authorization. Try it on the web

lookup

dns_report

domain

Full DNS report for a domain: delegation from the root, every authoritative name server checked individually (reachability, recursion, TCP, consistency), SOA values, MX records and their reverse DNS, SPF, DMARC, DKIM and DNSSEC. Try it on the web

active

domain_health_report

domain

Grade a domain A to F across 11 checks (name servers, SOA, DNSSEC, MX, SPF, DMARC, CAA, HTTPS certificate, HTTP to HTTPS redirect, HSTS, IPv6), with a reason and fix for each failed check. Try it on the web

active

mta_sts_check

domain

Check MTA-STS (TXT record and the HTTPS policy file, mode and MX patterns) and the TLS-RPT reporting record for a domain. Try it on the web

lookup

port_check

host, port

Check whether one TCP port on a public host is open, closed or filtered when tested from httpfy servers on the internet. Try it on the web

probe

Limits and fair use

Free, no key. Per client address and hour: 100 lookups, 30 active checks (propagation, blacklist, full DNS report, health report, ping) and 10 probes (traceroute, port check).
Any single target can be probed at most 60 times per 10 minutes across all users. Identical lookups are served from a 2-minute cache.
Probes only reach public internet addresses; private, loopback and cloud-metadata addresses are refused.
Only test domains and hosts you own or are allowed to test. No scanning, load testing or bulk harvesting. We may block clients or targets that abuse the service.

Privacy

For each call we log the client address, the tool, the target and the time, to enforce limits and handle abuse. We never receive or store your conversation. Results are not tied to you, and report links are public, so do not put secrets in queries. See the privacy policy.

Attribution

Results are free to use under CC BY 4.0. When you show them, please credit httpfy.io and keep the report link that comes with every result.