BasicSec

A Model Context Protocol (MCP) server that provides basic security scanning capabilities like DNS and email

python

0

GitHub Stars

python

Language

7 months ago

First Indexed

3 months ago

Catalog Refreshed

Documentation & install

Readme and setup notes from the catalogue, plus a client-ready config you can copy for your MCP host.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "marlinkcyber-basicsec-mcp": {
      "command": "basicsec-mcp",
      "args": [],
      "env": {
        "BASICSEC_MCP_LOG_LEVEL": "INFO or DEBUG as needed",
        "BASICSEC_MCP_DNS_TIMEOUT": "5.0",
        "BASICSEC_MCP_SMTP_TIMEOUT": "3.0"
      }
    }
  }
}

You run a focused MCP server that analyzes DNS security and email security for multiple domains. It integrates with MCP to enable AI-assisted workflows, performing SPF/DMARC/DNSSEC checks, MX analyses, and SMTP reachability tests. This enables fast, batch-ready domain assessments within your MCP-enabled tooling.

How to use

To leverage the BasicSec MCP Server, connect your MCP client and choose the domain or domains you want to evaluate. You can perform DNS-only scans to quickly verify SPF, DMARC, and DNSSEC status, or run full SMTP-capable scans to test MX records and SMTP connectivity. Use batch tools to scan multiple domains at once, and switch between passive (DNS-only) and active (SMTP-involved) modes depending on your needs.

How to install

Prerequisites: Python 3.8 or newer and pip must be available on your system.

Install the MCP server package for BasicSec.

pip install basicsec-mcp

Additional sections

Configuration and runtime settings are exposed through environment variables and the MCP runtime. The server is intended to run locally as an MCP server and exposes tools to scan domains and verify DNS records and SMTP reachability.

Security considerations emphasize defensive, permissioned usage, focusing on public security record lookups and standard SMTP protocol tests while avoiding invasive or unauthorized actions.

Usage examples include connecting via MCP and invoking scan utilities such as passive scan for DNS-only checks, active scan for full SMTP testing, and batch checks for multiple domains.

When running in development, you can start the server using the standard command shown in your environment to verify functionality while developing or testing within a controlled environment.

Available tools

passive_scan

DNS-only security scan that evaluates SPF, DMARC, and DNSSEC status for a domain.

active_scan

Full scan that includes DNS checks plus SMTP testing across common ports to verify MX and mail server reachability.

scan_multiple_domains

Batch domain scanning to run either passive or active scans on a list of domains.

quick_domain_check

Fast batch checks for multiple domains across live status, MX, SPF, and DMARC.

get_mx_records

Retrieve MX records for a domain to identify mail servers.

get_spf_record

Fetch and validate the SPF record for a domain.

get_dmarc_record

Fetch and validate the DMARC record for a domain.

check_dnssec_status

Check DNSSEC status for a domain.

validate_dnssec_chain

Validate the DNSSEC chain of trust for a domain.

test_smtp_connection

Test SMTP connectivity to a specified host and port.