Front Sentinel

com.frontsentinel/domain-securityVersion 1.0.0

Read-only security checks for dApp domains: registry lock, DNSSEC, CAA, SRI, SEAL DNS controls

Status

Responds98 msNov 14, 2026, 13:57 UTCAnswered our handshake without sign-in.

Registry data may be out of date

We could not refresh it, so this page shows the last copy.

Last checked: Nov 14, 2026, 13:57 UTC
Latency: 98 ms
Remotes responding: 1 of 1
Sign-in: No sign-in
Hosting: EU hosting detected (detected, not a legal statement)
Registry data as of: Nov 14, 2026, 22:14 UTC

Data from the official MCP Registry, checked by run.zero. How we check

Connect

Streamable HTTP

https://frontsentinel.com/mcpResponds98 msNov 14, 2026, 13:57 UTC

No sign-in

Claude Code

claude mcp add --transport http domain-security https://frontsentinel.com/mcp

Claude Desktop and claude.ai

1
2
3

Settings > Connectors > Add custom connector
Name: domain-security
Remote MCP server URL: https://frontsentinel.com/mcp

Cursor

{
  "mcpServers": {
    "domain-security": {
      "url": "https://frontsentinel.com/mcp"
    }
  }
}

VS Code

code --add-mcp '{"name":"domain-security","type":"http","url":"https://frontsentinel.com/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

Host your own MCP server on run.zero

Tools

4 tools

Tools of Front Sentinel
	Description		Read-only	Idempotent	Open world
`check_registry_lock`Reads the domain's EPP status codes from RDAP and tells whether registry lock (serverUpdateProhibited + serverTransferProhibited) is on, partly on or off, and which registrar-level locks are set.	Reads the domain's EPP status codes from RDAP and tells whether registry lock (serverUpdateProhibited + serverTransferProhibited) is on, partly on or off, and which registrar-level locks are set.	No	Yes	Yes	Yes
`check_seal_dns_registrar`Goes through the 16 controls of the SEAL Security Frameworks certification for DNS & Registrar and marks what public data shows for each: ok, partial, gap, not visible from outside, or a process control the team has to document itself. Includes DNSSEC, CAA, SPF/DMARC/MTA-STS, locks, expiry and security.txt.	Goes through the 16 controls of the SEAL Security Frameworks certification for DNS & Registrar and marks what public data shows for each: ok, partial, gap, not visible from outside, or a process control the team has to document itself. Includes DNSSEC, CAA, SPF/DMARC/MTA-STS, locks, expiry and security.txt.	No	Yes	Yes	Yes
`check_sri`Loads a public page and lists every script, stylesheet and preload it pulls in. For third-party files, checks whether an integrity= hash is present and matches, and returns a ready sha384 hash for files that have none.	Loads a public page and lists every script, stylesheet and preload it pulls in. For third-party files, checks whether an integrity= hash is present and matches, and returns a ready sha384 hash for files that have none.	No	Yes	Yes	Yes
`scan_domain`Scores how well a dApp or website domain is protected against hijacking: registrar transfer/update locks, registry lock, DNSSEC, CAA, expiry, nameserver consistency across resolvers, SRI on third-party scripts and the Content-Security-Policy header. Returns a 0-100 score, each check with pass/fail/unknown and advice. Results are cached for an hour.	Scores how well a dApp or website domain is protected against hijacking: registrar transfer/update locks, registry lock, DNSSEC, CAA, expiry, nameserver consistency across resolvers, SRI on third-party scripts and the Content-Security-Policy header. Returns a 0-100 score, each check with pass/fail/unknown and advice. Results are cached for an hour.	No	Yes	Yes	Yes

Details

Registry status: Active
Published: Oct 23, 2026
Updated: Oct 23, 2026
Website: https://frontsentinel.com/mcp⁠ (opens in a new tab)
Repository: Not given
Categories (suggested): SecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared

Are you the operator? Claim this listing