DNS Tools
See exactly what DNS is doing — no CLI, no sign-up.
Pro-grade DNS diagnostics for admins, developers and the curious. The queries run on our servers rather than in your browser — that is the only way to ask each authoritative nameserver individually, follow the delegation from the root, and genuinely expand an SPF include tree. Nothing to install, no sign-up.
Available tools
Eleven specialised tools for every step of DNS diagnostics.
DNS Analysis
Complete domain analysis in one report: records, reverse DNS, nameserver consistency, the DNSSEC chain, the CNAME chain and the email policy.
- SOA & nameserver inspection
- Nameserver consistency check
- DNSSEC chain of trust
- MX, SPF and DMARC evaluation
- PTR validation
DNS Lookup
DNS lookups for any domain and record type — either through a resolver or straight from the zone’s own authoritative nameserver.
- All common DNS record types
- Straight from the authoritative nameserver
- Header flags and authority section
- Detailed response inspection
Reverse Lookup
Reverse DNS lookups (PTR) for IPv4 and IPv6, including the forward-confirmed check that mail servers actually apply.
- IPv4 and IPv6 support
- Forward-confirmed reverse DNS
- Mail server validation
- The .arpa name derived for you
Email Security
Audits a domain’s entire email authentication — including the expanded SPF include tree and the fetched MTA-STS policy.
- SPF with the real lookup budget
- DMARC policy and reporting
- DKIM selector scan
- MTA-STS, TLS-RPT and BIMI
Propagation
Queries 16 public resolvers worldwide in parallel and compares them against the authoritative answer — shows whether a change has landed yet.
- 16 independent resolvers
- Compared against the source
- Remaining cache TTL per resolver
- Diverging answers grouped
DNSSEC Chain
Follows the chain of trust from the root and, at every zone cut, recomputes the DS digest against the published DNSKEY.
- Validated from the root trust anchor
- DS digest recomputed locally
- RRSIG validity windows
- Cross-checked against validating resolvers
Delegation Trace
Follows the delegation from the root servers down to the zone, showing which server answered at each level and where it referred to.
- The full delegation path
- Responding server per level
- DS records from the referral
- Latency per hop
Zone Transfer Check
Checks whether an authoritative nameserver hands the entire zone to strangers — a classic among misconfigurations.
- Every nameserver and address
- Only the first response is read
- No zone data is stored
- A clear yes-or-no verdict
WHOIS / RDAP
Registration data straight from the registry over RDAP: registrar, dates, status codes and the delegation the registry has on file.
- Registrar, expiry and transfer locks
- Registry status codes explained
- Parent-side DNSSEC delegation
- Honest about TLDs without RDAP
DNS Speed Test
Rank public resolvers by response time, measured over several samples with the median and the full spread visible.
- 16 public resolvers compared
- Median over multiple samples
- Test a name you actually use
- Vantage point stated honestly
DoT / DoH Test
Test any resolver over DNS-over-TLS and DNS-over-HTTPS, with certificate validity, HTTP version and a plain-DNS baseline.
- DoT (853) and DoH (RFC 8484)
- Certificate and TLS version
- HTTP/2 negotiation shown
- Latency vs. plain DNS
DNS diagnostics straight from your assistant
All eleven tools are available as MCP tools too — no token, no sign-up. An AI assistant can run the same checks itself and interpret the results on the spot.
https://dremaxx.de/api/mcp/dns-tools- Check the DNS configuration of example.com for me.
- Is the DNSSEC chain for example.com intact?
- Has the address change on www.example.com propagated worldwide yet?
Read-only, on public dataThis endpoint needs no sign-in because it only ever queries the public DNS and touches no account data. In place of a token it is bounded by a points allowance per caller.
API and MCP
Every tool is also an HTTP endpoint and an MCP tool — no token, no sign-up. An AI assistant can run the same checks itself.
About the DNS Tools
These tools help diagnose DNS issues, validate configurations and gain insight into DNS infrastructure. The queries run server-side — a browser can only ever ask a single resolver, and would not reach the interesting answers at all.
Whether mail delivery problems, nameserver validation or exploring DNS records — these tools deliver the details you need.
Recently reported
Never miss one
Get an email whenever there is something to report about dns-tools — incidents, maintenance and news. Changeable at any time, cancellable at any time.