# BlackVeil DNS & Email Security Scanner (com.blackveilsecurity/dns): tool descriptions scored

- tools/list taken: 2026-11-02 (UTC)
- From: [Official MCP Registry](https://registry.modelcontextprotocol.io/v0/servers/com.blackveilsecurity%2Fdns/versions/latest)
- Connected to: https://dns-mcp.blackveilsecurity.com/mcp
- Homepage: https://www.blackveilsecurity.com/dns
- Repository: https://github.com/MadaBurns/bv-mcp
- Scoring rules: v2
- Tools: 81
- Average: 67.3 / 100 (Cloudy)
- Near-identical pairs: 6

This page shows how BlackVeil DNS & Email Security Scanner (com.blackveilsecurity/dns)'s tool descriptions scored, the issues found and the names of its tools and parameters. The descriptions are the server's own: read them where the copy came from.

Forecall asked the URL this server lists in the official MCP Registry for its tools/list once, on the date above, without calling any tool. The server may have changed since.

## Across the server

- Major: 81 tools. Above 40, models choose less accurately.

## Tools

- `batch_scan_findings`: 38 / 100
  - Major: The description only restates the name (9 words).
  - Major: Says nothing about when to use it, or when not to.
  - Minor: Says nothing about what it returns.
- `batch_scan_status`: 38 / 100
  - Major: The description only restates the name (9 words).
  - Major: Says nothing about when to use it, or when not to.
  - Minor: Says nothing about what it returns.
- `check_resolver_consistency`: 43 / 100
  - Major: The description only restates the name (6 words).
  - Major: The description is too short (6 words).
  - Major: Says nothing about when to use it, or when not to.
  - Minor: The description mentions none of its 3 or more arguments.
  - Minor: Says nothing about what it returns.
- `explain_finding`: 43 / 100
  - Major: The description only restates the name (7 words).
  - Major: The description is too short (7 words).
  - Major: Says nothing about when to use it, or when not to.
  - Minor: The description mentions none of its 3 or more arguments.
  - Minor: Says nothing about what it returns.
- `simulate_attack_paths`: 51 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: The description mentions none of its 3 or more arguments.
  - Minor: Says nothing about what it returns.
- `delete_brand_audit_watch`: 53 / 100
  - Major: Says nothing about when to use it, or when not to.
- `map_compliance`: 54 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: The description mentions none of its 3 or more arguments.
  - Minor: Says nothing about what it returns.
- `prioritize_portfolio_leads`: 54 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: No `required` list, so every argument is optional.
  - Minor: Says nothing about what it returns.
- `discover_brand_domains_status`: 56 / 100
  - Major: Says nothing about when to use it, or when not to.
- `resolve_spf_chain`: 57 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: Says nothing about what it returns.
- `check_txt_hygiene`: 58 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: The description mentions none of its 3 or more arguments.
- `check_nsec_walkability`: 59 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: The description mentions none of its 3 or more arguments.
- `compare_domains`: 59 / 100
  - Minor: Says nothing about what it returns.
- `discover_brand_domains_findings`: 59 / 100
  - Major: Says nothing about when to use it, or when not to.
- `osint_investigate_email_start`: 59 / 100
  - Major: Says nothing about when to use it, or when not to.
- `osint_investigate_username_start`: 59 / 100
  - Major: Says nothing about when to use it, or when not to.
- `brand_audit_single`: 60 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: Says nothing about what it returns.
- `brand_audit_batch_start`: 61 / 100
  - Major: Says nothing about when to use it, or when not to.
- `brand_audit_status`: 61 / 100
  - Major: Says nothing about when to use it, or when not to.
- `list_brand_audit_watches`: 61 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: No `required` list, so every argument is optional.
- `register_brand_audit_watch`: 61 / 100
- `batch_scan_start`: 62 / 100
  - Major: Says nothing about when to use it, or when not to.
- `check_caa`: 62 / 100
  - Major: Says nothing about when to use it, or when not to.
- `check_fast_flux`: 62 / 100
  - Major: Says nothing about when to use it, or when not to.
- `check_ptr`: 62 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: The description mentions none of its 3 or more arguments.
- `check_rbl`: 62 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: The description mentions none of its 3 or more arguments.
- `check_svcb_https`: 62 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: The description mentions none of its 3 or more arguments.
- `discover_brand_domains_start`: 64 / 100
  - Major: Says nothing about when to use it, or when not to.
- `get_benchmark`: 64 / 100
  - Minor: No `required` list, so every argument is optional.
  - Minor: Says nothing about what it returns.
- `check_agent_discovery`: 65 / 100
  - Major: Says nothing about when to use it, or when not to.
- `check_dnssec`: 65 / 100
  - Major: Says nothing about when to use it, or when not to.
- `check_llms_txt`: 65 / 100
  - Major: Says nothing about when to use it, or when not to.
- `check_lookalikes`: 65 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: The description mentions none of its 3 or more arguments.
- `check_tlsrpt`: 65 / 100
  - Major: Says nothing about when to use it, or when not to.
- `scan_buckets_findings`: 65 / 100
  - Minor: Says nothing about what it returns.
- `check_dkim`: 67 / 100
- `check_dmarc`: 67 / 100
- `check_realtime_threat_feed`: 67 / 100
- `generate`: 67 / 100
  - Minor: Says nothing about what it returns.
- `check_dbl`: 69 / 100
  - Major: Says nothing about when to use it, or when not to.
- `check_root_server_set`: 69 / 100
  - Minor: No `required` list, so every argument is optional.
- `get_domain_rank`: 69 / 100
  - Major: Says nothing about when to use it, or when not to.
- `osint_investigation_status`: 69 / 100
- `scan_buckets_status`: 69 / 100
- `sge_quickscan`: 69 / 100
- `check_dane_https`: 70 / 100
- `check_mta_sts`: 70 / 100
- `brand_audit_get_report`: 72 / 100
- `check_dnssec_chain`: 72 / 100
- `check_mx`: 72 / 100
- `check_subdomailing`: 72 / 100
- `compare_baseline`: 72 / 100
  - Minor: The meaning of the boolean argument baseline.require_dmarc_enforce is unclear.
  - Minor: The meaning of the boolean argument baseline.require_spf is unclear.
  - Minor: The meaning of the boolean argument baseline.require_dkim is unclear.
  - Minor: The meaning of the boolean argument baseline.require_dnssec is unclear.
  - Minor: The meaning of the boolean argument baseline.require_mta_sts is unclear.
  - Minor: The meaning of the boolean argument baseline.require_caa is unclear.
  - Minor: Says nothing about what it returns.
- `cymru_asn`: 72 / 100
  - Major: Says nothing about when to use it, or when not to.
- `get_provider_insights`: 72 / 100
  - Minor: Says nothing about what it returns.
- `osint_investigate_domain_start`: 72 / 100
- `osint_investigate_infrastructure_start`: 72 / 100
- `osint_investigate_supply_chain_start`: 72 / 100
- `analyze_drift`: 74 / 100
- `assess_spoofability`: 74 / 100
- `discover_subdomains`: 74 / 100
- `validate_fix`: 74 / 100
  - Minor: The description mentions none of its 3 or more arguments.
  - Minor: Says nothing about what it returns.
- `check_http_security`: 75 / 100
  - Major: Says nothing about when to use it, or when not to.
- `check_mx_reputation`: 75 / 100
  - Minor: The description mentions none of its 3 or more arguments.
- `check_spf`: 75 / 100
- `check_zone_hygiene`: 75 / 100
  - Minor: The description mentions none of its 3 or more arguments.
- `osint_investigation_report`: 75 / 100
  - Minor: Says nothing about what it returns.
- `check_ssl`: 77 / 100
- `discover_brand_domains`: 77 / 100
- `map_supply_chain`: 77 / 100
  - Minor: Says nothing about what it returns.
- `scan_buckets_start`: 77 / 100
- `check_dnskey_strength`: 78 / 100
  - Minor: The description mentions none of its 3 or more arguments.
  - Minor: The description says the tool is deprecated. Name the replacement, and consider taking the tool out of tools/list: models avoid it when asked for what it does.
- `check_ns`: 78 / 100
- `batch_scan`: 79 / 100
- `check_subdomain_takeover`: 79 / 100
- `check_authoritative_dns_infra`: 80 / 100
  - Minor: The description mentions none of its 3 or more arguments.
- `rdap_lookup`: 82 / 100
- `check_shadow_domains`: 83 / 100
- `scan_domain`: 84 / 100
- `check_bimi`: 85 / 100
- `check_dane`: 85 / 100
- `check_srv`: 87 / 100

Is your server listed here and you would rather it were not? Email support@forecall.dev, and we will take it off within 7 days.

[All scored servers](https://forecall.dev/en/servers)