# drwho.me

> Free network, email, DNS and developer tools, plus a free MCP server for AI agents.

## Tools

- [SPF checker](https://drwho.me/tools/spf-checker): Find and read a domain's SPF record.
- [DMARC checker](https://drwho.me/tools/dmarc-checker): Read the DMARC policy at _dmarc.
- [DKIM lookup](https://drwho.me/tools/dkim-lookup): Probe 21 common DKIM selectors.
- [TLS-RPT checker](https://drwho.me/tools/tlsrpt-checker): Look up the SMTP TLS reporting policy.
- [MTA-STS checker](https://drwho.me/tools/mta-sts-checker): Fetch and validate the MTA-STS policy.
- [Blacklist check](https://drwho.me/tools/blacklist-check): Check mail and web IPs against six blocklists.
- [SPF generator](https://drwho.me/tools/spf-record-generator): Build an SPF record and count its lookups.
- [DMARC generator](https://drwho.me/tools/dmarc-record-generator): Build a DMARC record, with warnings.
- [DNS lookup](https://drwho.me/tools/dns): Resolve one record type.
- [DNS records](https://drwho.me/tools/dns-records-lookup): A, AAAA, NS, SOA, CAA and TXT in one go.
- [MX lookup](https://drwho.me/tools/mx-lookup): Mail servers, sorted by priority.
- [DNSSEC checker](https://drwho.me/tools/dnssec-checker): DS, DNSKEY and the validation flag.
- [Security headers](https://drwho.me/tools/security-headers-checker): HSTS, CSP and the rest, as served.
- [TLS certificate](https://drwho.me/tools/tls-certificate-checker): Issuer, expiry, names and fingerprint.
- [Redirect chain](https://drwho.me/tools/redirect-checker): Every hop from https://domain/.
- [CORS checker](https://drwho.me/tools/cors-checker): Run a preflight and read the answer.
- [Web surface](https://drwho.me/tools/web-surface-inspector): robots.txt, sitemap and page metadata.
- [AI-crawler policy](https://drwho.me/tools/ai-crawler-checker): What robots.txt tells GPTBot, ClaudeBot and others.
- [llms.txt checker](https://drwho.me/tools/llms-txt-checker): Is there an llms.txt for AI agents?
- [security.txt checker](https://drwho.me/tools/security-txt-checker): Is there a way to report a vulnerability?
- [MCP endpoint checker](https://drwho.me/tools/mcp-endpoint-checker): Does an MCP endpoint answer, and does it need auth?
- [WHOIS lookup](https://drwho.me/tools/whois-lookup): Registrar, created and expiry dates.
- [Certificate log lookup](https://drwho.me/tools/ct-log-lookup): Subdomains seen in certificate transparency logs.
- [What is my IP](https://drwho.me/tools/ip): Your public address, location and network.
- [IP lookup](https://drwho.me/tools/ip-lookup): Location, network and owner of any address.
- [Request headers](https://drwho.me/tools/headers): The headers your browser sends.
- [User agent parser](https://drwho.me/tools/user-agent): Browser, system and device from a UA string.
- [Base64](https://drwho.me/tools/base64): Encode and decode, including base64url.
- [JWT decoder](https://drwho.me/tools/jwt): Read a token's header and claims. Nothing leaves the page.
- [JSON formatter](https://drwho.me/tools/json): Format, minify and validate.
- [URL encoder](https://drwho.me/tools/url-codec): Percent-encode and decode.
- [UUID generator](https://drwho.me/tools/uuid): Version 4 and version 7.

## MCP

- [MCP server](https://drwho.me/mcp): https://drwho.me/mcp/mcp — streamable HTTP, no key, 60 tool calls an hour.