Official MCP RegistryListed

OrionCMD Checks

Pay-per-call TLS certificate, DNS/email-auth and domain-expiry checks for any domain (x402 USDC).

First seen 10 Oct 2026. Evidence as of 12 Oct 2026.

Tools

From an anonymous probe

Source listings

Each with its own history

Recorded changes

Since first seen

Tools

Tool	Description	Behaviour
check_cert	Certificate status for a hostname from Certificate Transparency logs (issuer, validity, days left, % lifetime used, renewal cadence, renewal-stall heuristic) plus a live HTTPS pass/fail probe. Cert details come from CT logs, not the live connection.	Read-only
check_dns	Live DNS via DoH: NS, A/AAAA/CNAME, MX, SPF, DMARC, CAA (tree-climbing), DNSSEC, with plain-English findings.	Read-only
check_domain_expiry	Domain registration expiry via RDAP: registrar, registered/expires dates, days left, status, nameservers.	Read-only
check_email_auth	Email authentication posture for a domain: SPF validity and lookup count, DMARC policy, DKIM on common selectors, MTA-STS mode, TLS-RPT, BIMI, a rough 0-100 score and plain-English fixes. Live DNS.	Read-only
check_security_headers	HTTP security headers for a site from one live HTTPS request: redirect chain, HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, an A-F grade and findings.	Read-only
pricing	FREE. Prices, network and payment address for the paid tools.	Not declared
site_health	Bundle: check_cert + check_dns + check_domain_expiry with a summary, the renewal-stall heuristic and the Let's Encrypt 64-day (2027-02-10) note.	Read-only
validate_target	FREE. Check that a domain/hostname is well-formed before paying for a check. Returns the normalized host.	Not declared

Source listings
Source	Listing	First seen	Last seen	Versions
Official MCP Registry	com.orioncmd.api/checks	10 Oct 2026	12 Oct 2026	1