Skill: dnsrobot/dnsrobot (version 1.0.0)

--- name: dnsrobot description: "Run DNS, email security, SSL, WHOIS, and network tools via dnsrobot.net API — no API key required" version: 1.0.0 metadata.openclaw.requires.bins: [curl] emoji: 🌐 homepage: https://dnsrobot.net --- # DNS Robot — DNS & Network Tools [DNS Robot](https://dnsrobot.net) provides 53 free online DNS, domain, email security, and network tools. This skill gives you access to 19 API endpoints — no API key, no rate limits, no signup. **Base URL**: `https://dnsrobot.net` All endpoints accept and return JSON. Domains are auto-cleaned (strips `http://`, `https://`, `www.`, trailing paths). --- ## DNS Tools ### dns_lookup Look up DNS records for any domain using a specific DNS server. | Param | Type | Required | Description | |-------|------|----------|-------------| | `domain` | string | yes | Domain name (e.g. `example.com`) | | `recordType` | string | yes | `A`, `AAAA`, `CNAME`, `MX`, `NS`, `TXT`, `SOA`, `PTR`, `SRV`, `CAA`, `DNSKEY`, or `DS` | | `dnsServer` | string | yes | DNS server IPv4 (e.g. `8.8.8.8`) | | `timeout` | number | no | Timeout in ms (1000–10000, default 5000) | ```bash curl -s -X POST https://dnsrobot.net/api/dns-query \ -H "Content-Type: application/json" \ -d '{"domain":"example.com","recordType":"A","dnsServer":"8.8.8.8"}' ``` Response: ```json { "status": "success", "domain": "example.com", "recordType": "A", "dnsServer": "8.8.8.8", "responseTime": 42, "resolvedIPs": ["93.184.216.34"] } ``` **When to use**: Check how a domain resolves from a specific DNS server. Useful for DNS propagation debugging, verifying records, or comparing responses across providers. --- ### ns_lookup Find all authoritative nameservers for a domain, including their IPs and providers. | Param | Type | Required | Description | |-------|------|----------|-------------| | `domain` | string | yes | Domain name | | `dnsServer` | string | no | DNS server ID | ```bash curl -s -X POST https://dnsrobot.net/api/ns-lookup \ -H "Content-Type: application/json" \ -d '{"domain":"github.com"}' ``` Response: ```json { "success": true, "domain": "github.com", "summary": { "totalNameservers": 8, "primaryProvider": "DNS Made Easy", "allProviders": ["DNS Made Easy"], "averageResponseTime": 15 }, "nameservers": [ { "nameserver": "dns1.p08.nsone.net", "ipAddresses": ["198.51.44.8"], "responseTime": 12, "provider": "DNS Made Easy" } ] } ``` **When to use**: Identify who hosts a domain's DNS, check nameserver redundancy, or debug delegation issues. --- ### mx_lookup Find mail exchange (MX) records and identify the email provider. | Param | Type | Required | Description | |-------|------|----------|-------------| | `domain` | string | yes | Domain name | | `dnsServer` | string | no | DNS server ID | ```bash curl -s -X POST https://dnsrobot.net/api/mx-lookup \ -H "Content-Type: application/json" \ -d '{"domain":"google.com"}' ``` Response: ```json { "success": true, "domain": "google.com", "summary": { "totalRecords": 5, "primaryProvider": "Gmail", "allProviders": ["Gmail"], "lowestPriority": 10 }, "mxRecords": [ { "exchange": "smtp.google.com", "priority": 10, "ipAddresses": ["142.250.152.26"], "provider": "Gmail" } ] } ``` **When to use**: Find which email provider a domain uses, verify MX record configuration, or troubleshoot email delivery. --- ### cname_lookup Trace the full CNAME chain for a domain, detecting circular references. | Param | Type | Required | Description | |-------|------|----------|-------------| | `domain` | string | yes | Domain name | | `dnsServer` | string | no | DNS server ID | ```bash curl -s -X POST https://dnsrobot.net/api/cname-lookup \ -H "Content-Type: application/json" \ -d '{"domain":"www.github.com"}' ``` Response: ```json { "success": true, "domain": "www.github.com", "hasCNAME": true, "summary": { "chainLength": 1, "hasCircularReference": false, "finalHostname": "github.github.io", "message": "CNAME chain resolved successfully" }, "chain": [ { "hostname": "www.github.com", "target": "github.github.io", "isCircular": false, "depth": 1 } ], "finalDestination": { "hostname": "github.github.io", "ipv4": ["185.199.108.153"], "ipv6": [] } } ``` **When to use**: Debug CDN or load balancer configurations, find the actual server behind a CNAME, or detect circular references. --- ### reverse_dns Perform a reverse DNS (PTR) lookup on an IP address. | Param | Type | Required | Description | |-------|------|----------|-------------| | `ip` | string | yes | IPv4 or IPv6 address | | `dnsServer` | string | no | DNS server ID | ```bash curl -s -X POST https://dnsrobot.net/api/reverse-dns \ -H "Content-Type: application/json" \ -d '{"ip":"8.8.8.8"}' ``` Response: ```json { "success": true, "ip": "8.8.8.8", "ipVersion": "IPv4", "hostnames": ["dns.google"], "ptrRecord": "dns.google", "responseTime": 28, "hostnameCount": 1 } ``` **When to use**: Identify the hostname associated with an IP, verify PTR records for email deliverability, or investigate unknown IPs. --- ### domain_to_ip Resolve a domain to all its IP addresses with CDN detection and geolocation. | Param | Type | Required | Description | |-------|------|----------|-------------| | `domain` | string | yes | Domain name | | `dnsServer` | string | no | DNS server ID | ```bash curl -s -X POST https://dnsrobot.net/api/domain-ip \ -H "Content-Type: application/json" \ -d '{"domain":"cloudflare.com"}' ``` Response: ```json { "success": true, "domain": "cloudflare.com", "summary": { "totalIPs": 4, "ipv4Count": 2, "ipv6Count": 2, "hasCDN": true, "cdnProviders": ["Cloudflare"], "hasIPv6": true }, "ipAddresses": [ { "ip": "104.16.132.229", "cdnProvider": "Cloudflare", "country": "US", "asn": "AS13335" } ] } ``` **When to use**: Find all IPs behind a domain, check CDN usage, verify IPv6 support, or identify hosting provider. --- ## Domain Tools ### whois_lookup Get WHOIS/RDAP registration data for a domain — registrar, dates, contacts, nameservers. | Param | Type | Required | Description | |-------|------|----------|-------------| | `domain` | string | yes | Domain name | ```bash curl -s -X POST https://dnsrobot.net/api/whois \ -H "Content-Type: application/json" \ -d '{"domain":"github.com"}' ``` Response: ```json { "success": true, "domain": "github.com", "registeredOn": "2007-10-09T18:20:50Z", "expiresOn": "2026-10-09T18:20:50Z", "registrar": { "name": "MarkMonitor Inc.", "url": "http://www.markmonitor.com" }, "nameServers": ["dns1.p08.nsone.net", "dns2.p08.nsone.net"], "status": ["clientDeleteProhibited", "clientTransferProhibited"], "age": "18 years", "source": "RDAP" } ``` **When to use**: Check domain ownership, expiration dates, registrar info, or investigate a domain's history. --- ### domain_health Run a comprehensive health check on a domain — DNS, SSL, email security, HTTP, and performance. | Param | Type | Required | Description | |-------|------|----------|-------------| | `domain` | string | yes | Domain name | ```bash curl -s -X POST https://dnsrobot.net/api/domain-health \ -H "Content-Type: application/json" \ -d '{"domain":"example.com"}' ``` Response: ```json { "success": true, "domain": "example.com", "overallScore": 78, "checks": [ { "name": "SSL Certificate", "category": "Security", "status": "pass", "score": 15, "maxScore": 15, "details": "Valid SSL certificate, expires in 245 days" } ], "categoryScores": [ { "category": "DNS", "score": 20, "maxScore": 20, "percentage": 100, "grade": "A" }, { "category": "Security", "score": 25, "maxScore": 30, "percentage": 83, "grade": "B" } ] } ``` **When to use**: Get a quick overall assessment of a domain's configuration, security posture, and email authentication setup. This is the best starting point for a full domain audit. --- ### subdomain_finder Discover subdomains using Certificate Transparency logs. Returns results as an NDJSON stream. | Param | Type | Required | Description | |-------|------|----------|-------------| | `domain` | string | yes | Domain name | ```bash curl -s -X POST https://dnsrobot.net/api/subdomain-finder \ -H "Content-Type: application/json" \ -d '{"domain":"example.com"}' ``` Response (NDJSON — one JSON object per line): ``` {"type":"subdomains","names":["www.example.com","mail.example.com"]} {"type":"dns","results":[{"subdomain":"www.example.com","ip":"93.184.216.34","isActive":true}]} {"type":"enrichment","data":{"93.184.216.34":{"provider":"Edgecast","country":"US"}}} {"type":"complete","domain":"example.com","total":15,"activeCount":12,"inactiveCount":3} ``` **When to use**: Discover all known subdomains for security audits, attack surface mapping, or infrastructure analysis. > **Note**: This is a streaming endpoint. Each line is a separate JSON object. Parse line by line. --- ## Email Security Tools ### spf_check Validate SPF (Sender Policy Framework) records with full include tree resolution. | Param | Type | Required | Description | |-------|------|----------|-------------| | `domain` | string | yes | Domain name | ```bash curl -s -X POST https://dnsrobot.net/api/spf-checker \ -H "Content-Type: application/json" \ -d '{"domain":"google.com"}' ``` Response: ```json { "success": true, "domain": "google.com", "found": true, "rawRecord": "v=spf1 include:_spf.google.com ~all", "mechanisms": [ { "type": "include", "qualifier": "pass", "value": "_spf.google.com", "description": "Include SPF record from _spf.google.com" } ], "lookupCount": 4, "score": 85, "grade": "B+", "isValid": true, "warnings": ["Using ~all (softfail) instead of -all (hardfail)"] } ``` **When to use**: Validate SPF configuration, check DNS lookup count (max 10 per RFC 7208), or debug email authentication failures. --- ### dkim_check Validate DKIM (DomainKeys Identified Mail) records. Auto-detects the selector if not provided. | Param | Type | Required | Description | |-------|------|----------|-------------| | `domain` | string | yes | Domain name | | `selector` | string | no | DKIM selector (auto-tries 65+ common selectors if omitted) | ```bash curl -s -X POST https://dnsrobot.net/api/dkim-checker \ -H "Content-Type: application/json" \ -d '{"domain":"google.com"}' ``` Response: ```json { "success": true, "domain": "google.com", "selector": "20230601", "found": true, "rawRecord": "v=DKIM1; k=rsa; p=MIIBIjAN...", "tags": [ { "tag": "v", "value": "DKIM1", "description": "DKIM version" }, { "tag": "k", "value": "rsa", "description": "Key type" } ], "score": 90, "grade": "A", "keyType": "rsa", "keySize": 2048, "isValid": true } ``` **When to use**: Verify DKIM is configured, check key size and type, or find the active DKIM selector for a domain. --- ### dmarc_check Validate DMARC (Domain-based Message Authentication) records and policy strength. | Param | Type | Required | Description | |-------|------|----------|-------------| | `domain` | string | yes | Domain name | ```bash curl -s -X POST https://dnsrobot.net/api/dmarc-checker \ -H "Content-Type: application/json" \ -d '{"domain":"google.com"}' ``` Response: ```json { "success": true, "domain": "google.com", "found": true, "rawRecord": "v=DMARC1; p=reject; rua=mailto:[REDACTED_SECRET]", "policy": "reject", "subdomainPolicy": "reject", "tags": [ { "tag": "p", "value": "reject", "description": "Policy for domain" } ], "score": 95, "grade": "A", "isValid": true } ``` **When to use**: Check if a domain has DMARC protection, verify policy strength (none/quarantine/reject), or find reporting addresses. --- ### bimi_check Check BIMI (Brand Indicators for Message Identification) records for logo display in email. | Param | Type | Required | Description | |-------|------|----------|-------------| | `domain` | string | yes | Domain name | ```bash curl -s -X POST https://dnsrobot.net/api/bimi-checker \ -H "Content-Type: application/json" \ -d '{"domain":"cnn.com"}' ``` Response: ```json { "success": true, "domain": "cnn.com", "found": true, "rawRecord": "v=BIMI1; l=https://amplify.valimail.com/bimi/...; a=https://amplify.valimail.com/bimi/.../a.pem", "logoUrl": "https://amplify.valimail.com/bimi/.../logo.svg", "authorityUrl": "https://amplify.valimail.com/bimi/.../a.pem", "isValid": true } ``` **When to use**: Check if a domain has BIMI configured for brand logo display in email clients like Gmail. --- ### smtp_test Test SMTP connectivity, STARTTLS support, and server capabilities. | Param | Type | Required | Description | |-------|------|----------|-------------| | `hostname` | string | yes | Mail server hostname or IP | | `port` | number | no | SMTP port (default 25; use 465 for implicit TLS, 587 for submission) | ```bash curl -s -X POST https://dnsrobot.net/api/smtp-test \ -H "Content-Type: application/json" \ -d '{"hostname":"smtp.google.com","port":587}' ``` Response: ```json { "hostname": "smtp.google.com", "port": 587, "connected": true, "banner": "220 smtp.google.com ESMTP", "bannerCode": 220, "ehloCapabilities": { "starttls": true, "authMechanisms": ["LOGIN", "PLAIN", "XOAUTH2"], "sizeLimit": 35882577, "pipelining": true, "eightBitMime": true }, "starttlsSupported": true, "tlsConnected": true, "tlsProtocol": "TLSv1.3", "responseTime": 234 } ``` **When to use**: Test if a mail server is reachable, check TLS support, or verify SMTP capabilities before configuring email sending. --- ## Network & Security Tools ### ssl_check Inspect SSL/TLS certificates, cipher suites, and trust chain for any domain. | Param | Type | Required | Description | |-------|------|----------|-------------| | `domain` | string | yes | Domain name | ```bash curl -s -X POST https://dnsrobot.net/api/ssl-certificate \ -H "Content-Type: application/json" \ -d '{"domain":"github.com"}' ``` Response: ```json { "success": true, "domain": "github.com", "resolvedIP": "140.82.121.3", "serverType": "GitHub.com", "tlsInfo": { "protocol": "TLSv1.3", "cipherName": "TLS_AES_128_GCM_SHA256" }, "leafCertificate": { "issuer": "Sectigo ECC Domain Validation Secure Server CA", "notBefore": "2024-03-07", "notAfter": "2025-03-07", "daysToExpire": 120, "isValid": true, "keySize": 256, "alternativeNames": ["github.com", "www.github.com"] }, "certificateChain": [ { "commonName": "github.com", "daysToExpire": 120 }, { "commonName": "Sectigo ECC Domain Validation Secure Server CA" } ], "trustStatus": { "isTrusted": true, "hasValidChain": true, "browserCompatible": true } } ``` **When to use**: Check certificate expiration, verify TLS version and cipher strength, inspect the certificate chain, or debug SSL errors. --- ### ip_lookup Get geolocation, ISP, and ASN information for an IP address. | Param | Type | Required | Description | |-------|------|----------|-------------| | `ip` | string | yes | IPv4 or IPv6 address | ```bash curl -s -X POST https://dnsrobot.net/api/ip-info \ -H "Content-Type: application/json" \ -d '{"ip":"1.1.1.1"}' ``` Response: ```json { "query": "1.1.1.1", "hostname": "one.one.one.one", "city": "Los Angeles", "region": "California", "country": "US", "timezone": "America/Los_Angeles", "isp": "Cloudflare, Inc.", "org": "APNIC and Cloudflare DNS Resolver project", "as": "AS13335 Cloudflare, Inc.", "lat": 34.0522, "lon": -118.2437, "anycast": true } ``` **When to use**: Geolocate an IP address, identify the hosting provider or ISP, or look up ASN information. --- ### http_headers Fetch HTTP response headers and analyze security header configuration. | Param | Type | Required | Description | |-------|------|----------|-------------| | `url` | string | yes | Full URL including protocol (e.g. `https://example.com`) | ```bash curl -s -X POST https://dnsrobot.net/api/http-headers \ -H "Content-Type: application/json" \ -d '{"url":"https://github.com"}' ``` Response: ```json { "success": true, "url": "https://github.com", "statusCode": 200, "statusText": "OK", "responseTime": 185, "headers": { "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000", "x-frame-options": "deny", "content-security-policy": "default-src 'none'; ..." }, "headerCount": 24, "security": { "grade": "A", "score": 90, "checks": [ { "name": "HSTS", "present": true, "value": "max-age=31536000", "severity": "high" } ] } } ``` **When to use**: Audit security headers, check HSTS/CSP/X-Frame-Options configuration, or debug HTTP response issues. > **Important**: The `url` parameter must include the protocol (`https://` or `http://`). --- ### port_check Check if a TCP port is open on a host. Single port uses GET, multiple ports use POST (NDJSON stream). **Single port (GET):** | Param | Type | Required | Description | |-------|------|----------|-------------| | `host` | query string | yes | Hostname or IP | | `port` | query string | yes | Port number (1–65535) | ```bash curl -s "https://dnsrobot.net/api/port-check?host=github.com&port=443" ``` Response: ```json { "host": "github.com", "port": 443, "status": "open", "service": "HTTPS", "ms": 42 } ``` **Multiple ports (POST) — NDJSON stream:** | Param | Type | Required | Description | |-------|------|----------|-------------| | `host` | string | yes | Hostname or IP | | `ports` | number[] | yes | Array of ports (max 30) | ```bash curl -s -X POST https://dnsrobot.net/api/port-check \ -H "Content-Type: application/json" \ -d '{"host":"github.com","ports":[22,80,443]}' ``` Response (NDJSON): ``` {"type":"start","host":"github.com","total":3} {"type":"port","port":22,"service":"SSH","status":"open","ms":45} {"type":"port","port":80,"service":"HTTP","status":"open","ms":42} {"type":"port","port":443,"service":"HTTPS","status":"open","ms":41} {"type":"done","host":"github.com","total":3,"open":3,"closed":0} ``` **When to use**: Check if specific services are reachable, verify firewall rules, or scan common ports on a server. --- ### ip_blacklist Check if an IP is listed on any DNS blacklists (DNSBL). Returns results as an NDJSON stream. | Param | Type | Required | Description | |-------|------|----------|-------------| | `ip` | query string | yes | IPv4 address | ```bash curl -s "https://dnsrobot.net/api/ip-blacklist?ip=1.2.3.4" ``` Response (NDJSON — one JSON object per line): ``` {"type":"init","ip":"1.2.3.4","engines":[{"name":"Spamhaus ZEN","category":"spam"},{"name":"Barracuda","category":"spam"}]} {"type":"engine","result":{"engine":"Spamhaus ZEN","detected":false,"category":"spam","responseTimeMs":45}} {"type":"engine","result":{"engine":"Barracuda","detected":false,"category":"spam","responseTimeMs":52}} {"type":"abuseipdb","data":{"abuse_confidence":0,"total_reports":0,"country":"US","isp":"Example ISP"}} {"type":"complete","summary":{"detections":0,"engines_count":47,"detection_rate":"0%","reputation_score":100,"risk_level":"low"}} ``` **When to use**: Check if an IP is blacklisted for spam or abuse, assess IP reputation before sending email, or investigate suspicious IPs. > **Note**: This is a streaming endpoint (NDJSON). Parse line by line. Checks ~47 DNSBL engines in parallel. --- ## Decision Tree: Which Tool Should I Use? Use this to pick the right endpoint: - **"Look up DNS records"** → `dns_lookup` (specify record type + DNS server) - **"What are the nameservers?"** → `ns_lookup` - **"What email provider does this domain use?"** → `mx_lookup` - **"Where does this CNAME point?"** → `cname_lookup` - **"What hostname is this IP?"** → `reverse_dns` - **"What IPs does this domain resolve to?"** → `domain_to_ip` - **"Who owns this domain?"** → `whois_lookup` - **"Is this domain configured correctly?"** → `domain_health` (runs 11 checks in one call) - **"Find subdomains"** → `subdomain_finder` (streaming) - **"Check SPF/DKIM/DMARC/BIMI"** → use the specific checker - **"Is the mail server working?"** → `smtp_test` - **"Check SSL certificate"** → `ssl_check` - **"Where is this IP located?"** → `ip_lookup` - **"Check security headers"** → `http_headers` (URL must include `https://`) - **"Is this port open?"** → `port_check` - **"Is this IP blacklisted?"** → `ip_blacklist` (streaming, IPv4 only) - **"Full domain audit"** → start with `domain_health`, then drill into specific tools ## Important Notes 1. **No API key required.** All endpoints are free and public. 2. **Streaming endpoints** (`subdomain_finder`, `ip_blacklist`, `port_check` POST) return NDJSON — one JSON object per line. Parse line by line, not as a single JSON document. 3. **Error format**: All endpoints return `{"error": "message"}` with appropriate HTTP status codes (400 for validation errors, 500 for server errors). 4. **Domain auto-cleaning**: Endpoints that accept `domain` automatically strip `http://`, `https://`, `www.`, and trailing paths. You can pass `https://www.example.com/path` and it will query `example.com`. 5. **DNS server for dns_lookup**: This parameter is required. Common choices: `8.8.8.8` (Google), `1.1.1.1` (Cloudflare), `9.9.9.9` (Quad9). 6. **http_headers URL**: Must include the protocol (`https://example.com`, not just `example.com`). 7. **ip_blacklist**: IPv4 only. Does not support IPv6. 8. **port_check**: Single port = GET with query params. Multiple ports = POST with JSON body (NDJSON stream response, max 30 ports).


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: suspicious (CRITICAL)