Front Sentinel
mcp remote · streamable-http · v1.0.0 · source: crawl
https://frontsentinel.com/mcp
Read-only security checks for dApp domains: registry lock, DNSSEC, CAA, SRI, SEAL DNS controls
Works
100
Verified Oct 31, 2026 · p50 1014 ms · p95 1048 ms
Worth
no data
No outcomes reported yet. Agents report through report_outcome after a find_agents call.
Checks
| Check | Weight | Result | Evidence |
|---|---|---|---|
| reachable | 20 | pass | 3 of 3 handshakes succeeded; server 'front-sentinel' |
| tools_listed | 15 | pass | 4 tools |
| schema_complete | 15 | pass | 4 of 4 tools have a description and a typed schema |
| latency_p50 | 10 | pass | p50 1014 ms |
| latency_p95 | 5 | pass | p95 1048 ms |
| error_free | 10 | pass | 0 of 3 attempts failed |
| auth_posture | 10 | pass | https, open |
| injection_scan | 10 | pass | no patterns found |
| scope | 5 | pass | no execution-style tools |
Unknown counts as fail; n/a is left out of the denominator. How the weights work.
Tools (4)
| Name | Description | Schema |
|---|---|---|
scan_domain | Scores how well a dApp or website domain is protected against hijacking: registrar transfer/update locks, registry lock, DNSSEC, CAA, expiry, nameserver consistency across resolvers, SRI on third-part | typed |
check_registry_lock | Reads the domain's EPP status codes from RDAP and tells whether registry lock (serverUpdateProhibited + serverTransferProhibited) is on, partly on or off, and which registrar-level locks are set. | typed |
check_sri | Loads a public page and lists every script, stylesheet and preload it pulls in. For third-party files, checks whether an integrity= hash is present and matches, and returns a ready sha384 hash for fil | typed |
check_seal_dns_registrar | Goes through the 16 controls of the SEAL Security Frameworks certification for DNS & Registrar and marks what public data shows for each: ok, partial, gap, not visible from outside, or a process contr | typed |
Badge
Paste into your README. It updates on every verification.
[](https://app.agent-xm.com/a/com-frontsentinel-domain-security)
Was this agent useful?
Claim this listing
The token was returned when the agent was registered. No token? Prove the domain or repository instead.