DNS Lookup Skill

Overview

A DNS lookup API for checking a domain's records from code, the nslookup or dig step in onboarding, email and migration checks. Send a domain or hostname and DNS Lookup queries its records live and returns them as JSON, with flags for IPv6, mail servers and SPF. Every plan gets A, AAAA and MX records with priorities; paid plans add CNAME, NS, SOA and TXT records.

Live Test DNS Lookup Skill Skill →

The tool

Once your client is connected to the VerveKit server, this appears in its tool list as DNSLookupSkill. It is read-only and open-world — it fetches and never mutates anything on your side — so most clients call it without asking you to confirm.

Tool call

{
  "name": "DNSLookupSkill",
  "arguments": {
    "domain": "myspace.com"
  }
}

You do not name the tool yourself; the model picks it. Asking about myspace.com in the terms this skill covers is enough for it to reach for DNSLookupSkill on its own — naming it explicitly also works, and is the way to force the call.

Connecting

One server URL covers every skill in the catalog, including this one. Authorization is OAuth: the client opens a browser once, and there is no key to paste into a config file.

{
  "mcpServers": {
    "vervekit": {
      "url": "https://api.vervekit.com/v1/mcp"
    }
  }
}

Per-client setup — Claude, Cursor, VS Code, ChatGPT — is on the MCP setup page.

Arguments

These are the properties on the tool's inputSchema, so a well-behaved client validates them before the call is made. Premium arguments are accepted on every plan but only take effect on plans that include them.

Argument	Type	Description
`domain`Required	string	The domain or DNS name to look up, without the protocol. Underscore names work too, such as _dmarc.example.com or _sip._tcp.example.com length 0–253
`type`Optional	string	Comma-separated record types to look up. Leave it out for A, AAAA, CNAME, MX, NS, PTR, SRV, SOA, TXT and CAA. HTTPS, SVCB, TLSA, NAPTR, DS and DNSKEY are returned only when named here `AAAAACNAMEMXNSPTRSRVSOA`+8

What the model gets back

The result carries a structuredContent object matching the tool's declared outputSchema, so a client reads fields without parsing prose. status is "ok" and error is null on success; a null field means the value was not available for that input, not that the call failed.

Result

{
  "status": "ok",
  "error": null,
  "data": {
    "domain": "google.com",
    "records": {
      "A": [
        "172.253.156.100",
        "172.253.156.113",
        "172.253.156.101",
        "172.253.156.139",
        "172.253.156.138",
        "172.253.156.102"
      ],
      "AAAA": [
        "2607:f8b0:4023:100d::65",
        "2607:f8b0:4023:100d::8a",
        "2607:f8b0:4023:100d::71",
        "2607:f8b0:4023:100d::64"
      ],
      "CNAME": null,
      "MX": [
        {
          "exchange": "smtp.google.com",
          "priority": 10
        }
      ],
      "NS": [
        "ns4.google.com",
        "ns3.google.com",
        "ns2.google.com",
        "ns1.google.com"
      ],
      "PTR": null,
      "SRV": null,
      "SOA": {
        "nsname": "ns1.google.com",
        "hostmaster": "dns-admin.google.com",
        "serial": 1005474929,
        "refresh": 900,
        "retry": 900,
        "expire": 1800,
        "minttl": 60
      },
      "TXT": [
        [
          "onetrust-domain-verification=0d477fe608074e6f9c12bca7826035cc"
        ],
        [
          "work-accounts-domain-verification=Tcj6JjIMZOw2KsSEw2Nt2rLae89tN6"
        ],
        [
          "google-site-verification=wD8N7i1JTNTkezJ49swvWW48f8_9xveREV4oB-0Hf5o"
        ],
        [
          "Z29vZ2xl"
        ],
        [
          "globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8="
        ],
        [
          "arcules-domain-verification=2R4t5G7nI6tRCo61lpxxbLksPYstxhGmtV75cpr8x9K"
        ],
        [
          "v=spf1 include:_spf.google.com ~all"
        ],
        [
          "_r4rd1pvwyrpi7sw4a3hzmw8e51yh9td"
        ],
        [
          "apple-domain-verification=30afIBcvSuDV2PLX"
        ],
        [
          "onetrust-domain-verification=6d685f1d41a94696ad7ef771f68993e0"
        ],
        [
          "facebook-domain-verification=22rm551cu4k0ab0bxsw536tlds4h95"
        ],
        [
          "google-site-verification=TV9-DBe4R80X4v0M4U_bd_J9cpOJM0nikft0jAgjmsQ"
        ],
        [
          "MS=E4A68B9AB2BB9670BCE15412F62916164C0B20BB"
        ],
        [
          "docusign=05958488-4752-4ef2-95eb-aa7ba8a3bd0e"
        ],
        [
          "google-site-verification=4ibFUgB-wXLQ_S7vsXVomSTVamuOXBiVAzpR5IZ87D0"
        ],
        [
          "docusign=1b0a6754-49b1-4db5-8540-d2c12664b289"
        ],
        [
          "cisco-ci-domain-verification=47c38bc8c4b74b7233e9053220c1bbe76bcc1cd33c7acf7acd36cd6a5332004b"
        ]
      ],
      "CAA": [
        {
          "critical": 0,
          "issue": "pki.goog"
        }
      ]
    },
    "ttl": {
      "A": 10,
      "AAAA": 2,
      "CNAME": null,
      "MX": 74,
      "NS": 15382,
      "PTR": null,
      "SRV": null,
      "SOA": 25,
      "TXT": 300,
      "CAA": 21600
    },
    "summary": {
      "hasIPv6": true,
      "hasMailServers": true,
      "hasSPF": true
    }
  }
}

Response fields

Paths are relative to data. Premium fields are absent rather than zeroed on plans that do not include them, so check for presence instead of comparing to 0.

Field	Type	Example	Description
`domain`	string	`google.com`	The domain name that was queried
`records`	object	`{…}`	Object containing all DNS records for the domain
`records.A`	array	`["172.253.156.100","172.253.156.113","172.253.156.101"]`	IPv4 address records for the domain
`records.AAAA`	array	`["2607:f8b0:4023:100d::65","2607:f8b0:4023:100d::8a","2607:f8b0:4023:100d::71"]`	IPv6 address records for the domain
`records.CNAME`Premium	object	`null`	Canonical name alias records
`records.MX`	array[1]		Mail exchange server records with priority
`records.MX.0.exchange`	string	`smtp.google.com`	Mail server hostname
`records.MX.0.priority`	number	`10`	Priority level for the mail server
`records.NS`Premium	array	`["ns4.google.com","ns3.google.com","ns2.google.com"]`	Nameserver records for the domain
`records.PTR`	object	`null`	Pointer records published at this name
`records.SRV`	object	`null`	Service records, published at names such as _sip._tcp.example.com
`records.SOA`Premium	object	`{…}`	Start of Authority record with DNS zone info
`records.SOA.nsname`Premium	string	`ns1.google.com`	Primary nameserver hostname
`records.SOA.hostmaster`Premium	string	`dns-admin.google.com`	Email address of domain administrator
`records.SOA.serial`Premium	number	`1005474929`	Serial number for zone version tracking
`records.SOA.refresh`Premium	number	`900`	Secondary server refresh interval in seconds
`records.SOA.retry`Premium	number	`900`	Retry interval for failed transfers
`records.SOA.expire`Premium	number	`1800`	Zone expiration time in seconds
`records.SOA.minttl`Premium	number	`60`	Minimum time to live for records
`records.TXT`Premium	array	`list of lists`	Text records including SPF, DKIM, verification data
`records.CAA`	array[1]		Certificate Authority Authorization records: which CAs may issue certificates. Each entry has critical plus its tag (issue, issuewild or iodef) as the key
`records.CAA.0.critical`	number	`0`
`records.CAA.0.issue`	string	`pki.goog`
`ttl`Premium	object	`{…}`	Seconds each record type stays cached, keyed by type (lowest in the set), as a public resolver serves it: it counts down from the zone's configured TTL while cached. null for a type with no records
`ttl.A`Premium	number	`10`
`ttl.AAAA`Premium	number	`2`
`ttl.CNAME`Premium	object	`null`
`ttl.MX`Premium	number	`74`
`ttl.NS`Premium	number	`15382`
`ttl.PTR`Premium	object	`null`
`ttl.SRV`Premium	object	`null`
`ttl.SOA`Premium	number	`25`
`ttl.TXT`Premium	number	`300`
`ttl.CAA`Premium	number	`21600`
`summary`	object	`{…}`	At-a-glance flags derived from the records above
`summary.hasIPv6`	boolean	`true`	Whether the domain publishes any AAAA (IPv6) records — indicates dual-stack readiness
`summary.hasMailServers`	boolean	`true`	Whether the domain publishes any MX records — indicates it is configured to receive email
`summary.hasSPF`Premium	boolean	`true`	Whether a TXT record starting with v=spf1 is present — a coarse email-authentication posture flag (use the SPF Validator to parse it)

Failure modes

Errors come back as tool errors carrying a sentence the model can act on, not a bare status code. Error handling covers the full list.

Status	What it means
`400` / `422`	The arguments did not validate. The message names the offending one.
`401`	The OAuth session is invalid or expired — reconnect the server.
`403`	Blocked by a key restriction or an IP allow-list. Never a bad identity.
`404`	This skill is not part of VerveKit. Check the catalog.
`429`	Out of credits, or a brief rate limit. The message tells them apart.

A call costs 6 credits each time the tool actually runs; a model that reasons about the tool without calling it costs nothing.

Use cases

Mail Delivery Verification: To verify email destination readiness, onboarding systems query incoming domain MX records and priority values before routing outbound messages.
Dual-Stack Infrastructure Auditing: DevOps engineers inspect IPv4 and IPv6 addresses across client domains to confirm dual-stack network reachability and detect missing AAAA entries.
Domain Migration Monitoring: When moving web infrastructure to new hosts, deployment pipelines check resolving A and MX records in real time to verify DNS propagation.
Custom Domain Onboarding: Hosting platforms query target domains during customer onboarding to verify that resolved IP addresses point to designated web servers.

Other ways to use DNS Lookup Skill

Set up DNS Lookup Skill on VerveKit, or reach the same source a different way. Your VerveKit account and credits work on all of them — one key, one balance.

Call it as a REST APIOne HTTPS endpoint and an x-api-key header, with SDKs for Node, Python and .NET.APIVerve →Reference →

Google Sheets or ExcelA =VERVE() formula fills a column — no script, no export, recalculates in place.VerveSheets →Reference →

Ground an agent on itA cited, machine-checkable fact your model can't produce on its own.VerveContext →Reference →