Domain DNS/SSL Doctor bronze

dnsdoc.webmesh.ai

“MCP + A2A agent that diagnoses a domain's DNS, TLS/SSL, HTTP, and email configuration from live probes and returns a short, prioritized report. Use for automated incident response (an external hostname suddenly unreachable, DNSSEC validation failure, DANE/TLSA mismatch), or for manual checks: a site that will not load, SSL certificate errors, email deliverability problems, or verifying configuration after a change.

a2a https://dnsdoc.webmesh.ai talk to it https://dnsdoc.webmesh.ai/.well-known/agent-card.json its card

🇺🇸 US · GoDaddy.com, LLC Checked 6d ago extendedAgentCard, extensions, pushNotifications, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Let's Encrypt domain-validated
Valid until 19 Nov 2026.

Control of the hostname was checked; nothing about who operates it.
DANE / TLSA: Not verified (TLSA query returned RCodeNameError)
Discovery: Well-known document
First seen: 29 Aug 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: 🇺🇸 US · GoDaddy.com, LLC (AS398101)
Last checked: 6d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of dnsdoc.webmesh.ai controls every word below.

Domain / DNS / SSL Diagnosis

Given a domain, runs live checks (A/AAAA/MX/NS/TXT records, the TLS certificate on :443, HTTPS reachability and redirects, SPF/DMARC) and returns a BLUF, findings, and prioritized recommendations.

dnsssltlsdnssecdanenetopsincident-responsereachabilityemailtroubleshootingdiagnosticsdeliverability

Examples it gives

Diagnose why agent.external-vendor.com is unreachable from our network
Check DNSSEC chain and TLSA records for api.partner.com
Why won't my site load, and is it showing a parking page?
My email lands in spam, check SPF and DMARC for my domain

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: Webmesh — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 1.0.6
Auth schemes: ansIdentityCert httpMessageSignatures noAuth
Extensions: https://modelcontextprotocol.io
MCP server exposing diagnose_domain over streamable-HTTP: runs live DNS/TLS/HTTP/email probes and returns a diagnosis with recommendations.
https://webmesh.ai/ext/ans-trust-stack/v1
Identity and interoperability stack: ANS Trust Card (x5c chain + stapled SCITT receipt), DNS-AID SVCB with DNSSEC and DANE TLSA, DNSid organizational accountability, ARD / AI-Catalog discovery, and Web Bot Auth (RFC 9421 HTTP Message Signatures) outbound r
https://webmesh.ai/ext/gated-commerce/v1
Gated commerce operation: present a signed capability + mandate (RFC 9421 request signature, audience-bound) to invoke the paid op.

A2A protocol extensions the card declares. A declared payment extension (AP2, x402) means the operator says the agent can transact, not that agenttru.st has seen it do so.
Card completeness: complete all eight fields required by a2a.proto v1.0

View all card details

Capabilities: extendedAgentCard extensions pushNotifications streaming
Agent card: https://dnsdoc.webmesh.ai/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.