# Domain Health

> Domain Health Agent checks a domain against published standards and returns a
> scored report — a 0–100 score, a letter grade, findings, and recommendations.
> The first check: security.txt (RFC 9116), verified down to its OpenPGP
> cleartext signature. Checks are plugins over one report shape; new checks join
> the same report. Use it on the web or over MCP.

Two ways in:

- Web: https://www.domainhealth.ai/ — enter a domain, read the graded report.
- MCP: add https://mcp.domainhealth.ai/mcp as a connector (Streamable HTTP,
  stateless). Three tools:
  - check_domain_health(domain, checks?) — run the checks; returns the full
    report: overall 0–100 score and letter grade, plus one outcome per check
    with status (ok / warn / fail / error), score, grade, findings, and
    recommendations.
  - check_security_txt(domain) — the security.txt (RFC 9116) check alone;
    returns that single check's outcome.
  - submit_feedback(kind, summary, detail?, context?) — report a wrong or
    missing result; kind is one of feedback, feature-request, bug, praise.

Pass domains as bare names — no scheme, path, or port (example.com, not
https://example.com/).

## Endpoints

- [Landing page](https://www.domainhealth.ai/): what it checks, how to use it,
  and a specimen report.
- [MCP server](https://mcp.domainhealth.ai/mcp): the tool surface above.
- [security.txt](https://www.domainhealth.ai/.well-known/security.txt): this
  site's own RFC 9116 file — we run our own check.