Stackhal

Official13 tools

by bahdanhal · PHP

Outside-in DNS, email security, SEO, GEO and app-link checks plus developer utilities.

io.github.bahdanhal/stackhal — MCP Server

The io.github.bahdanhal/stackhal MCP server provides outside-in DNS checks, email security evaluation, SEO and GEO checks, and app-link verification, alongside developer utilities. It is identified by the slug io-github-bahdanhal-stackhal and is described as offering these combined validation and utility capabilities.

🛠️ Key Features

Outside-in DNS checks
Email security
SEO checks
GEO checks
App-link checks
Developer utilities

🚀 Use Cases

Validate DNS exposure and related outside-in behavior
Assess email security posture
Check SEO and GEO-related items
Verify app links during review or release workflows
Use included developer utilities to support verification tasks

⚡ Developer Benefits

Centralized tooling for DNS, email security, SEO/GEO, and app-link checks
Combined validation and developer utility functions in one server

Captured live from the server via tools/list.

validate_app_links

Inspect and validate Apple App Site Association (apple-app-site-association) and Android Digital Asset Links (assetlinks.json) files, HTTPS hosting rules, and test URL path routing, and compare the origin AASA with the copy on Apple's CDN.

Parameters2

domain	string	required	The target domain name (e.g. "example.com") hosting universal link and asset link files.
test_url	null \| string	optional	Optional web URL path to test against Apple AASA components and exclusion routing patterns.

Raw schema

{
  "type": "object",
  "properties": {
    "domain": {
      "type": "string",
      "description": "The target domain name (e.g. \"example.com\") hosting universal link and asset link files."
    },
    "test_url": {
      "type": [
        "null",
        "string"
      ],
      "default": null,
      "description": "Optional web URL path to test against Apple AASA components and exclusion routing patterns."
    }
  },
  "required": [
    "domain"
  ]
}

audit_website_seo

Run a deterministic technical SEO audit for a public website URL. Checks canonicals, title tags, headings, robots.txt, sitemaps, redirects, crawl traps, and indexability.

Parameters1

url

string

required

The public website URL to audit (e.g. https://example.com).

Raw schema

{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "The public website URL to audit (e.g. https://example.com)."
    }
  },
  "required": [
    "url"
  ]
}

transpile_to_caddyfile

Transpile Nginx (nginx.conf, server blocks) or Apache (.htaccess, VirtualHost) web server configuration to clean, idiomatic Caddyfile with migration advisories.

Parameters2

config_content	string	required	The raw web server configuration string (nginx.conf, server block, .htaccess, or VirtualHost) to transpile.
server_type	null \| string	optional	Optional source server type: "nginx" or "apache". If omitted, auto-detected from content syntax.

Raw schema

{
  "type": "object",
  "properties": {
    "config_content": {
      "type": "string",
      "description": "The raw web server configuration string (nginx.conf, server block, .htaccess, or VirtualHost) to transpile."
    },
    "server_type": {
      "type": [
        "null",
        "string"
      ],
      "default": null,
      "description": "Optional source server type: \"nginx\" or \"apache\". If omitted, auto-detected from content syntax."
    }
  },
  "required": [
    "config_content"
  ]
}

calculate_cidr_overlap

Analyze IPv4/IPv6 CIDR subnets for range collisions, full containment, 2D bit-tree matrix partition, and available free subnet allocation.

Parameters3

cidrs	array	required	Array of IPv4 or IPv6 CIDR strings to analyze for collisions and tree partition.
requested_free_prefix	null \| integer	optional	Optional target prefix length (e.g. 20, 24) to find available free subnet block inside parent range.
parent_cidr	null \| string	optional	Optional parent CIDR string (e.g. 10.0.0.0/16) to constrain free subnet allocation search.

Raw schema

{
  "type": "object",
  "properties": {
    "cidrs": {
      "type": "array",
      "items": {
        "type": "object"
      },
      "description": "Array of IPv4 or IPv6 CIDR strings to analyze for collisions and tree partition."
    },
    "requested_free_prefix": {
      "type": [
        "null",
        "integer"
      ],
      "default": null,
      "description": "Optional target prefix length (e.g. 20, 24) to find available free subnet block inside parent range."
    },
    "parent_cidr": {
      "type": [
        "null",
        "string"
      ],
      "default": null,
      "description": "Optional parent CIDR string (e.g. 10.0.0.0/16) to constrain free subnet allocation search."
    }
  },
  "required": [
    "cidrs"
  ]
}

diagnose_cors_policy

Analyze CORS HTTP request and response headers for wildcard/credential security violations, missing Vary: Origin, preflight OPTIONS handling, and header exposure.

Parameters3

request_origin	string	required	The incoming HTTP request Origin header (e.g. "https://app.example.com").
response_headers	array	required	The server HTTP response headers (as key-value map or list of "Header: Value" strings).
with_credentials	null \| boolean	optional	Whether the cross-origin request includes cookies or authorization credentials.

Raw schema

{
  "type": "object",
  "properties": {
    "request_origin": {
      "type": "string",
      "description": "The incoming HTTP request Origin header (e.g. \"https://app.example.com\")."
    },
    "response_headers": {
      "type": "array",
      "description": "The server HTTP response headers (as key-value map or list of \"Header: Value\" strings).",
      "items": {}
    },
    "with_credentials": {
      "type": [
        "null",
        "boolean"
      ],
      "default": false,
      "description": "Whether the cross-origin request includes cookies or authorization credentials."
    }
  },
  "required": [
    "request_origin",
    "response_headers"
  ]
}

trace_dns_delegation

Query live DNS records and inspect the authoritative nameservers returned for a domain.

Parameters2

domain	string	required	The target domain name (e.g. "example.com") to query using the application host resolver.
query_type	null \| string	optional	Optional DNS record type: "A" (default), "AAAA", "CNAME", "TXT", "MX", "NS", "SOA", or "CAA".

Raw schema

{
  "type": "object",
  "properties": {
    "domain": {
      "type": "string",
      "description": "The target domain name (e.g. \"example.com\") to query using the application host resolver."
    },
    "query_type": {
      "type": [
        "null",
        "string"
      ],
      "default": "A",
      "description": "Optional DNS record type: \"A\" (default), \"AAAA\", \"CNAME\", \"TXT\", \"MX\", \"NS\", \"SOA\", or \"CAA\"."
    }
  },
  "required": [
    "domain"
  ]
}

inspect_domain_security

Inspect domain email security and deliverability standards: DMARC (BIMI compliance), BIMI DNS & SVG reachability, MTA-STS (RFC 8461), SMTP TLS-RPT (RFC 8460), SPF and MX records.

Parameters1

domain

string

required

The domain name to inspect (e.g. stripe.com, example.com).

Raw schema

{
  "type": "object",
  "properties": {
    "domain": {
      "type": "string",
      "description": "The domain name to inspect (e.g. stripe.com, example.com)."
    }
  },
  "required": [
    "domain"
  ]
}

generate_favicon_suite

Generate modern multi-platform favicon bundle (adaptive dark-mode SVG, multi-resolution ICO, Apple Touch Icon, Android PWA icons, webmanifest) and minimal HTML tags from SVG or image input.

Parameters2

svg_content	string	required	The raw SVG XML markup string to convert into modern multi-platform favicon suite.
dark_mode_strategy	null \| string	optional	Optional dark mode strategy: "css_invert_fill" (default), "css_class_swap", or "preserve_colors".

Raw schema

{
  "type": "object",
  "properties": {
    "svg_content": {
      "type": "string",
      "description": "The raw SVG XML markup string to convert into modern multi-platform favicon suite."
    },
    "dark_mode_strategy": {
      "type": [
        "null",
        "string"
      ],
      "default": "css_invert_fill",
      "description": "Optional dark mode strategy: \"css_invert_fill\" (default), \"css_class_swap\", or \"preserve_colors\"."
    }
  },
  "required": [
    "svg_content"
  ]
}

analyze_geo_readiness

Analyze Generative Engine Optimization (GEO) signals and AI crawler readiness for a web page (schema, citations, provenance, answer structure, llms.txt, AI bot robots rules).

Parameters1

url

string

required

The web page URL to analyze for GEO readiness.

Raw schema

{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "The web page URL to analyze for GEO readiness."
    }
  },
  "required": [
    "url"
  ]
}

inspect_apple_pkpass

Inspect and validate Apple Wallet .pkpass JSON structure (pass.json) or package manifests: checks required keys, pass styles, dates, ISO 8601 timezones, transit types, barcodes, and color contrast.

Parameters1

pass_json

string

required

The raw pass.json JSON string to inspect and validate.

Raw schema

{
  "type": "object",
  "properties": {
    "pass_json": {
      "type": "string",
      "description": "The raw pass.json JSON string to inspect and validate."
    }
  },
  "required": [
    "pass_json"
  ]
}

generate_apple_pkpass_spec

Generate a production-ready, fully compliant Apple Wallet pass.json specification based on pass type, metadata, colors, barcode, and field values.

Parameters12

pass_type	string	required	Pass style type: "boardingPass", "eventTicket", "storeCard", "coupon", or "generic".
organization_name	string	required	Name of the pass issuing organization, e.g. "Acme Airlines".
description	string	required	Human-readable description of the pass, e.g. "Flight from SFO to WAW".
pass_type_identifier	null \| string	optional	Apple Pass Type Identifier starting with "pass.", e.g. "pass.com.example.ticket".
team_identifier	null \| string	optional	Apple Developer 10-character Team ID, e.g. "BAHDAN9988".
serial_number	null \| string	optional	Unique pass serial number, e.g. "LOT-89421".
background_color	null \| string	optional	Background color as CSS rgb(r, g, b), e.g. "rgb(15, 23, 42)".
foreground_color	null \| string	optional	Foreground text color as CSS rgb(r, g, b), e.g. "rgb(255, 255, 255)".
label_color	null \| string	optional	Label text color as CSS rgb(r, g, b), e.g. "rgb(148, 163, 184)".
barcode_message	null \| string	optional	Barcode message payload, e.g. "M1HAL/BAHDAN ELO027".
barcode_format	null \| string	optional	Barcode format: "PKBarcodeFormatQR", "PKBarcodeFormatPDF417", "PKBarcodeFormatAztec", "PKBarcodeFormatCode128".
transit_type	null \| string	optional	Transit type for boardingPass: "PKTransitTypeAir", "PKTransitTypeTrain", "PKTransitTypeBus", "PKTransitTypeBoat", "PKTransitTypeGeneric".

Raw schema

{
  "type": "object",
  "properties": {
    "pass_type": {
      "type": "string",
      "description": "Pass style type: \"boardingPass\", \"eventTicket\", \"storeCard\", \"coupon\", or \"generic\"."
    },
    "organization_name": {
      "type": "string",
      "description": "Name of the pass issuing organization, e.g. \"Acme Airlines\"."
    },
    "description": {
      "type": "string",
      "description": "Human-readable description of the pass, e.g. \"Flight from SFO to WAW\"."
    },
    "pass_type_identifier": {
      "type": [
        "null",
        "string"
      ],
      "default": null,
      "description": "Apple Pass Type Identifier starting with \"pass.\", e.g. \"pass.com.example.ticket\"."
    },
    "team_identifier": {
      "type": [
        "null",
        "string"
      ],
      "default": null,
      "description": "Apple Developer 10-character Team ID, e.g. \"BAHDAN9988\"."
    },
    "serial_number": {
      "type": [
        "null",
        "string"
      ],
      "default": null,
      "description": "Unique pass serial number, e.g. \"LOT-89421\"."
    },
    "background_color": {
      "type": [
        "null",
        "string"
      ],
      "default": null,
      "description": "Background color as CSS rgb(r, g, b), e.g. \"rgb(15, 23, 42)\"."
    },
    "foreground_color": {
      "type": [
        "null",
        "string"
      ],
      "default": null,
      "description": "Foreground text color as CSS rgb(r, g, b), e.g. \"rgb(255, 255, 255)\"."
    },
    "label_color": {
      "type": [
        "null",
        "string"
      ],
      "default": null,
      "description": "Label text color as CSS rgb(r, g, b), e.g. \"rgb(148, 163, 184)\"."
    },
    "barcode_message": {
      "type": [
        "null",
        "string"
      ],
      "default": null,
      "description": "Barcode message payload, e.g. \"M1HAL/BAHDAN ELO027\"."
    },
    "barcode_format": {
      "type": [
        "null",
        "string"
      ],
      "default": null,
      "description": "Barcode format: \"PKBarcodeFormatQR\", \"PKBarcodeFormatPDF417\", \"PKBarcodeFormatAztec\", \"PKBarcodeFormatCode128\"."
    },
    "transit_type": {
      "type": [
        "null",
        "string"
      ],
      "default": null,
      "description": "Transit type for boardingPass: \"PKTransitTypeAir\", \"PKTransitTypeTrain\", \"PKTransitTypeBus\", \"PKTransitTypeBoat\", \"PKTransitTypeGeneric\"."
    }
  },
  "required": [
    "pass_type",
    "organization_name",
    "description"
  ]
}

repair_apple_pkpass_spec

Automatically repair and sanitize broken Apple Wallet pass.json manifests: fixes missing formatVersion, prefixes passTypeIdentifier, ensures 10-character team ID, normalizes dates to ISO 8601 with timezones, and auto-corrects low contrast.

Parameters1

pass_json

string

required

The raw, broken pass.json JSON string to repair.

Raw schema

{
  "type": "object",
  "properties": {
    "pass_json": {
      "type": "string",
      "description": "The raw, broken pass.json JSON string to repair."
    }
  },
  "required": [
    "pass_json"
  ]
}

transpile_regex_engine

Transpile and analyze regular expressions across engines (PCRE, Go RE2, JavaScript, Python re, Rust regex) with compatibility checks and ReDoS safety analysis.

Parameters3

pattern	string	required	The regular expression pattern string to analyze and transpile.
source_engine	null \| string	optional	Optional source engine: "pcre" (default), "go_re2", "javascript", "python", "rust".
target_engine	null \| string	optional	Optional target engine: "go_re2" (default), "pcre", "javascript", "python", "rust".

Raw schema

{
  "type": "object",
  "properties": {
    "pattern": {
      "type": "string",
      "description": "The regular expression pattern string to analyze and transpile."
    },
    "source_engine": {
      "type": [
        "null",
        "string"
      ],
      "default": "pcre",
      "description": "Optional source engine: \"pcre\" (default), \"go_re2\", \"javascript\", \"python\", \"rust\"."
    },
    "target_engine": {
      "type": [
        "null",
        "string"
      ],
      "default": "go_re2",
      "description": "Optional target engine: \"go_re2\" (default), \"pcre\", \"javascript\", \"python\", \"rust\"."
    }
  },
  "required": [
    "pattern"
  ]
}

README.md3 KBView on GitHub

Stackhal (`stackhal`)

Live website: Stackhal - free online developer, DevOps, and infrastructure tools

Fast, privacy-focused tools for developers, infrastructure engineers, and technical SEO work, with no tracking or account required.

Shared Packagist packages: bahdan/symfony-safe-http-client · bahdan/symfony-privacy-analytics-bundle · bahdan/lead-capture-bundle

1. Included Tools & Canonical Routes

/caddy-transpiler: Real-time Nginx server blocks and Apache .htaccess to modern Caddyfile converter.
/apple-pkpass-inspector: Apple Wallet (.pkpass) archive parser, SHA-1 manifest integrity checker, PKCS#7 certificate inspector, and Google Wallet converter.
/cidr-subnet-matrix: Visual IPv4/IPv6 CIDR overlap calculator, collision detector, and 2D binary tree matrix.
/regex-transpiler: Regex dialect transpiler across PCRE, Go RE2, JavaScript, Python and Rust with linear ReDoS protection.
/favicon-suite: Modern favicon kitchen, dark-mode SVG generator, multi-resolution ICO, Apple Touch Icon, and PWA manifest suite.
/dns-dag-tracer: Visual hierarchical DNS delegation chain tracer (Root -> TLD -> Authoritative -> Edge Anycast) with DNSSEC validation.
/seo-audit: Technical SEO crawler, canonical auditor, redirect loop detector, and crawl trap identifier with SSRF protection.
/geo-audit: Generative Engine Optimization (GEO) readiness analyzer (13 deterministic criteria for AI search engines like Perplexity, ChatGPT, Gemini).
/domain-inspector: Domain email security analyzer for DMARC, BIMI, MTA-STS, TLS-RPT, SPF, and MX records.
/bimi-studio: BIMI SVG Tiny 1.2 PS studio, sanitizer, and live avatar mailbox preview (Gmail, Apple Mail, Yahoo).
POST /mcp: High-performance Model Context Protocol endpoint exposing all tool operations to AI agents.

2. Verification

bash

docker build --target test -t bahdan-landing-test .
docker run --rm --env-file .env.example -e APP_ENV=test bahdan-landing-test vendor/bin/phpunit --fail-on-phpunit-notice
docker run --rm -v "$PWD:/app" -w /app node:24-alpine sh -lc 'for test in tests/js/*.test.js; do node "$test" || exit 1; done'
docker run --rm bahdan-landing-test vendor/bin/phpstan analyse --no-progress --memory-limit=512M
docker run --rm bahdan-landing-test vendor/bin/phpcs

Install

Tools (13)

validate_app_linksaudit_website_seotranspile_to_caddyfilecalculate_cidr_overlapdiagnose_cors_policytrace_dns_delegationinspect_domain_securitygenerate_favicon_suite

Remote endpoint

Streamable HTTP

Hosted server - connect over the network, no local install.

url

https://stackhal.com/mcp

Add to VS Code Add to Cursor

claude_desktop_config.json

json

{
  "mcpServers": {
    "stackhal": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://stackhal.com/mcp"
      ]
    }
  }
}

Desktop config is stdio-only; this bridges via mcp-remote. Native remote: Settings > Connectors.

io.github.bahdanhal/stackhal — MCP Server

🛠️ Key Features

🚀 Use Cases

⚡ Developer Benefits

validate_app_links

audit_website_seo

transpile_to_caddyfile

calculate_cidr_overlap

diagnose_cors_policy

trace_dns_delegation

inspect_domain_security

generate_favicon_suite

analyze_geo_readiness

inspect_apple_pkpass

generate_apple_pkpass_spec

repair_apple_pkpass_spec

transpile_regex_engine

Stackhal (stackhal)

1. Included Tools & Canonical Routes

2. Verification

Install

Remote endpoint

Related servers

Stackhal (`stackhal`)