# ABR NetTools

> Network & security diagnostics suite by ABR (an independent studio in Saarbrücken, Germany): 80+ single-purpose network and security tools behind one fast interface, with plain-language verdicts instead of raw output — plus what each result means and how to fix it. Runs as a web app, a native macOS app, and a Flipper Zero companion.

ABR NetTools checks and monitors domains, email deliverability (SPF/DKIM/DMARC/MX), TLS certificates, DNS, web-security headers, and network reachability. Networked checks run through a hardened cloud relay; offline utilities run on-device. Every networked tool is also callable by agents over MCP.

## Use it
- Web app: https://nettools.abr.cloud
- Free domain health check (no account — just a CAPTCHA): https://abr.cloud/check.html
- Pricing — Free · Pro EUR 3.99/mo · AI Premium EUR 7.99/mo · MSP EUR 29/mo · MSP+ EUR 49/mo: https://abr.cloud/#pricing (compare: https://abr.cloud/compare.html)
- Full tool catalogue: https://nettools.abr.cloud/llms-full.txt

## For agents — remote MCP
Connect over SSE and call a tool with a single `target` (domain, host, or IP):
- Endpoint: https://mcp.abr.cloud/mcp/sse
- Callable tools: dns, rdns, dnsprop, whois, spf, dmarc, mx, caa, dnssec, ttl, mtasts, tlsrpt, bimi, doh, domainhealth, http, redirects, csp, certview, certexpiry, selfsigned, tlscheck, tlsconf, ciphertest, certpin, ipgeo, asn, tor, ping, traceroute, zonetransfer, nsecwalk, snmpwalk, smtpbanner, catchall
- `domainhealth` returns a full graded snapshot (SSL, HTTPS redirect, SPF, DMARC, DNSSEC, MX, blacklist) in one call — a good default for "is this domain healthy?".

## Always-on monitoring (included on every plan)
Cloud-side monitors checked from the relay, no credentials stored. Kinds: HTTP(S) uptime, TCP port, TLS expiry, and `domainhealth` (the 7-check posture composite as a scheduled monitor — alerts the moment SPF/DMARC/MX/TLS/DNSSEC/blacklist posture breaks). All plans include spike-proof email alerts (re-checked before alerting), the Fleet Health single pane with per-check acknowledge, a public status page (host groups, optional 4-char PIN), and weekly/monthly email digests.
- Free: 1 monitor, every 5 min, 30-day history
- Pro (EUR 3.99/mo): 10 monitors, every 5 min, 90-day history
- AI Premium (EUR 7.99/mo): 25 monitors, every 1 min, 365-day history + server host-metrics agents (CPU/RAM/disk on Linux/macOS/Windows) + AI digest summaries
- MSP (EUR 29/mo) / MSP+ (EUR 49/mo): 100/250 monitors at 1-min intervals, 5/15 client workspaces with WHITE-LABEL status pages on the agency's own domain + client-ready PDF reports — flat price, no per-technician seats: https://my.abr.cloud/pricing.html

## What good looks like
- Email deliverability: SPF ends in `-all`/`~all`; DMARC at `p=quarantine` or `p=reject` with a `rua` report address; MX reachable and aligned. Tools: `spf`, `dmarc`, `mx`, `domainhealth`.
- TLS: a valid, unexpired certificate, TLS 1.2/1.3 only, HSTS enabled. Tools: `certexpiry`, `tlscheck`, `certview`.
- DNS: DNSSEC validating (AD bit set), sane TTLs. Tools: `dnssec`, `dns`, `ttl`.