Cuiar
Sign inDownload

Audit your DNS records in Cloudflare

Records that point to removed services, origins with no proxy and weak mail settings, with a fix for each.

  • You start it: When you start it
Use in CuiarRun from your AI agent

What it does

The task

Open the DNS records of the zone domain in my Cloudflare dashboard. For each CNAME and A record, open the target and check that it answers and does not show a 'not found' page of a hosting service, which would let others take over the subdomain. List the records that show the origin IP address because the proxy is off. Check the SPF, DKIM and DMARC records. Write a table with the record, the problem, the risk and the fix. Do not edit or delete any record.

  • It works in Cloudflare, in the workspace you pick, and signs in with passwords from your Cuiar vault.
  • It runs once, when you start it.

What you give it

BlankWhat to giveExample
domainThe domain to checkbrightleaf.app

What you get back

An example run with the example values above. Your run uses your own data.

brightleaf.app: 46 records, 5 problems

RecordProblemRiskFix
old-docs CNAME brightleaf-docs.netlify.appNetlify shows "Not found"High: subdomain takeoverDelete the record
assets CNAME assets.cdn-host.example"Bucket not found"High: subdomain takeoverDelete the record or create the bucket
api A 203.0.113.24Proxy off, origin IP visibleMediumTurn on the proxy or allow only Cloudflare IPs
_dmarc TXT p=noneNo enforcementMediumMove to p=quarantine after you read the reports
staging A 198.51.100.7Proxy off, no access ruleMediumAdd an access rule

Run it in Cuiar

  1. 01

    Open it

    Click Use in Cuiar on this page. The side panel opens with the task in the composer.

  2. 02

    Fill in the blank

    Type domain. Tab moves to the next blank.

  3. 03

    Run it

    Run sends it to the agent. Follow each step in the panel, and stop it at any time.

From the terminal

cuiar exec "Open the DNS records of the zone brightleaf.app in my Cloudflare dashboard. For each CNAME and A record, open the target and check that it answers and does not show a 'not found' page of a hosting service, which would let others take over the subdomain. List the records that show the origin IP address because the proxy is off. Check the SPF, DKIM and DMARC records. Write a table with the record, the problem, the risk and the fix. Do not edit or delete any record."

Run it from your AI agent

Claude Code, Codex, Cursor and other MCP clients reach Cuiar at https://mcp.cuiar.com/mcp. Add the server one time, then ask for the task in plain words, or call run_task yourself.

1. Add Cuiar to Claude Code

claude mcp add --transport http cuiar https://mcp.cuiar.com/mcp

2. Ask your agent

Use the Cuiar tool run_task to run my "Audit your DNS records in Cloudflare" template with domain = brightleaf.app.

Setup for other agents: AI agents.

The tool call

{
  "name": "run_task",
  "arguments": {
    "task": "Open the DNS records of the zone brightleaf.app in my Cloudflare dashboard. For each CNAME and A record, open the target and check that it answers and does not show a 'not found' page of a hosting service, which would let others take over the subdomain. List the records that show the origin IP address because the proxy is off. Check the SPF, DKIM and DMARC records. Write a table with the record, the problem, the risk and the fix. Do not edit or delete any record."
  }
}

Related templates

All engineering templates