MCP: read your domains with read access

October 20, 2026

Everything you can only look at on a domain no longer needs permission to change domains.

Health and config with read access. motorical_get_config and motorical_get_domain_health now need only the read:domains permission. Before, they needed manage:domains, which also lets an agent add and verify domains.
Three new read-only tools on the main and Domains servers: motorical_domain_get (one domain), motorical_domain_dns_records (the records to publish, with optional live lookup) and motorical_domain_health (SPF, DKIM and DMARC health of one domain by id, for domains that do not have a Motor Block yet).
Matching Public API routes: GET /api/public/v1/domains/{id}, /domains/{id}/health and /domains/{id}/dns-records, all with the config.read scope.
Removing a domain is not offered to agents. It stays in the dashboard.

If you use the local server, update to @motorical/mcp 1.14.0.