Check if a domain can be email-spoofed: SPF, DMARC, DKIM, MX graded from public DNS. Authless.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Checks whether a domain can be email-spoofed, using public DNS only. Verifies SPF (including the RFC 7208 multiple-record permerror), DMARC policy and reporting, MX, and DKIM at common selectors. Returns a graded report with concrete fixes. Accepts a bare domain, a URL, or an email address. Nothing is sent to the domain.
Domain, URL, or email address, e.g. example.com
This tool isn't marked read-only, so it may change something on the server or in an account you connected.
Checks whether a domain can be email-spoofed, using public DNS only. Verifies SPF (including the RFC 7208 multiple-record permerror), DMARC policy and reporting, MX, and DKIM at common selectors. Returns a graded report with concrete fixes. Accepts a bare domain, a URL, or an email address. Nothing is sent to the domain.
| Argument | Type | Description |
|---|---|---|
| domain* | string |
| Domain, URL, or email address, e.g. example.com |
{
"type": "object",
"required": [
"domain"
],
"properties": {
"domain": {
"type": "string",
"description": "Domain, URL, or email address, e.g. example.com"
}
}
}Runs the email-security check on 2–5 domains and returns a comparison table with per-domain grades. Useful for checking your domain against competitors.
| Argument | Type | Description |
|---|---|---|
| domains* | array | 2–5 domains |
{
"type": "object",
"required": [
"domains"
],
"properties": {
"domains": {
"type": "array",
"items": {
"type": "string"
},
"maxItems": 5,
"minItems": 2,
"description": "2–5 domains"
}
}
}