28/28 Agent Service Desk: Fix & Verify

ai.28in28Published by 28in28.aiOfficial publisherv1.1.0Updated Nov 7, 2026

Check SPF/DKIM/DMARC of a domain, get a non-binding Fix & Verify quote, re-verify after the DNS fix.

VerifiedStreamable HTTPWeb executableSecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

Checks a domain's public email-authentication DNS (SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT), quotes a Fix & Verify service, and re-verifies after fixes.

What you can do
  • Read a domain's public DNS and report SPF, DKIM, DMARC, MX, MTA-STS and TLS-RPT findings, risks, unknowns and the exact DNS changes to fix them
  • Get a machine-readable, non-binding quote for the Fix & Verify service, with price, scope, acceptance criteria and a baseline
  • Re-run the check and compare it with an earlier quote's criteria and baseline to return PASS or not
When to use it
Useful when you want an assistant to audit email deliverability and spoofing protections for a domain, get concrete DNS record changes, and later confirm that a fix actually resolved the findings.
Requirements
Remote streamable HTTP endpoint at 28in28.ai; no packages, environment variables or headers declared. Only public DNS of the domain is read, and the server needs no access to your DNS or accounts. Rate-limited.
Before you install
Read-only: it never changes DNS and creates no order, contract or payment, and paid orders are currently not open. Quotes are non-binding and a PASS is not an invoice. Only check domains you are allowed to check; the server states a privacy policy for data handling.

Installation

In SourceWeft

  1. Open 28/28 Agent Service Desk: Fix & Verify in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/ai.28in28%2Fagent-service-desk/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "28-28-agent-service-desk-fix-verify": {
      "type": "http",
      "url": "https://28in28.ai/mcp"
    }
  }
}

Tools

3

checkDomain

Check email authentication of a domain

Reads the public DNS of one domain and reports SPF, DKIM, DMARC, MX, MTA-STS and TLS-RPT findings, risks, unknowns and the exact DNS changes to fix them. Read-only; nothing is stored.

Parametersdomainrequired

quoteFixVerify

Scope and quote Fix & Verify for a domain

Runs the email-authentication check of one domain and returns a machine-readable, NON-BINDING quote for Fix & Verify: price (EUR 99 net per domain), scope (exact DNS changes), acceptance criteria and the baseline to verify against later. Orders are not open: it creates no order, contract or payment and stores nothing. Keep the returned criteria and baseline to call verifyFixVerify after the records are published.

Parametersdomainrequired

verifyFixVerify

Verify a Fix & Verify scope after the DNS change

Re-runs the check of the domain and compares it with the acceptance criteria and baseline of an earlier quoteFixVerify result: PASS when every criterion is resolved and no new critical or high finding appeared. Read-only; nothing is stored; a pass is not an invoice while orders are closed.

Parameterstokenrequireddomainrequiredbaselinerequiredcriteriarequired

Version history

1
  1. v1.1.0LatestNov 7, 2026

Score

72% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts

    Publish an icon in the registry entry.

  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.