Mail Security Tools

com.mailsecuritytools.apiPublished by api.mailsecuritytools.comOfficial publisherv1.1.0Updated Oct 24, 2026

DMARC/SPF/DKIM/MX checks, email score, 100-domain bulk score, webhook watch alerts (x402 USDC).

VerifiedStreamable HTTPWeb executableSecurity & MonitoringData & Analytics

Overview

AI-generated overview

Lets an assistant check a domain's MX, SPF, DMARC and DKIM setup, grade its email security, and get a fix plan.

What you can do
The server checks a domain's email security from live DNS, reading MX, SPF, DMARC and DKIM records and listing issues. It grades a domain from 0 to 100 with findings and top fixes, checks a single email address for syntax, MX, disposable domains and role accounts, and produces a concrete SPF, DKIM and DMARC fix plan. It also scores up to 100 domains in one call and reports the status of a paid setup watch.
When to use it
Use it to diagnose a domain's email authentication setup, vet a single email address, or score a client or vendor list in bulk; also useful before sending mail to confirm SPF, DKIM and DMARC are correct.
Requirements
A remote HTTP endpoint; no local runtime or account is needed. Free tools work directly; paid tools require payment in USDC via x402, so a crypto-capable wallet and network access are needed.
Before you install
Most tools cost money: domain scoring and address checks are 0.01 USDC each, bulk scoring 0.5 USDC, and the fix plan 1 USDC, spending real cryptocurrency. The paid watch must be created separately and delivers webhook notifications. Domains and email addresses you query are sent to a third-party service.

Installation

In SourceWeft

  1. Open Mail Security Tools in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.mailsecuritytools.api%2Femail-security/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "mail-security-tools": {
      "type": "http",
      "url": "https://api.mailsecuritytools.com/mcp"
    }
  }
}

Tools

7

check_domain_email_security

Check domain email security (free)

Free. Look up a domain's MX, SPF (record, DNS lookup count, all qualifier), DMARC (policy, rua) and DKIM (common selectors, key size) from live DNS and list issues. No payment.

Parametersdomainrequired

pricing

Prices (free)

Free. Prices of the paid tools, payment network and receiving address.

Takes no parameters.

email_security_score

Grade a domain's email security 0-100 (A-F): SPF 30, DMARC 40, DKIM 25, MX 5, from live DNS, with findings and the top 3 fixes. Read-only. Costs $0.01 USDC via x402; errors are not charged.

Parametersdomainrequired

check_email_address

Check one email address: syntax, MX / null MX, disposable domain, role account, free provider; verdict ok / risky / undeliverable. No SMTP probe. Costs $0.01 USDC via x402; errors are not charged.

Parametersemailrequired

email_fix_plan

Email security fix plan for one domain: the exact SPF, DKIM and DMARC records to publish (create / replace / keep, name, value, why), in order, with click-path steps for the domain's DNS host and a staged DMARC rollout. Non-sending domains get a lock-down set. Costs $1 USDC via x402; errors are not charged.

Parametersdomainrequired

bulk_email_security_score

Score up to 100 domains' email security in one call (SPF 30, DMARC 40, DKIM 25, MX 5 from live DNS): per-domain score, grade and issues, plus a summary with grade counts, domains missing DMARC or SPF, and the worst 10. For MSPs and agents checking a client or vendor list. Costs $0.50 USDC via x402; errors are not charged.

Parametersdomainsrequired

watch_status

Watch status (free)

Free. Status of a paid email setup watch (created with POST /v1/watch): items, expiry, last check, last webhook delivery and current SPF/DMARC/DKIM/MX state.

Parameterswatch_idrequired

Version history

2
  1. v1.1.0LatestOct 15, 2026
  2. v1.0.0Oct 14, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.