MX Verdict

com.mxverdictPublished by mxverdict.comOfficial publisherv1.0.0Updated Oct 24, 2026

Free, read-only email and DNS checks: SPF, DKIM, DMARC, MX, DNS records, blocklists, domain health.

VerifiedStreamable HTTPWeb executableDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

A remote MCP server that lets an assistant run read-only DNS and email authentication checks for a domain, including SPF, DKIM, DMARC, MX and blocklists.

What you can do
It exposes seven read-only lookup tools. One combined check reports a domain's email setup across SPF, DMARC, MX, DKIM on common selectors, blocklists, MTA-STS, TLS-RPT and BIMI, while individual tools check SPF lookup counts and the all mechanism, DKIM keys by selector, DMARC policy and reporting, and MX records with IPs and reverse DNS. A general DNS lookup covers common record types or reverse lookups for an IP, and a blocklist check tests an IP or domain against public DNSBLs.
When to use it
Useful when diagnosing why mail from a domain is rejected or lands in spam, auditing a domain's email authentication before sending, or checking whether a mail server's IP appears on public blocklists.
Requirements
A remote endpoint at mxverdict.com over streamable HTTP; no account, API key or environment variable is declared. The checks query public DNS, so the server needs network access to DNS.
Before you install
All tools are described as read-only lookups; none send, change or delete data. Queries reveal which domains and IP addresses you are investigating to the remote service and to public DNS resolvers. DKIM results are inconclusive when no key is found on common selectors, since selectors cannot be listed from DNS.

Installation

In SourceWeft

  1. Open MX Verdict in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.mxverdict%2Fmxverdict/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "mx-verdict": {
      "type": "http",
      "url": "https://mxverdict.com/mcp"
    }
  }
}

Tools

7

check_email_domain

Email domain health check

Check everything about a domain's email setup in one call: SPF, DMARC, MX, DKIM on common selectors, domain blocklists, MTA-STS, TLS-RPT and BIMI. Use it for a general question such as "is email set up correctly for example.com".

Parametersdomainrequired

check_spf

SPF check

Check a domain's SPF record: whether it exists and is valid, how many of the 10 allowed DNS lookups it uses, and how its all mechanism treats mail from servers that are not listed.

Parametersdomainrequired

check_dkim

DKIM check

Check a domain's DKIM public keys in DNS. With a selector (the s= tag of a DKIM-Signature header), checks that selector's key; without one, probes common selector names. Finding no key on common names does not prove DKIM is missing: selectors cannot be listed from DNS.

Parametersdomainrequiredselector

check_dmarc

DMARC check

Check a domain's DMARC record: whether it exists and is valid, its policy (none, quarantine or reject), alignment, and where reports are sent.

Parametersdomainrequired

lookup_mx

MX lookup

Look up a domain's MX records (its incoming mail servers), their IP addresses and reverse DNS. DNS only: it does not connect to the mail servers.

Parametersdomainrequired

dns_lookup

DNS lookup

Look up DNS records of a name. Type ALL (the default) queries A, AAAA, CNAME, MX, NS, TXT, SOA and CAA; any single type can be asked for. An IP address gives its reverse DNS (PTR) lookup.

Parametersnamerequiredtype

check_blacklist

Blacklist check

Check whether an IP address or a domain is listed on public DNS blocklists (DNSBLs). A domain is checked on domain blocklists only; to check a mail server, give its IP address.

Parameterstargetrequired

Version history

1
  1. v1.0.0LatestSep 28, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.