Deliverability Doctor

io.github.Integrity-Os由 GitHub 帳號 Integrity-Os 發布v1.0.2更新於 Oct 24, 2026

Check if a domain can be email-spoofed: SPF, DMARC, DKIM, MX graded from public DNS. Authless.

已驗證Streamable HTTP可網頁執行開發者工具安全與監控

概覽

AI 產生的概覽

一個遠端 MCP 伺服器，依據公開 DNS 對網域的防郵件偽造能力（SPF、DMARC、DKIM、MX）評級並提供修正建議。

可以做什麼
檢查單一網域的郵件安全：SPF、DMARC 政策與回報、MX，以及常見選擇器上的 DKIM，回傳 A–F 評級和具體修正建議；接受裸網域、網址或電子郵件地址，對不存在的網域拒絕評級。比較 2 至 5 個網域，輸出附各網域評級的對照表，例如將自己的網域與競爭對手比較。
適用情境
適合在修改 DNS 記錄前，快速、唯讀地評估某個網域是否可被偽造，或並排比較多個網域的郵件驗證狀況。
執行需求
遠端 streamable HTTP 端點；未宣告需要身分驗證、API 金鑰或環境變數。伺服器透過 DNS-over-HTTPS 解析記錄，需要能存取公開 DNS 解析器的網路。
安裝前請注意
唯讀：僅查詢公開 DNS，不儲存資料。發現問題時報告中可能出現指向付費書面稽核的推銷語句，應視為行銷而非檢測結論。結果僅反映查詢時的公開 DNS 與所檢查的選擇器，不代表完整的收件匣送達率。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Deliverability Doctor，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable，透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.Integrity-Os%2Fdeliverability-doctor/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "deliverability-doctor": {
      "type": "http",
      "url": "https://deliverability-doctor.deliverability-doctor.workers.dev/mcp"
    }
  }
}

README

Deliverability Doctor

Remote MCP server: "Can my domain be email-spoofed?" answered from public DNS, graded, with concrete fixes. Connectable to Claude (custom connector) and ChatGPT (Apps SDK / MCP connector) — both speak MCP, one server serves both.

Tools

  • check_email_security(domain) — SPF (incl. RFC 7208 multiple-record permerror and redirect= handling), DMARC (policy, rua, pct), MX, DKIM at 7 common selectors. Graded A–F report, fixes per finding, upsell line only when problems exist. Accepts bare domain, URL, or email address.
  • compare_email_security(domains[2..5]) — comparison table with grades.

Design decisions

  • Authless: reads public DNS only, stores nothing, takes nothing but a domain. Lowest possible connect friction; nothing sensitive to protect.
  • DNS-over-HTTPS (Cloudflare → Google fallback): identical code runs on local Node and on Cloudflare Workers — no dns module dependency.
  • Stateless streamable HTTP: fresh transport per request, no sessions; safe to scale, trivial for clients.
  • NXDOMAIN is refused, not graded — "domain doesn't exist" ≠ "spoofable".
  • Verified against known postures before first run: gmail.com (redirect= must not be flagged), n8n.io (must grade A on p=reject), missing-everything domain (must grade F), NXDOMAIN (must refuse).

Run

bash
npm installnode server.js          # :8787/mcp

Quick public demo: cloudflared tunnel --url http://localhost:8787 → use https://<random>.trycloudflare.com/mcp as the connector URL.

Status 2026-08-23

  • Local: end-to-end MCP verified (initialize / tools/list / tools/call).
  • Public: live via quick tunnel, initialize verified from the public URL.
  • Durable hosting: pending — Cloudflare Workers deploy needs Kacper's account (~5 min). Tunnel URL dies with the process/PC.
  • Directory submissions (Anthropic connector directory, ChatGPT apps): need the durable URL first, then Kacper's developer accounts.

Monetization path

Free tool = distribution. Report links the $99 written audit (niekonieczny.gumroad.com/l/vscjt) only when problems are found. NOTE: Gumroad payouts currently frozen on Stripe KYC — unfreeze before promoting.

來源：README.md，提交 f07454d

工具

2

check_email_security

Check a domain’s email security

Checks whether a domain can be email-spoofed, using public DNS only. Verifies SPF (including the RFC 7208 multiple-record permerror), DMARC policy and reporting, MX, and DKIM at common selectors. Returns a graded report with concrete fixes. Accepts a bare domain, a URL, or an email address. Nothing is sent to the domain.

輸入參數domain必填

compare_email_security

Compare email security across domains

Runs the email-security check on 2–5 domains and returns a comparison table with per-domain grades. Useful for checking your domain against competitors.

輸入參數domains必填

版本歷史

1
  1. v1.0.2最新Sep 16, 2026

評分

已滿足適用檢查項的 100%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分