Mail Security Tools

–Likes are community signals, not a measured score.

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

DMARC/SPF/DKIM/MX checks, email score, 100-domain bulk score, webhook watch alerts (x402 USDC).

Author	com.mailsecuritytools.api
Access	remote
Publisher key required	No
Measured state	Deep-tested
L1 liveness	alive
L1 latency	2557 ms
Last measured	2026-10-26

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "Mail Security Tools": {
      "url": "https://api.mailsecuritytools.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (7)

check_domain_email_security read-only
Free. Look up a domain's MX, SPF (record, DNS lookup count, all qualifier), DMARC (policy, rua) and DKIM (common selectors, key size) from live DNS and list issues. No payment.
Parameters:
- domain (required) — string — Domain, e.g. example.com (an email or URL on it also works)
Hints: read-only yes · destructive no · idempotent yes · open-world yes
pricing read-only
Free. Prices of the paid tools, payment network and receiving address.
Hints: read-only yes · destructive no · idempotent yes · open-world no
email_security_score read-only
Grade a domain's email security 0-100 (A-F): SPF 30, DMARC 40, DKIM 25, MX 5, from live DNS, with findings and the top 3 fixes. Read-only. Costs $0.01 USDC via x402; errors are not charged.
Parameters:
- domain (required) — string — Domain, e.g. example.com (an email or URL on it also works)
Hints: read-only yes · destructive no · idempotent yes · open-world yes
check_email_address read-only
Check one email address: syntax, MX / null MX, disposable domain, role account, free provider; verdict ok / risky / undeliverable. No SMTP probe. Costs $0.01 USDC via x402; errors are not charged.
Parameters:
- email (required) — string — Email address
Hints: read-only yes · destructive no · idempotent yes · open-world yes
email_fix_plan read-only
Email security fix plan for one domain: the exact SPF, DKIM and DMARC records to publish (create / replace / keep, name, value, why), in order, with click-path steps for the domain's DNS host and a staged DMARC rollout. Non-sending domains get a lock-down set. Costs $1 USDC via x402; errors are not charged.
Parameters:
- domain (required) — string — Domain, e.g. example.com (an email or URL on it also works)
Hints: read-only yes · destructive no · idempotent yes · open-world yes
bulk_email_security_score read-only
Score up to 100 domains' email security in one call (SPF 30, DMARC 40, DKIM 25, MX 5 from live DNS): per-domain score, grade and issues, plus a summary with grade counts, domains missing DMARC or SPF, and the worst 10. For MSPs and agents checking a client or vendor list. Costs $0.50 USDC via x402; errors are not charged.
Parameters:
- domains (required) — array — Domains, 1-100
Hints: read-only yes · destructive no · idempotent yes · open-world yes
watch_status read-only
Free. Status of a paid email setup watch (created with POST /v1/watch): items, expiry, last check, last webhook delivery and current SPF/DMARC/DKIM/MX state.
Parameters:
- watch_id (required) — string — Watch id, e.g. msw_abcdefghijklmnop
Hints: read-only yes · destructive no · idempotent yes · open-world no

Publisher website

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.