Email & DNS security MCP servers

A server here sPF, DKIM, DMARC, DNS security or domain spoofing checks.

Not here: sending email and registering domains.

214servers
139 remote75 localTagged by Odel's AI, which can make mistakes
By GitHub stars, at most two per publisher
  1. Number 1: OpenOSINT@openosint/openosintAI-powered OSINT agent & MCP server. 21 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1,744 GitHub stars.
  2. Number 2: Parse-DMARC MCP Server@meysam81/parse-dmarcLightweight DMARC parser: auto-fetch email reports, visualize compliance in a single all-in-one app4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.208 GitHub stars.
  3. Number 3: e2a — email for AI agents@e2a/mcp-serverAuthenticated email gateway for AI agents — per-agent inboxes, HITL approval, SPF/DKIM verified.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.193 GitHub stars.

Best fit

129 made for this, ranked by starsRemoteLocal
  1. e2a — email for AI agents @mnexa-ai/mcp-serverAuthenticated email gateway for AI agents — per-agent inboxes, HITL approval, SPF/DKIM verified.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.192 GitHub stars.
  2. Avanan MCP @servosity/avanan-mcpEvery Avanan API operation, plus shift-start triage, campaign grouping, and quarantine evidence.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.47 GitHub stars.
  3. ContrastAPI @contrastcyber/api55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.33 GitHub stars.
  4. AynOps @aynops/aynopsAynOps is a reconnaissance focused MCP Server which gives reconnaissance capabilities to AI Clients18% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.27 GitHub stars.
  5. Porkbun DNS 🐷 @major/porkbunManage DNS records, domains, DNSSEC, SSL certificates via MCP5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.23 GitHub stars.
  6. NsLookup @venomseven/nslookupDNS lookups, health reports, SSL certs, security scans, GEO scoring, uptime checks6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.22 GitHub stars.
  7. Domain Intelligence @oti-labs/domain-intelligenceWHOIS/RDAP, DNS, SSL, live subdomains with IPs, and SPF/DMARC/DKIM for any domain.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.14 GitHub stars.
  8. AMH Cloudflare Ops MCP by WT @pain2hustle/cloudflare-ops-mcpThe bridge from K2 agents through Wrangler to your master AI - safe, approval-gated Cloudflare ops.21% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.9 GitHub stars.
  9. BlackVeil DNS & Email Security Scanner @blackveilsecurity/dnsDNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.9 GitHub stars.
  10. DMARKOFF — DMARC, SPF & DKIM Analytics @dmarkoff/mcpDMARC analytics and domain onboarding for AI assistants — health, SPF/DKIM, compliance, anomalies.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.8 GitHub stars.
  11. Gmail Postmaster Tools @optipub/gmail-postmaster-toolsGmail Postmaster Tools v2 — domains, traffic metrics, and compliance via your own Google OAuth.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.7 GitHub stars.
  12. APIMesh @mbeato/apimesh74 paid web-analysis APIs (SEO, security, TLS, DNS, email) as MCP tools. USDC via x402.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
  13. Email Spam Tester @serg-tanichev/email-spam-testerTest an email before it goes out: a disposable address, 41 checks with RFC citations, a fix plan.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
  14. IntoDNS.ai DNS & Email Security Scanner @intodns/scannerDNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
  15. DNS Doctor @dnsdoctor/dns-doctorScan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
  16. Inbox Check — Email Deliverability Test @live-direct-marketing/inbox-checkEmail inbox placement tests across Gmail, Outlook, Yahoo, Mail.ru, Yandex (SPF/DKIM/DMARC).8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  17. Dechonet @node-man/dechonet-mcp13 security recon tools for AI agents — DNS, SSL, HTTP, email, ports, ASN. Health Score 0-100.20% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  18. Agent Guards @mlawsonking/agent-guardsAll six agent guard suites in one local MCP server, with optional cloud intelligence.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  19. Email Guard @mlawsonking/email-guard-mcpEmail safety for AI agents: scan inbound for prompt-injection/phishing + outbound for secret leaks.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  20. SPF DMARC Record Lint @jmshinhwa/spf-dmarc-record-lint19 offline checks on the SPF, DMARC and DKIM records in your branch — including the DMARC rewrite of6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  21. Bulk Sender Lint @jmshinhwa/bulk-sender-lint21 dated checks over SPF, DKIM, DMARC, RFC 8058 one-click unsubscribe and TLS, in VS Code and in the7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.

Also touches on Email & DNS security

78 where it is one part of a bigger job