Email & DNS security MCP servers

A server here sPF, DKIM, DMARC, DNS security or domain spoofing checks.

Not here: sending email and registering domains.

214servers
139 remote75 localTagged by Odel's AI, which can make mistakes
By GitHub stars, at most two per publisher
  1. Number 1: OpenOSINT@openosint/openosintAI-powered OSINT agent & MCP server. 21 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.11% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1,744 GitHub stars.
  2. Number 2: Parse-DMARC MCP Server@meysam81/parse-dmarcLightweight DMARC parser: auto-fetch email reports, visualize compliance in a single all-in-one app4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.208 GitHub stars.
  3. Number 3: Avanan MCP@servosity/avanan-mcpEvery Avanan API operation, plus shift-start triage, campaign grouping, and quarantine evidence.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.47 GitHub stars.

Best fit

129 made for this, ranked by starsRemoteLocal
  1. AynOps @aynops/aynopsAynOps is a reconnaissance focused MCP Server which gives reconnaissance capabilities to AI Clients18% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.27 GitHub stars.
  2. Porkbun DNS 🐷 @major/porkbunManage DNS records, domains, DNSSEC, SSL certificates via MCP5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.23 GitHub stars.
  3. Gmail Postmaster Tools @optipub/gmail-postmaster-toolsGmail Postmaster Tools v2 — domains, traffic metrics, and compliance via your own Google OAuth.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.7 GitHub stars.
  4. APIMesh @mbeato/apimesh74 paid web-analysis APIs (SEO, security, TLS, DNS, email) as MCP tools. USDC via x402.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
  5. Inbox Check — Email Deliverability Test @live-direct-marketing/inbox-checkEmail inbox placement tests across Gmail, Outlook, Yahoo, Mail.ru, Yandex (SPF/DKIM/DMARC).8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.2 GitHub stars.
  6. Dechonet @node-man/dechonet-mcp13 security recon tools for AI agents — DNS, SSL, HTTP, email, ports, ASN. Health Score 0-100.20% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  7. Agent Guards @mlawsonking/agent-guardsAll six agent guard suites in one local MCP server, with optional cloud intelligence.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  8. Email Guard @mlawsonking/email-guard-mcpEmail safety for AI agents: scan inbound for prompt-injection/phishing + outbound for secret leaks.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  9. SPF DMARC Record Lint @jmshinhwa/spf-dmarc-record-lint19 offline checks on the SPF, DMARC and DKIM records in your branch — including the DMARC rewrite of6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  10. Bulk Sender Lint @jmshinhwa/bulk-sender-lint21 dated checks over SPF, DKIM, DMARC, RFC 8058 one-click unsubscribe and TLS, in VS Code and in the7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  11. Domain Security @ortamarco/domain-security-mcp-serverAudit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  12. Recon Kit @nan786521/recon-kit-mcpRead-only network & security recon tools (DNS, TLS, headers, CORS) for AI agents, each graded.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  13. DNS MCP Server @mclose/dns-mcpReal-time DNS security analysis — DNSSEC, email auth, and RDAP. Built for SOC investigations.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
  14. Deliveriq @davison-francis/deliveriq-mcpEmail deliverability for AI agents. 12 tools: verify, DNSBL, DMARC, spam-trap, finder.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  15. Domain Deliverability Checker @mambabuilt/mcp-domain-deliverability-checkerAudit a domain email deliverability via Apify: SPF, DKIM, DMARC, MX, blacklist, catch-all, age.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  16. Security MCP @pratham-jain33/security-mcpZero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defensesNot assessed yet.Runs on your machine, installed from PyPI.
  17. OSINT @robyroro/osint-mcpDomain and website investigations: batch recon, shared infrastructure, CT history and public lookups8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  18. Apixies Developer API Suite @apixies/mcp-server50 developer utility APIs as tools: SSL, DNS, WHOIS, email checks, HTML to PDF, sitemaps and more.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  19. Vaemail @vaemail/vaemailEmail infrastructure for AI agents: send, authenticate domains, track delivery, diagnose issues.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  20. SecOps Field Notes @labaccessnow/secops-field-notes-mcpCVSS scoring, IOC extraction, email header triage, hash/JWT/timestamp decoding, CISA KEV lookup.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
  21. Proofpoint Essentials @wyre-ai/proofpoint-essentials-mcpMCP server for Proofpoint Essentials -- MSP org, domain, user, licensing, and reporting management.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.

Also touches on Email & DNS security

29 where it is one part of a bigger job