Email & DNS security MCP servers

A server here sPF, DKIM, DMARC, DNS security or domain spoofing checks.

Not here: sending email and registering domains.

214servers
139 remote75 localTagged by Odel's AI, which can make mistakes
By GitHub stars, at most two per publisher
  1. Number 1: e2a — email for AI agents@e2a/mcp-serverAuthenticated email gateway for AI agents — per-agent inboxes, HITL approval, SPF/DKIM verified.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.193 GitHub stars.
  2. Number 2: e2a — email for AI agents@mnexa-ai/mcp-serverAuthenticated email gateway for AI agents — per-agent inboxes, HITL approval, SPF/DKIM verified.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.192 GitHub stars.
  3. Number 3: ContrastAPI@contrastcyber/api55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.33 GitHub stars.

Best fit

129 made for this, ranked by starsRemoteLocal
  1. NsLookup @venomseven/nslookupDNS lookups, health reports, SSL certs, security scans, GEO scoring, uptime checks6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.22 GitHub stars.
  2. Domain Intelligence @oti-labs/domain-intelligenceWHOIS/RDAP, DNS, SSL, live subdomains with IPs, and SPF/DMARC/DKIM for any domain.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.14 GitHub stars.
  3. AMH Cloudflare Ops MCP by WT @pain2hustle/cloudflare-ops-mcpThe bridge from K2 agents through Wrangler to your master AI - safe, approval-gated Cloudflare ops.21% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.9 GitHub stars.
  4. BlackVeil DNS & Email Security Scanner @blackveilsecurity/dnsDNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.9 GitHub stars.
  5. DMARKOFF — DMARC, SPF & DKIM Analytics @dmarkoff/mcpDMARC analytics and domain onboarding for AI assistants — health, SPF/DKIM, compliance, anomalies.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.8 GitHub stars.
  6. Email Spam Tester @serg-tanichev/email-spam-testerTest an email before it goes out: a disposable address, 41 checks with RFC citations, a fix plan.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
  7. IntoDNS.ai DNS & Email Security Scanner @intodns/scannerDNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
  8. DNS Doctor @dnsdoctor/dns-doctorScan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.2 GitHub stars.
  9. Domain & Company Intel MCP @datakoot/domain-dns-whoisDomain intel for AI agents: RDAP registration, DNS, email deliverability, tech stack.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  10. DomScan @estevecastells/domscanDomain intelligence for DNS, WHOIS/RDAP, TLS, reputation, valuation, and brand protection.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
  11. Domain & Company Intel MCP @selflabbs/domain-intel-mcpDomain intel for AI agents: RDAP registration, DNS, email deliverability, tech stack.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  12. DechoNet MCP @dechonet/mcp25 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  13. AgentAegis @astafford8488/agentaegisPay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  14. Oldweb Diagnostics @palthainon/oldweb-diagnosticsPublic DNS, HTTPS and deployment checks, plus offline email header and delivery-log tracing.Not assessed yet.A remote server; no sign-in.
  15. Stackhal @bahdanhal/stackhalOutside-in DNS, email security, SEO, GEO and app-link checks plus developer utilities.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  16. Web Content & URL Tools @avaloncompany/web-content-url-tools26 tools: web pages to Markdown, metadata, tech stack, SSL, SEO, domains, email auth and SSO checks.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  17. Email Auditor @geekmarine/mcp-email-auditorValidates domain email MX records and DNS status via Cloudflare DNS-over-HTTPS.Not assessed yet.A remote server; no sign-in.
  18. Domain Auditor @geekmarine/mcp-domain-auditorDNS resolution, HTTP security headers, and SPF/DMARC email hygiene audits.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  19. drwho.me network and developer tools @drwho/tools29 free tools: DNS, email auth (SPF, DKIM, DMARC), TLS, headers, WHOIS, dev utils.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  20. Deliverability Doctor @integrity-os/deliverability-doctorCheck if a domain can be email-spoofed: SPF, DMARC, DKIM, MX graded from public DNS. Authless.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  21. DeriveAI x402 APIs @deriveit33z-ship-it/x402-apis25 pay-per-request intelligence APIs for AI agents via x402 micropayments (USDC/Base)15% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.

Also touches on Email & DNS security

49 where it is one part of a bigger job