Email & DNS security MCP servers

A server here sPF, DKIM, DMARC, DNS security or domain spoofing checks.

Not here: sending email and registering domains.

214servers
139 remote75 localTagged by Odel's AI, which can make mistakes

Best fit

129 made for this, ranked by starsRemoteLocal
  1. Domain Security @ortamarco/domain-security-mcp-serverAudit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  2. Domain & Company Intel MCP @datakoot/domain-dns-whoisDomain intel for AI agents: RDAP registration, DNS, email deliverability, tech stack.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  3. DomScan @estevecastells/domscanDomain intelligence for DNS, WHOIS/RDAP, TLS, reputation, valuation, and brand protection.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
  4. Domain & Company Intel MCP @selflabbs/domain-intel-mcpDomain intel for AI agents: RDAP registration, DNS, email deliverability, tech stack.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  5. DechoNet MCP @dechonet/mcp25 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  6. Recon Kit @nan786521/recon-kit-mcpRead-only network & security recon tools (DNS, TLS, headers, CORS) for AI agents, each graded.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.1 GitHub stars.
  7. DNS MCP Server @mclose/dns-mcpReal-time DNS security analysis — DNSSEC, email auth, and RDAP. Built for SOC investigations.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.1 GitHub stars.
  8. Deliveriq @davison-francis/deliveriq-mcpEmail deliverability for AI agents. 12 tools: verify, DNSBL, DMARC, spam-trap, finder.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  9. Domain Deliverability Checker @mambabuilt/mcp-domain-deliverability-checkerAudit a domain email deliverability via Apify: SPF, DKIM, DMARC, MX, blacklist, catch-all, age.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.1 GitHub stars.
  10. AgentAegis @astafford8488/agentaegisPay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  11. Oldweb Diagnostics @palthainon/oldweb-diagnosticsPublic DNS, HTTPS and deployment checks, plus offline email header and delivery-log tracing.Not assessed yet.A remote server; no sign-in.
  12. Stackhal @bahdanhal/stackhalOutside-in DNS, email security, SEO, GEO and app-link checks plus developer utilities.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  13. Web Content & URL Tools @avaloncompany/web-content-url-tools26 tools: web pages to Markdown, metadata, tech stack, SSL, SEO, domains, email auth and SSO checks.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  14. Email Auditor @geekmarine/mcp-email-auditorValidates domain email MX records and DNS status via Cloudflare DNS-over-HTTPS.Not assessed yet.A remote server; no sign-in.
  15. Security MCP @pratham-jain33/security-mcpZero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defensesNot assessed yet.Runs on your machine, installed from PyPI.
  16. OSINT @robyroro/osint-mcpDomain and website investigations: batch recon, shared infrastructure, CT history and public lookups8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  17. Domain Auditor @geekmarine/mcp-domain-auditorDNS resolution, HTTP security headers, and SPF/DMARC email hygiene audits.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  18. Apixies Developer API Suite @apixies/mcp-server50 developer utility APIs as tools: SSL, DNS, WHOIS, email checks, HTML to PDF, sitemaps and more.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  19. drwho.me network and developer tools @drwho/tools29 free tools: DNS, email auth (SPF, DKIM, DMARC), TLS, headers, WHOIS, dev utils.3% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  20. Vaemail @vaemail/vaemailEmail infrastructure for AI agents: send, authenticate domains, track delivery, diagnose issues.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  21. SecOps Field Notes @labaccessnow/secops-field-notes-mcpCVSS scoring, IOC extraction, email header triage, hash/JWT/timestamp decoding, CISA KEV lookup.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
  22. Proofpoint Essentials @wyre-ai/proofpoint-essentials-mcpMCP server for Proofpoint Essentials -- MSP org, domain, user, licensing, and reporting management.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
  23. Mailprotector @wyre-ai/mailprotector-mcpMCP server for Mailprotector — customers, domains, users, quarantine, allow/block rules for MSPs.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
  24. Deliverability Doctor @integrity-os/deliverability-doctorCheck if a domain can be email-spoofed: SPF, DMARC, DKIM, MX graded from public DNS. Authless.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.