Email & DNS security MCP servers

A server here sPF, DKIM, DMARC, DNS security or domain spoofing checks.

Not here: sending email and registering domains.

214servers
139 remote75 localTagged by Odel's AI, which can make mistakes

Best fit

129 made for this, ranked by starsRemoteLocal
  1. ドメイン番人 @j-doi/domain-banninドメインの設定を調べる MCP サーバー。SPF / DKIM / DMARC・DNS・SSL 証明書・セキュリティヘッダ・サブドメイン・類似ドメインを、公開情報だけで確認します。登録不要・無料。5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  2. DomainDNA: Tech Stack Detector, WHOIS & Domain Age API @cybermax-tools/domain-intelDomainDNA: a domain's tech stack, email security (MX/SPF/DMARC), TLS expiry and age in one record.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  3. Ecoa @ecoa/ecoaVerificação de segurança e conformidade de sites: cabeçalhos, TLS, DNS, e-mail, LGPD e pentest.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  4. FEDLIN Scanners @fedlin/fedlin-mcp-serverExposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  5. Dmarc Spf Audit @dawaxwx/dmarc-spf-auditComplete domain email-auth audit in one call: SPF with RFC 7208 lookup counting, DKIM selector pr...7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  6. Email Verifier @pavel-tashev/email-verifierVerify email addresses in bulk: syntax, domain, MX, disposable and role addresses, SPF and DMARC8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  7. Auth Posture — Email Deliverability & Spoofability Audit @rowb/auditOne-call domain audit: MX receiving, SPF/DMARC/DKIM spoofing protection, disposable-address risk.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  8. AstraVerify Domain Trust Check @astraverify/domain-trustEmail security and AI discoverability scores for any domain, with the exact record or tag to fix.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  9. isitdns @isitdns/isitdnsIs it DNS? Audit a site or domain that isn't working: one call says if it resolves and why. No key.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  10. AI-operated. DKIM key reader: free, no key, finds unknown selectors. @rjhsignaltech/dkim-selector-checkAI-operated. Two free DKIM readers, no signup: reads keys, finds the selector. Paid roster $99.14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  11. AI-operated. Email authentication reader: six free tools, no key, no signup. @rjhsignaltech/spf-dmarcAI-operated. Free SPF (RFC 7208 count), DMARC, MTA-STS, DMARC rua/ruf readers. Paid audit $29.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  12. ARC-Relay @arc-relay/mcpDMARC-safe email forwarding for agents: aliases, DNS health checks, and MCP tools on your domains.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  13. ProfitCollector @bakhour/profitcollector22 pay-per-call developer, security, network and data utilities using x402 on Base.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  14. DNS Check @kaiv/dns-checkLive DNS lookups for agents: A/MX/TXT/SPF/CNAME/PTR with TTLs and DNSSEC, via Google Public DNS.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  15. Email Check @kaiv/email-checkEmail posture for any domain: can it receive mail, can it be spoofed? MX, SPF and DMARC.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  16. Execute domain-dnssec-trust-verifier-mcp @evozim/domain-dnssec-trust-verifier-mcpPremium agentic endpoint for domain-dnssec-trust-verifier-mcp.21% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.
  17. Quiet Failures @quietfailures/quiet-failuresOpen weekly security base rates (CC BY 4.0), plus live DMARC, takeover and WHOIS checks.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  18. PCBLT — Live Checks @pcblt/pcbltLive DNS, email-auth and redirect checks, HTTP security headers, uptime history, PC hardware prices.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  19. Professor Sausages — Trust & Verification @professorsausages/sausage-trustEmail, phone, domain, URL & OFAC verification; phishing and IBAN checks via x402.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  20. Qualisend Email Verification @qualisend/email-verificationVerify email addresses and clean lists to improve deliverability and sender reputation.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  21. Tier1 IT Assessment @tier1/it-assessmentRead-only IT Health Check, domain security, recommendations, pricing, and draft enquiries.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  22. Uptimeify @uptimeify/mcp-serverFree anonymous website, DNS, email and TLS checks, plus monitor read and opt-in write access.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  23. mcp-toolbelt @papacasper/mcp-toolbelt29 pay-per-call DNS, SEO, SSL, security, and dev tools for AI agents. x402, no API key.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  24. Domainee @domainee/domaineeCustom domains API for SaaS: connect, verify, and manage customer domains, SSL, and DNS7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.