Mail Security Tools

Connect it to your AI

Claude Code

claude mcp add --transport http email-security https://api.mailsecuritytools.com/mcp

Claude, ChatGPT, Cursor and other apps

Add it as a custom connector with this URL (Streamable HTTP):

https://api.mailsecuritytools.com/mcp

Cursor, VS Code and other apps (mcp.json)

{
  "mcpServers": {
    "email-security": {
      "url": "https://api.mailsecuritytools.com/mcp"
    }
  }
}

Tools it offers

8 tools, as the server itself reported during our check on Oct 31, 2026.

• check_domain_email_securityFree. Look up a domain's MX, SPF (record, DNS lookup count, all qualifier), DMARC (policy, rua) and DKIM (common selectors, key size) from live DNS and list issues. No payment.
• pricingFree. Prices of the paid tools, payment network and receiving address.
• email_security_scoreGrade a domain's email security 0-100 (A-F): SPF 30, DMARC 40, DKIM 25, MX 5, from live DNS, with findings and the top 3 fixes. Read-only. Costs $0.01 USDC via x402; errors are not charged.
• check_email_addressCheck one email address: syntax, MX / null MX, disposable domain, role account, free provider; verdict ok / risky / undeliverable. No SMTP probe. Costs $0.01 USDC via x402; errors are not charged.
• email_fix_planEmail security fix plan for one domain: the exact SPF, DKIM and DMARC records to publish (create / replace / keep, name, value, why), in order, with click-path steps for the domain's DNS host and a staged DMARC rollout.
• bulk_email_security_scoreScore up to 100 domains' email security in one call (SPF 30, DMARC 40, DKIM 25, MX 5 from live DNS): per-domain score, grade and issues, plus a summary with grade counts, domains missing DMARC or SPF, and the worst 10. F
• email_security_score_batchScore 2 to 5 domains' email security in one call (the same SPF/DMARC/DKIM/MX score, grade and findings as email_security_score), lowest score first. Costs $0.04 USDC via x402; if no domain can be scored it errors and is
• watch_statusFree. Status of a paid email setup watch (created with POST /v1/watch): items, expiry, last check, last webhook delivery and current SPF/DMARC/DKIM/MX state. Needs the webhook_secret from creation.

Questions