Search / ai.kaiv/email-check
email-check
R0· no sign-inEmail posture for any domain: can it receive mail, can it be spoofed? MX, SPF and DMARC.
v1.0.0 · active · descriptor JSON · versions
Search / ai.kaiv/email-check
R0· no sign-inEmail posture for any domain: can it receive mail, can it be spoofed? MX, SPF and DMARC.
v1.0.0 · active · descriptor JSON · versions
{
"mcpServers": {
"email-check": {
"type": "http",
"url": "https://api.kaiv.ai/api/bridge/mcp/email-check-b6ab5250"
}
}
}claude mcp add --transport http email-check https://api.kaiv.ai/api/bridge/mcp/email-check-b6ab5250[mcp_servers.email-check]
url = "https://api.kaiv.ai/api/bridge/mcp/email-check-b6ab5250"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"email-check": {
"type": "remote",
"url": "https://api.kaiv.ai/api/bridge/mcp/email-check-b6ab5250",
"enabled": true
}
}
}{
"mcpServers": {
"email-check": {
"type": "http",
"url": "https://api.kaiv.ai/api/bridge/mcp/email-check-b6ab5250"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=email-check&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLmthaXYuYWkvYXBpL2JyaWRnZS9tY3AvZW1haWwtY2hlY2stYjZhYjUyNTAifQ%3D%3D"
}{
"servers": {
"email-check": {
"type": "http",
"url": "https://api.kaiv.ai/api/bridge/mcp/email-check-b6ab5250"
}
}
}{
"mcpServers": {
"email-check": {
"httpUrl": "https://api.kaiv.ai/api/bridge/mcp/email-check-b6ab5250"
}
}
}extensions:
"email-check":
enabled: true
name: "email-check"
type: streamable_http
uri: "https://api.kaiv.ai/api/bridge/mcp/email-check-b6ab5250"
timeout: 300
protocol.modernsupports 2026-07-28 (server/discover)protocol.statelessanswers without a sessionprotocol.transportstreamable HTTPprotocol.list_ttltool list is cacheable (ttlMs 60000)auth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotations4 of 4 tools declare readOnlyHint or destructiveHinttools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHinttools.token_costabout 795 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changesno tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+dns-namespace +reachable +uptime-93% ~updated-60d-ago -no-repository
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://api.kaiv.ai/api/bridge/mcp/email-check-b6ab5250 streamable-http | none | yes | 93% | 336 ms | 2026-07-28, 2025-11-25, 2025-06-18, 2025-03-26, 2024-11-05 | 2026-10-20 |
check_email_domainread-only | Full email posture for a domain: can it receive mail, and can it be spoofed? Runs MX, SPF and DMARC lookups together and returns a plain-language verdict alongside the raw records: can_receive_mail, spoofable, and a list of specific findings. Use this as the default check before emailing an unfamiliar domain, when judging whether inbound mail claiming to be from a domain could be forged, or when auditing your own domains. Prefer this over the single-record tools unless you already know which record you need. |
get_dmarc_recordread-only | DMARC record, policy, and whether it actually protects. Returns the DMARC TXT record at _dmarc.<domain>, its policy (none / quarantine / reject), the percentage it applies to, and whether that policy protects against spoofing. Also flags the case of MULTIPLE DMARC records, which RFC 7489 requires receivers to treat as no policy at all — a domain in that state is unprotected however strict its records look. A policy of "none" is monitoring only and does not stop forged mail. Use when assessing whether mail claiming to be from a domain can be trusted. |
get_mx_recordsread-only | Mail exchanger records for a domain. Returns the MX hosts in priority order and whether any exist. A domain with no MX records cannot receive mail, so sending to it will bounce. Use when you only need deliverability and not spoofing posture; use check_email_domain for the full picture. |
get_spf_recordread-only | SPF record and how strict it is. Returns the SPF TXT record, the qualifier on its `all` mechanism (fail / softfail / neutral / pass) and what that means in practice, plus whether more than one SPF record exists — which receivers treat as an error, leaving the domain unprotected. Use when diagnosing why mail from a domain is being rejected or marked. |
Schemas: list_tools.
And 2 more from this publisher.
{
"name": "ai.kaiv/email-check",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://api.kaiv.ai/api/bridge/mcp/email-check-b6ab5250",
"type": "streamable-http"
}
],
"version": "1.0.0",
"description": "Email posture for any domain: can it receive mail, can it be spoofed? MX, SPF and DMARC."
}