Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "postbox-tools": {
      "type": "http",
      "url": "https://mcp.postboxservices.com/mcp"
    }
  }
}

claude mcp add --transport http postbox-tools https://mcp.postboxservices.com/mcp

[mcp_servers.postbox-tools]
url = "https://mcp.postboxservices.com/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "postbox-tools": {
      "type": "remote",
      "url": "https://mcp.postboxservices.com/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "postbox-tools": {
      "type": "http",
      "url": "https://mcp.postboxservices.com/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=postbox-tools&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vbWNwLnBvc3Rib3hzZXJ2aWNlcy5jb20vbWNwIn0%3D"
}

{
  "servers": {
    "postbox-tools": {
      "type": "http",
      "url": "https://mcp.postboxservices.com/mcp"
    }
  }
}

{
  "mcpServers": {
    "postbox-tools": {
      "httpUrl": "https://mcp.postboxservices.com/mcp"
    }
  }
}

extensions:
  "postbox-tools":
    enabled: true
    name: "postbox-tools"
    type: streamable_http
    uri: "https://mcp.postboxservices.com/mcp"
    timeout: 300

Quality 69 / 100needs work

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene86 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations8 of 8 tools declare readOnlyHint or destructiveHint
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: trace_redirect (destructiveHint, idempotentHint, openWorldHint); create_mailtest (idempotentHint, openWorldHint); check_spoofability (destructiveHint, idempotentHint, openWorldHint); …
pass
tools.token_costabout 1,010 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability25 · weight 15

warn
stability.changes10 tool changes in 30 days
fail
stability.rug_pull2 tools kept their name but changed most of their description in 30 days; review before trusting them

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

8 tools, about 1,010 tokens to load them all · tool set ec7df74e7a05 · tools last changed 2026-09-28 · checked 2026-10-20 00:54 UTC

Tool changes

2026-09-28whois_lookupchangeddescription, annotations
before
WHOIS summary for a domain: registrar, created/updated/expires dates, nameservers, DNSSEC, status flags. Free tool by Postbox Services.
after · 74% of words in common
WHOIS summary for a domain: registrar, created/updated/expires dates, nameservers, DNSSEC, status flags.
2026-09-28get_domain_agechangeddescription, annotations
before
Get a domain's registration date and age (young domains have weak sending reputation). Free tool by Postbox Services.
after · 74% of words in common
Get a domain's registration date and age (young domains have weak sending reputation).
2026-09-28analyze_emlchangeddescription, annotations
before
Run a deliverability/content analysis on a raw RFC 822 email (.eml source: full headers + body). IMPORTANT LIMITS: with no live SMTP session, SPF, blacklist and reverse-DNS cannot be verified from a file - for the authoritative score use create_mailtest instead. Free tool by Postbox Services.
after · 89% of words in common
Run a deliverability/content analysis on a raw RFC 822 email (.eml source: full headers + body). IMPORTANT LIMITS: with no live SMTP session, SPF, blacklist and reverse-DNS cannot be verified from a file - for the authoritative score use create_mailtest instead.
2026-09-28get_mailtest_resultchangedannotations
2026-09-28create_mailtestchangeddescription, annotations
before
Create a disposable test address for a full email deliverability audit (score /10: SPF, DKIM, DMARC + alignment, blacklists, reverse DNS, SpamAssassin content, Gmail/Yahoo bulk-sender compliance). The USER must then send an email from the system they want to test to the returned address, after which get_mailtest_result returns the score. Free tool by Postbox Services.
after · 90% of words in common
Create a disposable test address for a full email deliverability audit (score /10: SPF, DKIM, DMARC + alignment, blacklists, reverse DNS, SpamAssassin content, Gmail/Yahoo bulk-sender compliance). The USER must then send an email from the system they want to test to the returned address, after which get_mailtest_result returns the score.
2026-09-28trace_redirectchangeddescription, annotations
before
Follow a URL server-side through every HTTP redirect hop to its real final destination - per-hop status, IP, TLS and timing, plus phishing/deliverability flags (cross-domain jumps, https downgrades, meta/JS redirects). Free tool by Postbox Services.
after · 64% of words in common
Follow a URL server-side through every HTTP redirect hop to its real final destination - per-hop status, IP, TLS and timing, plus phishing/deliverability flags (cross-domain jumps, https downgrades, meta/JS redirects). Fetching is SSRF-hardened (private ranges blocked, HTTPS-only, per-hop validation); how it works: https://redirect.postboxservices.com/
2026-09-28check_spoofabilitychangeddescription, annotations
before
Grade how exposed a domain is to email spoofing and business email compromise, from its public DNS (SPF, DMARC policy strength, alignment, live lookalike domains). Returns an A-F grade with findings. Free tool by Postbox Services.
after · 85% of words in common
Grade how exposed a domain is to email spoofing and business email compromise, from its public DNS (SPF, DMARC policy strength, alignment, live lookalike domains). Returns an A-F grade with findings.
2026-09-28check_blacklistchangeddescription, annotations
before
Check a domain against domain blacklists (Spamhaus DBL, SURBL, URIBL and others), or an IP address against 24 IP blacklists including Spamhaus ZEN, Barracuda and SpamCop. Checks the exact target given: domains are not resolved to IPs. Returns per-list listing status. Free tool by Postbox Services.
after · 88% of words in common
Check a domain against domain blacklists (Spamhaus DBL, SURBL, URIBL and others), or an IP address against 24 IP blacklists including Spamhaus ZEN, Barracuda and SpamCop. Checks the exact target given: domains are not resolved to IPs. Returns per-list listing status.
2026-09-27check_blacklistchangeddescriptionmeaning changed
before
Check an IP address against 24 IP blacklists (Spamhaus ZEN, Barracuda, SpamCop and more), OR check a domain against the domain blacklists (Spamhaus DBL etc). A domain check tests the DOMAIN itself only - to check a specific sending IP, pass that IP. Free tool by Postbox Services.
after · 46% of words in common
Check a domain against domain blacklists (Spamhaus DBL, SURBL, URIBL and others), or an IP address against 24 IP blacklists including Spamhaus ZEN, Barracuda and SpamCop. Checks the exact target given: domains are not resolved to IPs. Returns per-list listing status. Free tool by Postbox Services.
2026-09-27check_blacklistchangedtitle, description, input schemameaning changed
before
Check a domain (its mail-relevant IPs) or a single IP address against 24 DNS blacklists including Spamhaus ZEN, Barracuda and SpamCop. Returns per-IP listing status. Free tool by Postbox Services.
after · 44% of words in common
Check an IP address against 24 IP blacklists (Spamhaus ZEN, Barracuda, SpamCop and more), OR check a domain against the domain blacklists (Spamhaus DBL etc). A domain check tests the DOMAIN itself only - to check a specific sending IP, pass that IP. Free tool by Postbox Services.

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 83 / 100

no-repository

provenance55

liveness100

freshness100

hygiene80

+dns-namespace +website +reachable +uptime-100% +updated-23d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://mcp.postboxservices.com/mcp` streamable-http	none	yes	100%	290 ms	2025-11-25	2026-10-19

Tools (8)

`analyze_eml`read-only	Run a deliverability/content analysis on a raw RFC 822 email (.eml source: full headers + body). IMPORTANT LIMITS: with no live SMTP session, SPF, blacklist and reverse-DNS cannot be verified from a file - for the authoritative score use create_mailtest instead.
`check_blacklist`read-only	Check a domain against domain blacklists (Spamhaus DBL, SURBL, URIBL and others), or an IP address against 24 IP blacklists including Spamhaus ZEN, Barracuda and SpamCop. Checks the exact target given: domains are not resolved to IPs. Returns per-list listing status.
`check_spoofability`read-only	Grade how exposed a domain is to email spoofing and business email compromise, from its public DNS (SPF, DMARC policy strength, alignment, live lookalike domains). Returns an A-F grade with findings.
`create_mailtest`	Create a disposable test address for a full email deliverability audit (score /10: SPF, DKIM, DMARC + alignment, blacklists, reverse DNS, SpamAssassin content, Gmail/Yahoo bulk-sender compliance). The USER must then send an email from the system they want to test to the returned address, after which get_mailtest_result returns the score.
`get_domain_age`read-only	Get a domain's registration date and age (young domains have weak sending reputation).
`get_mailtest_result`read-only	Fetch the score and breakdown of a mail test created with create_mailtest, once the user has sent their email to the disposable address.
`trace_redirect`read-only	Follow a URL server-side through every HTTP redirect hop to its real final destination - per-hop status, IP, TLS and timing, plus phishing/deliverability flags (cross-domain jumps, https downgrades, meta/JS redirects). Fetching is SSRF-hardened (private ranges blocked, HTTPS-only, per-hop validation); how it works: https://redirect.postboxservices.com/
`whois_lookup`read-only	WHOIS summary for a domain: registrar, created/updated/expires dates, nameservers, DNSSEC, status flags.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "com.postboxservices/postbox-tools",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-07-09/server.schema.json",
  "remotes": [
    {
      "url": "https://mcp.postboxservices.com/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.1.1",
  "websiteUrl": "https://postboxservices.com/mcp/",
  "description": "Free email checks: 24 blacklists, spoofing/BEC grade, redirect tracing, email spam test, WHOIS."
}