Domain Security MCP server
Audit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys.
not scanned yet
1 stars43 downloads/wk
Reviews
Write oneNobody has reviewed Domain Security yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Domain Security tools
No tool declarations could be read from the package source. They show once the server is installed.
How Domain Security compares
Against every graded Email MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 90% of 916 Email servers
- GitHub stars
- 1
- more than 65% of 493 Email servers
- Downloads a week
- 43
- more than 30% of 235 Email servers with a package
Release history: 3 versions in the registry since 2026-09-14, latest 2026-10-16, typically one every 23 days.
Install Domain Security in Claude Code, Cursor or VS Code
Runs npx -y domain-security-mcp-server on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add domain-security-mcp-server -- npx -y domain-security-mcp-server
What the publisher says
From the Domain Security repository's README, as published. We do not edit it. Read it on GitHub
domain-security-mcp-server
An MCP server that lets an AI agent audit the email and domain security of any domain — SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI, DNSSEC, DNS, TLS/SSL and WHOIS — in plain language. No API keys required.
Built on the v2 MCP SDK: the server speaks the 2026-07-28 protocol revision and keeps accepting 2025-era clients (Claude Desktop, Claude Code, Cursor) from the same factory — the era is negotiated per connection, so there is nothing to configure on either side.
Ask Claude "Is acme.com protected against email spoofing?" and it runs a full authentication audit and hands you a graded report with prioritised fixes — instead of you pasting a domain into five different web tools.
> Is ortamarco.me protected against email spoofing?
email_auth_audit(domain="ortamarco.me")
Grade: A (95/100) · MX: present
✅ SPF ends in '-all' (hard fail). 3/10 DNS lookups.
✅ DMARC policy is enforced ('p=reject').
✅ DKIM key found for selector: google.
Top recommendation: add a TLS-RPT record for delivery-failure reports.Why this exists
The email-security ecosystem is full of single-purpose web checkers (SPF here, DMARC there, WHOIS somewhere else) and the few MCP equivalents are locked behind paid API tokens. This server brings the whole deliverability & domain-security toolkit to any MCP client, key-free, with one headline workflow tool that does the synthesis for you.
It is the agent-facing companion to the network tools at ortamarco.me and shares the same battle-tested core (public-resolver DNS, host validation, timeouts).
Tools
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Domain Security: common questions
- Is Domain Security MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Domain Security safety report
- How do I install Domain Security?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Domain Security need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Domain Security maintained?
- The last commit was 51 days ago (2026-09-14). The latest release is v1.2.3.
- What can I use instead of Domain Security?
- Servers from other publishers that do the same job: e2a — email for AI agents MCP server, e2a — email for AI agents MCP server and ContrastAPI MCP server. Compare all Domain Security alternatives.
- How does Domain Security compare with other Email MCP servers?
- safety score 92/100 (higher than 90% of 916 Email servers); github stars 1 (more than 65% of 493 Email servers); downloads a week 43 (more than 30% of 235 Email servers with a package). Full comparison.
Alternatives to Domain Security
Same job from other publishers: the closest match first, then the best rated.
- e2a — email for AI agentsAuthenticated email gateway for AI agents — per-agent inboxes, HITL approval, SPF/DKIM verified.not reviewedEstablishedA
- e2a — email for AI agentsAuthenticated email gateway for AI agents — per-agent inboxes, HITL approval, SPF/DKIM verified.not reviewedEstablishedA
ContrastAPI55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.not reviewedGrowingB
PalisadeMonitor and manage email authentication (SPF, DKIM, DMARC, MTA-STS, BIMI) for your domains.not reviewedGrowingA- NetintelMCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropaymentsnot reviewedGrowingB
