Skip to content

MailX Email Deliverability

by themailx.com · remote · no sign-in to list tools · v1.0.0 · published by com.themailx

Check SPF/DKIM/DMARC/BIMI, blacklists, SMTP/IMAP; DNS lookups; generate email DNS records.

Changes · 12

17 tools: 12 change things and 5 only read.

Scanned Oct 21, 2026

6 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http email-deliverability https://themailx.com/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn4 info
  • The server marks "dmarc_generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "dmarc_generate" says "generate": a word for a change.

    What this check looks for
  • The server marks "spf_generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "spf_generate" says "generate": a word for a change.

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...l account they control and provides its credentials. Connects to the SMTP server and report..."

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...a mailbox they control and provides its credentials. Connects to the IMAP server and report..."

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...setup guide. Never asks for the user's credentials."

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...setup guide. Never asks for the user's credentials."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

17 tools

Changes things 12Claude Code: ask
  • audit_domainUse this when the user asks why their emails go to spam or wants a full deliverability check of a domain.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Use this when the user asks why their emails go to spam or wants a full deliverability check of a domain. Runs SPF, DKIM (finds the selector on its own), DMARC, blacklist and MX checks in one call and returns pass, warning or fail for each, an overall result, and the fixes to apply in priority order with help links. Takes about 10 seconds. mailX never changes DNS.

    Annotations the server declares

    • title: Audit Domain
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • bimi_checkUse this when the user asks about BIMI or showing a brand logo next to their emails in inboxes.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Use this when the user asks about BIMI or showing a brand logo next to their emails in inboxes. Returns the live BIMI record, the logo URL it declares, and a fix suggestion.

    Annotations the server declares

    • title: BIMI Check
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • blacklist_checkUse this when the user suspects their domain is blacklisted or blocked.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Use this when the user suspects their domain is blacklisted or blocked. Checks the domain against major DNS blocklists and returns the result for each list.

    Annotations the server declares

    • title: Blacklist Check
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • dkim_checkUse this when the user wants to verify DKIM for a domain.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Use this when the user wants to verify DKIM for a domain. Pass the DKIM selector if known (for example google for Google Workspace, selector1 or selector2 for Microsoft 365). If the selector is unknown, omit it: mailX then tries common selectors and returns the ones it finds. Returns the published key and its status. A miss on common selectors does not prove DKIM is absent.

    Annotations the server declares

    • title: DKIM Check
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • dmarc_checkUse this when the user asks about DMARC, spoofing protection, or what happens to emails that fail authentication.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Use this when the user asks about DMARC, spoofing protection, or what happens to emails that fail authentication. Returns the live DMARC record, its policy and a fix suggestion.

    Annotations the server declares

    • title: DMARC Check
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • dmarc_generateUse this when the user needs a DMARC record.1 finding

    Why it is in this group

    • The name "dmarc_generate" says "generate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "dmarc_generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "dmarc_generate" says "generate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Use this when the user needs a DMARC record. Returns the record name, value and type ready to publish. mailX does not publish it.

    Annotations the server declares

    • title: DMARC Generator
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • imap_checkUse this only when the user explicitly asks to test an IMAP login for a mailbox they control and provides its credentials.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...a mailbox they control and provides its credentials. Connects to the IMAP server and report..."

      What this check looks for
    Description, as the server wrote it
    Use this only when the user explicitly asks to test an IMAP login for a mailbox they control and provides its credentials. Connects to the IMAP server and reports whether connection, encryption and authentication succeed. Credentials are not stored.

    Annotations the server declares

    • title: IMAP Check
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • imap_finderUse this when the user needs the incoming mail (IMAP) server settings for an email provider, such as Gmail, Outlook, Yahoo, iCloud or Zoho.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...setup guide. Never asks for the user's credentials."

      What this check looks for
    Description, as the server wrote it
    Use this when the user needs the incoming mail (IMAP) server settings for an email provider, such as Gmail, Outlook, Yahoo, iCloud or Zoho. Returns the host, ports with encryption and the provider's setup guide. Never asks for the user's credentials.

    Annotations the server declares

    • title: IMAP Finder
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • smtp_checkUse this only when the user explicitly asks to test an SMTP login for a mail account they control and provides its credentials.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...l account they control and provides its credentials. Connects to the SMTP server and report..."

      What this check looks for
    Description, as the server wrote it
    Use this only when the user explicitly asks to test an SMTP login for a mail account they control and provides its credentials. Connects to the SMTP server and reports whether connection, encryption and authentication succeed. If from_email and to_email are both given, it also sends one test email. Credentials are not stored.

    Annotations the server declares

    • title: SMTP Check
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • smtp_finderUse this when the user needs the outgoing mail (SMTP) server settings for an email provider or sending service, such as Gmail, Outlook, Microsoft 365, Zoho, Amazon SES or SendGrid.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...setup guide. Never asks for the user's credentials."

      What this check looks for
    Description, as the server wrote it
    Use this when the user needs the outgoing mail (SMTP) server settings for an email provider or sending service, such as Gmail, Outlook, Microsoft 365, Zoho, Amazon SES or SendGrid. Returns the host, ports with encryption, what to use to log in, and the provider's setup guide. Never asks for the user's credentials.

    Annotations the server declares

    • title: SMTP Finder
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • spf_checkUse this when the user asks whether a domain's SPF record is valid, which servers may send email for a domain, or why SPF fails.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Use this when the user asks whether a domain's SPF record is valid, which servers may send email for a domain, or why SPF fails. Returns the live SPF record, a pass/fail status and a fix suggestion.

    Annotations the server declares

    • title: SPF Check
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • spf_generateUse this when the user needs a new SPF record for their email provider.1 finding

    Why it is in this group

    • The name "spf_generate" says "generate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "spf_generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "spf_generate" says "generate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Use this when the user needs a new SPF record for their email provider. Returns a TXT record ready to publish, or explains what to set up instead when the provider does not need a root SPF include. mailX does not publish it.

    Annotations the server declares

    • title: SPF Generator
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 5Claude Code: allow
  • cname_lookupUse this when the user wants to know whether a hostname is an alias of another one, for example to verify DKIM or tracking CNAMEs.No findings

    Why it is in this group

    • The name "cname_lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    Use this when the user wants to know whether a hostname is an alias of another one, for example to verify DKIM or tracking CNAMEs. Returns the live CNAME target.

    Annotations the server declares

    • title: CNAME Lookup
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • dns_lookupUse this when the user wants every DNS record for a domain in one view (A, AAAA, CNAME, MX, NS, TXT, SOA).No findings

    Why it is in this group

    • The name "dns_lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    Use this when the user wants every DNS record for a domain in one view (A, AAAA, CNAME, MX, NS, TXT, SOA). Returns the live records grouped by type.

    Annotations the server declares

    • title: DNS Lookup
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • mx_lookupUse this when the user wants to know which mail servers receive email for a domain.No findings

    Why it is in this group

    • The name "mx_lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    Use this when the user wants to know which mail servers receive email for a domain. Returns the domain's live MX records with their priorities.

    Annotations the server declares

    • title: MX Lookup
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • ptr_lookupUse this when the user wants the reverse DNS (PTR) of an IP address, for example to check a sending server's reverse DNS.No findings

    Why it is in this group

    • The name "ptr_lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    Use this when the user wants the reverse DNS (PTR) of an IP address, for example to check a sending server's reverse DNS. Returns the hostname the IP resolves to.

    Annotations the server declares

    • title: PTR Lookup
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • txt_lookupUse this when the user wants to see a domain's TXT records, for example to find verification tokens or check what SPF or other policies are published.No findings

    Why it is in this group

    • The name "txt_lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    Use this when the user wants to see a domain's TXT records, for example to find verification tokens or check what SPF or other policies are published. Returns all live TXT records.

    Annotations the server declares

    • title: TXT Lookup
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http email-deliverability https://themailx.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__email-deliverability__mx_lookup",
      "mcp__email-deliverability__txt_lookup",
      "mcp__email-deliverability__cname_lookup",
      "mcp__email-deliverability__ptr_lookup",
      "mcp__email-deliverability__dns_lookup"
    ],
    "ask": [
      "mcp__email-deliverability__audit_domain",
      "mcp__email-deliverability__spf_check",
      "mcp__email-deliverability__dkim_check",
      "mcp__email-deliverability__dmarc_check",
      "mcp__email-deliverability__bimi_check",
      "mcp__email-deliverability__dmarc_generate",
      "mcp__email-deliverability__spf_generate",
      "mcp__email-deliverability__smtp_check",
      "mcp__email-deliverability__imap_check",
      "mcp__email-deliverability__smtp_finder",
      "mcp__email-deliverability__imap_finder",
      "mcp__email-deliverability__blacklist_check"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as email-deliverability. Review it before you use it.