MailX Email Deliverability
by themailx.com · remote · no sign-in to list tools · v1.0.0 · published by com.themailx
Check SPF/DKIM/DMARC/BIMI, blacklists, SMTP/IMAP; DNS lookups; generate email DNS records.
17 tools: 12 change things and 5 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things12Claude Code: ask: see these tools
- Only reads5Claude Code: allow: see these tools
6 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http email-deliverability https://themailx.com/mcpFindings
Matches of fixed checks, with the text they matched.
- Warndmarc_generate
The server marks "dmarc_generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "dmarc_generate" says "generate": a word for a change.
- Warnspf_generate
The server marks "spf_generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "spf_generate" says "generate": a word for a change.
- Infosmtp_check
The description mentions "credentials".
What this check looks forMatched text
description: "...l account they control and provides its credentials. Connects to the SMTP server and report..."
- Infoimap_check
The description mentions "credentials".
What this check looks forMatched text
description: "...a mailbox they control and provides its credentials. Connects to the IMAP server and report..."
- Infosmtp_finder
The description mentions "credentials".
What this check looks forMatched text
description: "...setup guide. Never asks for the user's credentials."
- Infoimap_finder
The description mentions "credentials".
What this check looks forMatched text
description: "...setup guide. Never asks for the user's credentials."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
17 tools
Changes things 12Claude Code: ask
audit_domainUse this when the user asks why their emails go to spam or wants a full deliverability check of a domain.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use this when the user asks why their emails go to spam or wants a full deliverability check of a domain. Runs SPF, DKIM (finds the selector on its own), DMARC, blacklist and MX checks in one call and returns pass, warning or fail for each, an overall result, and the fixes to apply in priority order with help links. Takes about 10 seconds. mailX never changes DNS.
Annotations the server declares
- title: Audit Domain
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
bimi_checkUse this when the user asks about BIMI or showing a brand logo next to their emails in inboxes.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use this when the user asks about BIMI or showing a brand logo next to their emails in inboxes. Returns the live BIMI record, the logo URL it declares, and a fix suggestion.
Annotations the server declares
- title: BIMI Check
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
blacklist_checkUse this when the user suspects their domain is blacklisted or blocked.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use this when the user suspects their domain is blacklisted or blocked. Checks the domain against major DNS blocklists and returns the result for each list.
Annotations the server declares
- title: Blacklist Check
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
dkim_checkUse this when the user wants to verify DKIM for a domain.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use this when the user wants to verify DKIM for a domain. Pass the DKIM selector if known (for example google for Google Workspace, selector1 or selector2 for Microsoft 365). If the selector is unknown, omit it: mailX then tries common selectors and returns the ones it finds. Returns the published key and its status. A miss on common selectors does not prove DKIM is absent.
Annotations the server declares
- title: DKIM Check
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
dmarc_checkUse this when the user asks about DMARC, spoofing protection, or what happens to emails that fail authentication.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use this when the user asks about DMARC, spoofing protection, or what happens to emails that fail authentication. Returns the live DMARC record, its policy and a fix suggestion.
Annotations the server declares
- title: DMARC Check
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
dmarc_generateUse this when the user needs a DMARC record.1 finding
Why it is in this group
- The name "dmarc_generate" says "generate": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "dmarc_generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "dmarc_generate" says "generate": a word for a change.
Description, as the server wrote it Use this when the user needs a DMARC record. Returns the record name, value and type ready to publish. mailX does not publish it.
Annotations the server declares
- title: DMARC Generator
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
imap_checkUse this only when the user explicitly asks to test an IMAP login for a mailbox they control and provides its credentials.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "...a mailbox they control and provides its credentials. Connects to the IMAP server and report..."
Description, as the server wrote it Use this only when the user explicitly asks to test an IMAP login for a mailbox they control and provides its credentials. Connects to the IMAP server and reports whether connection, encryption and authentication succeed. Credentials are not stored.
Annotations the server declares
- title: IMAP Check
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
imap_finderUse this when the user needs the incoming mail (IMAP) server settings for an email provider, such as Gmail, Outlook, Yahoo, iCloud or Zoho.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "...setup guide. Never asks for the user's credentials."
Description, as the server wrote it Use this when the user needs the incoming mail (IMAP) server settings for an email provider, such as Gmail, Outlook, Yahoo, iCloud or Zoho. Returns the host, ports with encryption and the provider's setup guide. Never asks for the user's credentials.
Annotations the server declares
- title: IMAP Finder
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
smtp_checkUse this only when the user explicitly asks to test an SMTP login for a mail account they control and provides its credentials.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "...l account they control and provides its credentials. Connects to the SMTP server and report..."
Description, as the server wrote it Use this only when the user explicitly asks to test an SMTP login for a mail account they control and provides its credentials. Connects to the SMTP server and reports whether connection, encryption and authentication succeed. If from_email and to_email are both given, it also sends one test email. Credentials are not stored.
Annotations the server declares
- title: SMTP Check
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
smtp_finderUse this when the user needs the outgoing mail (SMTP) server settings for an email provider or sending service, such as Gmail, Outlook, Microsoft 365, Zoho, Amazon SES or SendGrid.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "...setup guide. Never asks for the user's credentials."
Description, as the server wrote it Use this when the user needs the outgoing mail (SMTP) server settings for an email provider or sending service, such as Gmail, Outlook, Microsoft 365, Zoho, Amazon SES or SendGrid. Returns the host, ports with encryption, what to use to log in, and the provider's setup guide. Never asks for the user's credentials.
Annotations the server declares
- title: SMTP Finder
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
spf_checkUse this when the user asks whether a domain's SPF record is valid, which servers may send email for a domain, or why SPF fails.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use this when the user asks whether a domain's SPF record is valid, which servers may send email for a domain, or why SPF fails. Returns the live SPF record, a pass/fail status and a fix suggestion.
Annotations the server declares
- title: SPF Check
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
spf_generateUse this when the user needs a new SPF record for their email provider.1 finding
Why it is in this group
- The name "spf_generate" says "generate": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "spf_generate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "spf_generate" says "generate": a word for a change.
Description, as the server wrote it Use this when the user needs a new SPF record for their email provider. Returns a TXT record ready to publish, or explains what to set up instead when the provider does not need a root SPF include. mailX does not publish it.
Annotations the server declares
- title: SPF Generator
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
Only reads 5Claude Code: allow
cname_lookupUse this when the user wants to know whether a hostname is an alias of another one, for example to verify DKIM or tracking CNAMEs.No findings
Why it is in this group
- The name "cname_lookup" says "lookup": a word for reading.
Description, as the server wrote it Use this when the user wants to know whether a hostname is an alias of another one, for example to verify DKIM or tracking CNAMEs. Returns the live CNAME target.
Annotations the server declares
- title: CNAME Lookup
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
dns_lookupUse this when the user wants every DNS record for a domain in one view (A, AAAA, CNAME, MX, NS, TXT, SOA).No findings
Why it is in this group
- The name "dns_lookup" says "lookup": a word for reading.
Description, as the server wrote it Use this when the user wants every DNS record for a domain in one view (A, AAAA, CNAME, MX, NS, TXT, SOA). Returns the live records grouped by type.
Annotations the server declares
- title: DNS Lookup
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
mx_lookupUse this when the user wants to know which mail servers receive email for a domain.No findings
Why it is in this group
- The name "mx_lookup" says "lookup": a word for reading.
Description, as the server wrote it Use this when the user wants to know which mail servers receive email for a domain. Returns the domain's live MX records with their priorities.
Annotations the server declares
- title: MX Lookup
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
ptr_lookupUse this when the user wants the reverse DNS (PTR) of an IP address, for example to check a sending server's reverse DNS.No findings
Why it is in this group
- The name "ptr_lookup" says "lookup": a word for reading.
Description, as the server wrote it Use this when the user wants the reverse DNS (PTR) of an IP address, for example to check a sending server's reverse DNS. Returns the hostname the IP resolves to.
Annotations the server declares
- title: PTR Lookup
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
txt_lookupUse this when the user wants to see a domain's TXT records, for example to find verification tokens or check what SPF or other policies are published.No findings
Why it is in this group
- The name "txt_lookup" says "lookup": a word for reading.
Description, as the server wrote it Use this when the user wants to see a domain's TXT records, for example to find verification tokens or check what SPF or other policies are published. Returns all live TXT records.
Annotations the server declares
- title: TXT Lookup
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http email-deliverability https://themailx.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__email-deliverability__mx_lookup",
"mcp__email-deliverability__txt_lookup",
"mcp__email-deliverability__cname_lookup",
"mcp__email-deliverability__ptr_lookup",
"mcp__email-deliverability__dns_lookup"
],
"ask": [
"mcp__email-deliverability__audit_domain",
"mcp__email-deliverability__spf_check",
"mcp__email-deliverability__dkim_check",
"mcp__email-deliverability__dmarc_check",
"mcp__email-deliverability__bimi_check",
"mcp__email-deliverability__dmarc_generate",
"mcp__email-deliverability__spf_generate",
"mcp__email-deliverability__smtp_check",
"mcp__email-deliverability__imap_check",
"mcp__email-deliverability__smtp_finder",
"mcp__email-deliverability__imap_finder",
"mcp__email-deliverability__blacklist_check"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as email-deliverability. Review it before you use it.