io.github.dmarc-examiner/mcp

by dmarc-examiner · remote · local (npm) · no sign-in to list tools · v1.1.0 · published by GitHub user dmarc-examiner

Read your own DMARC aggregate and forensic reports: sources, alignment, alerts, CSV export.

Deletes · 2Final · 1Changes · 6

Compare Registry entry

21 tools: 2 can delete or cancel things, 1 do something that can't be undone, 6 change things and 12 only read.

Scanned Oct 21, 2026

Deletes or cancels2Claude Code: deny: see these tools
Can't be undone1Claude Code: ask: see these tools
Changes things6Claude Code: ask: see these tools
Only reads12Claude Code: allow: see these tools

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http dmarc-examiner https://mcp.dmarc-examiner.com/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

21 tools

Deletes or cancels 2Removes, cancels or revokes something.Claude Code: deny

delete_domainRemove a domain from monitoring.No findings
Why it is in this group
- The name "delete_domain" says "delete": a word for removing or ending something.
Description, as the server wrote it
Remove a domain from monitoring. Soft-deletes; historical reports remain accessible.
delete_webhookDelete a webhook endpoint permanently.No findings
Why it is in this group
- The name "delete_webhook" says "delete": a word for removing or ending something.
Description, as the server wrote it
Delete a webhook endpoint permanently.

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

test_webhookSend a synchronous webhook.test event to verify connectivity.Can send data outNo findings
Why it is in this group
- The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
What it can reach
- outboundThe description's first verb is "send": it sends or publishes something to other people.
Description, as the server wrote it
Send a synchronous webhook.test event to verify connectivity. Returns the delivery status. Test events do NOT update last_triggered_at, last_status or failure_count.

Changes things 6Creates or changes something that can be changed back.Claude Code: ask

create_domainAdd a new domain to the organization.No findings
Why it is in this group
- The name "create_domain" says "create": a word for a change.
Description, as the server wrote it
Add a new domain to the organization. Response includes the reporting_email and dmarc_record values to publish in DNS. May return 402 if the plan domain limit has been reached.
create_webhookCreate a new webhook endpoint.Can send data outNo findings
Why it is in this group
- The name "create_webhook" says "create": a word for a change.
What it can reach
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Create a new webhook endpoint. URL must start with https://. Returns 422 if the organization has reached its webhook limit.
dismiss_alertDismiss a specific alertNo findings
Why it is in this group
- The name "dismiss_alert" says "dismiss": a word for a change.
Description, as the server wrote it
Dismiss a specific alert
export_report_csvExport a DMARC report as CSVNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Export a DMARC report as CSV
update_webhookUpdate a webhook.Can send data outNo findings
Why it is in this group
- The name "update_webhook" says "update": a word for a change.
What it can reach
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Update a webhook. Any combination of url, name and is_active may be provided; URL must remain HTTPS.
verify_domainRe-check a domain's DNS to confirm the DMARC record contains the organization's reporting email.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Re-check a domain's DNS to confirm the DMARC record contains the organization's reporting email. Updates status to verified on success.

Only reads 12Looks things up and changes nothing.Claude Code: allow

check_dmarcInspect the public DMARC record at _dmarc.<domain>.No findings
Why it is in this group
- The description's first verb is "inspect": a word for reading.
Description, as the server wrote it
Inspect the public DMARC record at _dmarc.<domain>. The domain does not need to belong to your organization. Returns parsed policy and rua/ruf addresses.
get_domainGet details of a specific domainNo findings
Why it is in this group
- The name "get_domain" says "get": a word for reading.
Description, as the server wrote it
Get details of a specific domain
get_forensic_reportGet the full detail of a forensic (RUF) report by UUID, including the raw failed message envelope.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_forensic_report" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "get" and "message": it reads messages.
- untrusted-inputThe description's first sentence says "get" and "message": it reads messages, which other people can write.
Description, as the server wrote it
Get the full detail of a forensic (RUF) report by UUID, including the raw failed message envelope.
get_forensic_reports_statisticsAggregated forensic-report counters grouped by auth failure type, delivery result, source IP (with geolocation) and reported domain.No findings
Why it is in this group
- The name "get_forensic_reports_statistics" says "get": a word for reading.
Description, as the server wrote it
Aggregated forensic-report counters grouped by auth failure type, delivery result, source IP (with geolocation) and reported domain.
get_forensic_reports_summarySummary of forensic activity in the last 7 days — useful for daily digest views.No findings
Why it is in this group
- The name "get_forensic_reports_summary" says "get": a word for reading.
Description, as the server wrote it
Summary of forensic activity in the last 7 days — useful for daily digest views.
get_reportGet details of a specific DMARC reportNo findings
Why it is in this group
- The name "get_report" says "get": a word for reading.
Description, as the server wrote it
Get details of a specific DMARC report
get_report_statisticsGet statistics for a specific DMARC reportNo findings
Why it is in this group
- The name "get_report_statistics" says "get": a word for reading.
Description, as the server wrote it
Get statistics for a specific DMARC report
list_alertsList alerts for your organizationNo findings
Why it is in this group
- The name "list_alerts" says "list": a word for reading.
Description, as the server wrote it
List alerts for your organization
list_domainsList all monitored domains in your organizationNo findings
Why it is in this group
- The name "list_domains" says "list": a word for reading.
Description, as the server wrote it
List all monitored domains in your organization
list_forensic_reportsList DMARC RUF (forensic) reports with optional filtering and pagination.No findings
Why it is in this group
- The name "list_forensic_reports" says "list": a word for reading.
Description, as the server wrote it
List DMARC RUF (forensic) reports with optional filtering and pagination. Returns 403 if the plan does not include forensic reports (Pro plan and above).
list_reportsList DMARC reports for your organizationNo findings
Why it is in this group
- The name "list_reports" says "list": a word for reading.
Description, as the server wrote it
List DMARC reports for your organization
list_webhooksList webhook endpoints configured for the organization.No findings
Why it is in this group
- The name "list_webhooks" says "list": a word for reading.
Description, as the server wrote it
List webhook endpoints configured for the organization. Returns 403 if the plan does not include advanced alerting (Pro and above).

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

3 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 untrusted-input tool breaks every one.

Reads private data1: Reads files, mail, messages, databases, secrets, calendars or repositories.; get_forensic_report
Reads text others write1: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; get_forensic_report
Can send data out3: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; create_webhook
test_webhook
update_webhook

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__dmarc-examiner__get_forensic_report"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Looked at Oct 22, 2026, 14:58 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 200
tools/list served without credentials: yes
Tools that change things, listed without credentials: 9
Protocol version: 2025-06-18
WWW-Authenticate on 401: not observed
resource_metadata in WWW-Authenticate: none
RFC 9728 protected resource metadata: https://mcp.dmarc-examiner.com/.well-known/oauth-protected-resource/mcp
Authorization servers: https://mcp.dmarc-examiner.com
Legacy HTTP+SSE transport: no
Dynamic client registration: yes
Client ID metadata documents: no

HighThe whole server
The endpoint served tools/list without credentials, and the list has 9 tools that change things (2 destructive, 1 irreversible, 6 write). Whether a call also works without credentials was not tested: tools are never called.
Matched text
https://mcp.dmarc-examiner.com/mcp: tools/list returned 21 tools to an anonymous client, including delete_domain (destructive), delete_webhook (destructive), test_webhook (irreversible), create_domain (write), verify_domain (write) and 4 more
What this check looks for

Install

Pinned to version 1.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http dmarc-examiner https://mcp.dmarc-examiner.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__dmarc-examiner__list_domains",
      "mcp__dmarc-examiner__get_domain",
      "mcp__dmarc-examiner__check_dmarc",
      "mcp__dmarc-examiner__list_reports",
      "mcp__dmarc-examiner__get_report",
      "mcp__dmarc-examiner__get_report_statistics",
      "mcp__dmarc-examiner__list_alerts",
      "mcp__dmarc-examiner__list_forensic_reports",
      "mcp__dmarc-examiner__get_forensic_report",
      "mcp__dmarc-examiner__get_forensic_reports_statistics",
      "mcp__dmarc-examiner__get_forensic_reports_summary",
      "mcp__dmarc-examiner__list_webhooks"
    ],
    "ask": [
      "mcp__dmarc-examiner__create_domain",
      "mcp__dmarc-examiner__verify_domain",
      "mcp__dmarc-examiner__export_report_csv",
      "mcp__dmarc-examiner__dismiss_alert",
      "mcp__dmarc-examiner__create_webhook",
      "mcp__dmarc-examiner__update_webhook",
      "mcp__dmarc-examiner__test_webhook"
    ],
    "deny": [
      "mcp__dmarc-examiner__delete_domain",
      "mcp__dmarc-examiner__delete_webhook"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as dmarc-examiner. Review it before you use it.

Capability tags behind 4 rules

mcp__dmarc-examiner__get_forensic_report private-data, untrusted-input
mcp__dmarc-examiner__create_webhook outbound
mcp__dmarc-examiner__update_webhook outbound
mcp__dmarc-examiner__test_webhook outbound

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.dmarc-examiner/mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

9 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:32 UTC.

For agents: Markdown · JSON · report this listing