Is io.github.OrtaMarco/domain-security-mcp-server safe to use?

io.github.OrtaMarco/domain-security-mcp-server has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.

How do I install io.github.OrtaMarco/domain-security-mcp-server?

io.github.OrtaMarco/domain-security-mcp-server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.OrtaMarco/domain-security-mcp-server do?

io.github.OrtaMarco/domain-security-mcp-server provides 5 tools: Tools, Install, Security, Develop, License. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.OrtaMarco/domain-security-mcp-server?

io.github.OrtaMarco/domain-security-mcp-server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.OrtaMarco/domain-security-mcp-server actively maintained?

io.github.OrtaMarco/domain-security-mcp-server is actively maintained - last commit was 3 days ago. It has 2 GitHub stars.

io.github.OrtaMarco/domain-security-mcp-server

domain-security-mcp-server

Audit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys.

2 324/wk 5 tools GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 3d ago

Works with most clients

Transport: stdio, sse, http

5 tools · ~143 tok

Grade A · 0.1% of 200K ctx

MCPpedia last refreshed this data 1d ago

Edit this pageView history

io.github.OrtaMarco/domain-security-mcp-server is an MCP server that audit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 85/100 on MCPpedia's security, maintenance and efficiency rubric.

Communication

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "domain-security": {
      "args": [
        "-y",
        "domain-security-mcp-server"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-ortamarco-domain-security-mcp-server)](https://mcppedia.org/s/io-github-ortamarco-domain-security-mcp-server)

Read me

What io.github.OrtaMarco/domain-security-mcp-server does

Audit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y 'domain-security-mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

85/100across 5 weighted dimensions

How we score →

0255075100

−15

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked domain-security-mcp-server against OSV.dev.

Inventory

Tools (5)

Click any tool to inspect its schema.

~143 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.OrtaMarco/domain-security-mcp-server safe to use?: io.github.OrtaMarco/domain-security-mcp-server has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.OrtaMarco/domain-security-mcp-server?: io.github.OrtaMarco/domain-security-mcp-server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.OrtaMarco/domain-security-mcp-server do?: io.github.OrtaMarco/domain-security-mcp-server provides 5 tools: Tools, Install, Security, Develop, License. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.OrtaMarco/domain-security-mcp-server?: io.github.OrtaMarco/domain-security-mcp-server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.OrtaMarco/domain-security-mcp-server actively maintained?: io.github.OrtaMarco/domain-security-mcp-server is actively maintained - last commit was 3 days ago. It has 2 GitHub stars.

Similar servers

Others in communication

View all →

io.github.team-telnyx/telnyx95

Official TypeScript library for the Telnyx API

198 8

Textbee92

Open-source SMS gateway. Turn your Android phone into an SMS API: send and receive SMS from your apps over REST and webhooks. Self-hostable, with a free hosted plan.

3.4k 3

app.mailtea/mailtea92

Send email and newsletters with Mailtea over MCP, plus skills for email and website design.

io.github.labaccessnow/secops-field-notes-mcp92

CVSS scoring, IOC extraction, email header triage, hash/JWT/timestamp decoding, CISA KEV lookup.

MCP Security Weekly

Get CVE alerts and security updates for io.github.OrtaMarco/domain-security-mcp-server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Communication

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "domain-security": {
      "args": [
        "-y",
        "domain-security-mcp-server"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-ortamarco-domain-security-mcp-server)](https://mcppedia.org/s/io-github-ortamarco-domain-security-mcp-server)

Read me

What io.github.OrtaMarco/domain-security-mcp-server does

Audit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y 'domain-security-mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

domain-security-mcp-server

An MCP server that lets an AI agent audit the email and domain security of any domain — SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI, DNSSEC, DNS, TLS/SSL and WHOIS — in plain language. No API keys required.

Built on the v2 MCP SDK: the server speaks the 2026-07-28 protocol revision and keeps accepting 2025-era clients (Claude Desktop, Claude Code, Cursor) from the same factory — the era is negotiated per connection, so there is nothing to configure on either side.

Ask Claude "Is acme.com protected against email spoofing?" and it runs a full authentication audit and hands you a graded report with prioritised fixes — instead of you pasting a domain into five different web tools.

> Is ortamarco.me protected against email spoofing?

  email_auth_audit(domain="ortamarco.me")

  Grade: A (95/100) · MX: present
  ✅ SPF ends in '-all' (hard fail). 3/10 DNS lookups.
  ✅ DMARC policy is enforced ('p=reject').
  ✅ DKIM key found for selector: google.
  Top recommendation: add a TLS-RPT record for delivery-failure reports.

Why this exists

The email-security ecosystem is full of single-purpose web checkers (SPF here, DMARC there, WHOIS somewhere else) and the few MCP equivalents are locked behind paid API tokens. This server brings the whole deliverability & domain-security toolkit to any MCP client, key-free, with one headline workflow tool that does the synthesis for you.

It is the agent-facing companion to the network tools at ortamarco.me and shares the same battle-tested core (public-resolver DNS, host validation, timeouts).

Tools

Tool	What it does
`email_auth_audit` ⭐	One-call SPF + DKIM + DMARC + MX audit → 0–100 score, A–F grade, prioritised fixes
`spf_check`	Parse SPF; recursively count DNS lookups vs the RFC 7208 limit of 10; flag `+all`/`?all`
`dmarc_check`	Parse the DMARC record (every tag is returned) and flag a missing or invalid `p`, `p=none`, no `rua` and `pct` under 100
`dkim_check`	Probe `<selector>._domainkey` keys (supply selectors or use common ones)
`mta_sts_check`	Validate the `_mta-sts` TXT and the `.well-known/mta-sts.txt` policy + mode
`tls_rpt_check`	Check the `_smtp._tls` TLS-RPT record
`bimi_check`	Check the `default._bimi` BIMI record
`dnssec_check`	DS/DNSKEY presence + DNSSEC `AD` validation flag (via DoH)
`dns_lookup`	All record types (A/AAAA/CNAME/MX/NS/TXT/SOA) via public resolvers
`ssl_certificate`	TLS cert issuer, validity window, days-to-expiry, SANs, fingerprint
`whois_lookup`	Registrar, dates, name servers, status (raw port-43 WHOIS, IANA-resolved)
`reverse_dns`	PTR records for an IP
`ip_geolocation`	Offline IP geolocation (DB-IP Lite) + reverse DNS
`mx_lookup`	Mail servers (MX) with priority and resolved IPs
`caa_check`	Which CAs may issue TLS certificates (CAA records)
`blacklist_check`	IP/domain against open-access email DNSBLs
`dns_propagation`	Compare a record across 5 public resolvers worldwide
`http_security_headers`	Grade a site's HSTS, CSP, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy and COOP (an HSTS `max-age=0` earns nothing)
`analyze_email_headers`	Parse raw headers → SPF/DKIM/DMARC verdicts + Receiv

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

85/100across 5 weighted dimensions

How we score →

0255075100

−15

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked domain-security-mcp-server against OSV.dev.

Inventory

Tools (5)

Click any tool to inspect its schema.

~143 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.OrtaMarco/domain-security-mcp-server safe to use?: io.github.OrtaMarco/domain-security-mcp-server has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.OrtaMarco/domain-security-mcp-server?: io.github.OrtaMarco/domain-security-mcp-server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.OrtaMarco/domain-security-mcp-server do?: io.github.OrtaMarco/domain-security-mcp-server provides 5 tools: Tools, Install, Security, Develop, License. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.OrtaMarco/domain-security-mcp-server?: io.github.OrtaMarco/domain-security-mcp-server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.OrtaMarco/domain-security-mcp-server actively maintained?: io.github.OrtaMarco/domain-security-mcp-server is actively maintained - last commit was 3 days ago. It has 2 GitHub stars.

Similar servers

Others in communication

View all →

io.github.team-telnyx/telnyx95

Official TypeScript library for the Telnyx API

198 8

Textbee92

Open-source SMS gateway. Turn your Android phone into an SMS API: send and receive SMS from your apps over REST and webhooks. Self-hostable, with a free hosted plan.

3.4k 3

app.mailtea/mailtea92

Send email and newsletters with Mailtea over MCP, plus skills for email and website design.

io.github.labaccessnow/secops-field-notes-mcp92

CVSS scoring, IOC extraction, email header triage, hash/JWT/timestamp decoding, CISA KEV lookup.

MCP Security Weekly

Get CVE alerts and security updates for io.github.OrtaMarco/domain-security-mcp-server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?