io.github.dmarc-examiner/mcp

mcp

Read your own DMARC aggregate and forensic reports: sources, alignment, alerts, CSV export.

1.1.0
Version
remote + npm
Transport
21
Tools

Security review

Review passed

Reviewed Jan 1, 2000.

  • tools: 21 tools scanned
  • metadata: scanned
  • packages: 1 checked

No findings.

Tools (21)

  • list_domains

    List all monitored domains in your organization

  • get_domain

    Get details of a specific domain

  • check_dmarc

    Inspect the public DMARC record at _dmarc.<domain>. The domain does not need to belong to your organization. Returns parsed policy and rua/ruf addresses.

  • create_domain

    Add a new domain to the organization. Response includes the reporting_email and dmarc_record values to publish in DNS. May return 402 if the plan domain limit has been reached.

  • verify_domain

    Re-check a domain's DNS to confirm the DMARC record contains the organization's reporting email. Updates status to verified on success.

  • delete_domain

    Remove a domain from monitoring. Soft-deletes; historical reports remain accessible.

  • list_reports

    List DMARC reports for your organization

  • get_report

    Get details of a specific DMARC report

  • get_report_statistics

    Get statistics for a specific DMARC report

  • export_report_csv

    Export a DMARC report as CSV

  • list_alerts

    List alerts for your organization

  • dismiss_alert

    Dismiss a specific alert

  • list_forensic_reports

    List DMARC RUF (forensic) reports with optional filtering and pagination. Returns 403 if the plan does not include forensic reports (Pro plan and above).

  • get_forensic_report

    Get the full detail of a forensic (RUF) report by UUID, including the raw failed message envelope.

  • get_forensic_reports_statistics

    Aggregated forensic-report counters grouped by auth failure type, delivery result, source IP (with geolocation) and reported domain.

  • get_forensic_reports_summary

    Summary of forensic activity in the last 7 days — useful for daily digest views.

  • list_webhooks

    List webhook endpoints configured for the organization. Returns 403 if the plan does not include advanced alerting (Pro and above).

  • create_webhook

    Create a new webhook endpoint. URL must start with https://. Returns 422 if the organization has reached its webhook limit.

  • update_webhook

    Update a webhook. Any combination of url, name and is_active may be provided; URL must remain HTTPS.

  • delete_webhook

    Delete a webhook endpoint permanently.

  • test_webhook

    Send a synchronous webhook.test event to verify connectivity. Returns the delivery status. Test events do NOT update last_triggered_at, last_status or failure_count.