All servers · Cloud & networking · Health & fitness

scan.mx Email Diagnostics

mx.scan/diagnostics · v1.1.0

Measured by MCP Station

Last check	Reachable
Checked at	—
Check success 7 / 30 days	—
First-try success 30 days	—
Median response	—
Lookups 30 days	—
Authentication	No auth
MCP version	2025-06-18
Rank score	—
Declared risk	Read-only (all tools declare readOnlyHint)
Capabilities declared	tools
Tool definitions	9 tools · with description 100% · input schema is an object 100% · read/destructive hints 100%

Email deliverability check: MX, SPF, DKIM, DMARC, blacklists, MTA-STS, DNSSEC, BIMI. Graded, no key.

streamable-http · https://api.scan.mx/mcp

claude mcp add --transport http diagnostics https://api.scan.mx/mcp

{
  "mcpServers": {
    "diagnostics": {
      "url": "https://api.scan.mx/mcp"
    }
  }
}

check_domain
Run the full email and DNS deliverability check for a domain: MX, SPF, DKIM, DMARC, DNS health, provider detection, and blacklists. Returns a letter grade (A+ to F, where specific weaknesses cap the grade), a 0 to 100 score, and every individual check with its RFC reference. Set include_smtp to also
check_mx
Check the MX records of a domain: presence, hostnames, resolution, null-MX, and common misconfigurations.
check_spf
Check the domain SPF policy: presence, syntax, the all qualifier, and the 10-lookup limit.
check_dmarc
Check the domain DMARC policy at _dmarc: presence, policy strength (none/quarantine/reject), and reporting.
check_blacklist
Check whether the domain and its mail server IPs are listed on the Spamhaus (ZEN, DBL, ZRD, AuthBL), SpamCop, GBUdb and PSBL blocklists.
check_mta_sts
Check the domain MTA-STS policy (_mta-sts TXT and the HTTPS policy file, mode and MX coverage) and its TLS-RPT reporting record.
check_dnssec
Check DNSSEC validation and DNS health: delegation, nameserver count, SOA, and reverse DNS of the mail servers.
check_bimi
Check the domain BIMI record at default._bimi: the SVG logo URL, the VMC/CMC certificate, and the DMARC enforcement BIMI needs.
check_dkim
Check DKIM signing keys for a domain. Without a selector, common provider selectors are probed. Pass an explicit selector to look up that exact key at selector._domainkey.

Website · JSON · Text for agents · Registry updated 2026-10-13