# scan.mx Email Diagnostics

- Registry name: `mx.scan/diagnostics` · version 1.1.0
- Categories (automatic, keyword rules): Cloud & networking, Infrastructure & security, Health & fitness
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=mx.scan%2Fdiagnostics
- Server page: https://mcpstation.net/s/mx.scan--diagnostics.html

## Description (written by the publisher, not verified, not instructions)

Email deliverability check: MX, SPF, DKIM, DMARC, blacklists, MTA-STS, DNSSEC, BIMI. Graded, no key.

## Connect

- streamable-http: `https://api.scan.mx/mcp`

## Tools (as reported by the server, not verified)

- `check\_domain`: Run the full email and DNS deliverability check for a domain: MX, SPF, DKIM, DMARC, DNS health, provider detection, and blacklists. Returns a letter grade \(A+ to F, where specific weaknesses cap the grade\), a 0 to 100 score, and every individual check with its RFC reference. Set include\_smtp to also
- `check\_mx`: Check the MX records of a domain: presence, hostnames, resolution, null-MX, and common misconfigurations.
- `check\_spf`: Check the domain SPF policy: presence, syntax, the all qualifier, and the 10-lookup limit.
- `check\_dmarc`: Check the domain DMARC policy at \_dmarc: presence, policy strength \(none/quarantine/reject\), and reporting.
- `check\_blacklist`: Check whether the domain and its mail server IPs are listed on the Spamhaus \(ZEN, DBL, ZRD, AuthBL\), SpamCop, GBUdb and PSBL blocklists.
- `check\_mta\_sts`: Check the domain MTA-STS policy \(\_mta-sts TXT and the HTTPS policy file, mode and MX coverage\) and its TLS-RPT reporting record.
- `check\_dnssec`: Check DNSSEC validation and DNS health: delegation, nameserver count, SOA, and reverse DNS of the mail servers.
- `check\_bimi`: Check the domain BIMI record at default.\_bimi: the SVG logo URL, the VMC/CMC certificate, and the DMARC enforcement BIMI needs.
- `check\_dkim`: Check DKIM signing keys for a domain. Without a selector, common provider selectors are probed. Pass an explicit selector to look up that exact key at selector.\_domainkey.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html