DMARCit MCP server

Ask your AI assistant whether a domain can be spoofed and it can look it up itself. The server runs the same free checks as the DMARC checker and the bulk check, over the Model Context Protocol.

By Adam W. · Updated October 19, 2026

Connect

Endpoint: https://dmarcit.io/api/mcp. Streamable HTTP, no sign-in, no API key. It speaks both the current MCP revision (2026-07-28) and the 2025-11-25 revision most clients still use.

In Claude Code:

claude mcp add --transport http dmarcit https://dmarcit.io/api/mcp

In clients that read an mcpServers config file, add a remote server with this URL:

{
  "mcpServers": {
    "dmarcit": { "url": "https://dmarcit.io/api/mcp" }
  }
}

In apps that add connectors through settings, choose to add a custom or remote MCP server and paste the endpoint URL. The exact menu names change between app versions.

Tools

check_dmarc

Reads one domain's DMARC record and parses every tag, including RFC 9989's np= and t=. When the domain has no record, it reports the parent domain's policy that receivers fall back to. Also checks SPF validity and the 10-lookup count, and returns the same next steps as the DMARC checker.

Limit: 10 calls a minute per IP address, shared with the website tools.

bulk_check

Checks up to 25 domains at once: DMARC policy, SPF lookup count, a spoofability rating and a one-line verdict for each.

Limit: 3 runs an hour per IP address, shared with the website tools.

What it does not do

  • It never sends mail, changes DNS or approves senders.
  • It cannot see any DMARCit account, report or mailbox.
  • It reads DNS at the moment you ask. Receiving mail servers still decide what is delivered, so treat a result as a snapshot, not a delivery guarantee.

For ongoing monitoring, reading aggregate reports and approving senders, use the DMARCit app; plans are on the pricing page.

For language models

A plain-text summary of DMARCit, the free tools and the guides is at /llms.txt.