io.inboxguard/email-deliverability

Est-ce que io.inboxguard/email-deliverability est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.inboxguard/email-deliverability » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 28 outils

• analyze_headers≈ 294 tokens

  Re-verify SPF, DKIM, DMARC, and ARC from a raw RFC 5322 email (full message or just the headers block). Returns InboxGuard's independent verdict (`ours`), the sender's own Authentication-Results (`theirs`), whether they `agree`, and parsed envelope/headers — useful for spotting forged or mismatched auth results. No account needed.

  Paramètres, retour & exemple (4)

  Paramètres

  • helo · string · optionnel
    Optional: the SMTP HELO/EHLO domain.
  • message · string · requis
    The raw email — full RFC 5322 message, or at least the headers block (Received, Authentication-Results, DKIM-Signature, From, …).
  • mailFrom · string · optionnel
    Optional: the envelope MAIL FROM (return-path) address.
  • senderIp · string · optionnel
    Optional: connecting IP to evaluate SPF against (overrides the IP parsed from Received headers).

  Exemple d'appel

  {"name": "analyze_headers", "arguments": {"message": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• apply_dns_fix≈ 309 tokens

  Apply a DNS fix plan to a tracked domain by publishing records at the connected registrar. DESTRUCTIVE: it creates/updates/deletes DNS records. Two-step by design — first call get_dns_fix_plan, then pass its `connectionId` and `ops` here verbatim. The server re-derives the diff from the latest scan and rejects any op that no longer matches, so an agent can never apply arbitrary records. Requires an owner/admin API key with write or full scope. Re-scan afterward to confirm the fix.

  Paramètres, retour & exemple (3)

  Paramètres

  • ops · array · requis
    The `ops` array from get_dns_fix_plan, passed verbatim. The server validates each op against a freshly recomputed diff before executing.
  • domain · string · requis
    Domain name tracked in the account, e.g. example.com.
  • connectionId · string · requis
    The connectionId from get_dns_fix_plan.

  Exemple d'appel

  {"name": "apply_dns_fix", "arguments": {"ops": [], "domain": "texte", "connectionId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• check_blocklists≈ 142 tokens

  Check a domain (apex + MX-host IPs) against supported DNS blocklists and return listings, targets checked, and issues (authoritative-side queries; no public-resolver false positives).

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Domain to check, e.g. example.com.

  Exemple d'appel

  {"name": "check_blocklists", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• connect_inbox_placement≈ 216 tokens

  Store the org's seed-list inbox-placement provider + API key (provider: 'mailreach' or 'glockapps'; GlockApps also needs projectId). Enables start_inbox_placement_test. Requires an owner/admin API key with write or full scope.

  Paramètres, retour & exemple (3)

  Paramètres

  • apiKey · string · requis
    The vendor API key.
  • provider · string · requis · mailreach | glockapps
    Inbox-placement vendor.
  • projectId · string · optionnel
    GlockApps project id (required for provider=glockapps).

  Exemple d'appel

  {"name": "connect_inbox_placement", "arguments": {"apiKey": "texte", "provider": "mailreach"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• connect_snds≈ 214 tokens

  Store this org's Microsoft SNDS (Smart Network Data Services) automated-data-access key so InboxGuard syncs per-IP Outlook/Hotmail reputation daily. Get the key from the SNDS Automated Data Access page (https://sendersupport.olc.protection.outlook.com/snds/). Requires an owner/admin API key with write or full scope. Data appears within ~24h of the first sync.

  Paramètres, retour & exemple (2)

  Paramètres

  • key · string · requis
    The SNDS access key from the SNDS Automated Data Access page.
  • label · string · optionnel
    Optional label, e.g. "prod sending IPs".

  Exemple d'appel

  {"name": "connect_snds", "arguments": {"key": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_notification_channel≈ 300 tokens

  Create a channel that InboxGuard alerts are delivered to: webhook (HMAC-signed), Slack, Microsoft Teams, PagerDuty, SMS, or email. Returns the channel id, and for kind=webhook the `signing_secret` used to verify deliveries. Requires an owner/admin API key with write or full scope.

  Paramètres, retour & exemple (4)

  Paramètres

  • kind · string · requis · webhook | slack | teams | pagerduty | sms | email
    Channel type.
  • target · string · requis
    Destination matching `kind`: the webhook/Slack/Teams URL, PagerDuty integration key, phone number (E.164), or email address.
  • displayName · string · optionnel
    Optional label for the channel.
  • severityFilter · array · optionnel
    Which alert severities to deliver (default ["critical","warn"]).

  Exemple d'appel

  {"name": "create_notification_channel", "arguments": {"kind": "webhook", "target": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_share_link≈ 178 tokens

  Create a read-only public share link for a tracked domain's latest report (anyone with the URL can view it; no account). Returns a `token` and the public `url` (https://inboxguard.io/r/<token>). Requires an owner/admin API key with write or full scope, on a plan that includes public reports.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Domain name tracked in the account, e.g. example.com.

  Exemple d'appel

  {"name": "create_share_link", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_deliverability_report≈ 278 tokens

  Return a structured deliverability report for a tracked domain: the latest score + letter grade + `scoreSubtitle` (explains the denominator when a check was excluded, e.g. "80/100 · scored on 65 of 83 applicable points · 1 check unverified"), each check's status (pass/warn/fail/unverified/not_applicable — `not_applicable` means the check doesn't apply to this domain and `unverified` means it couldn't be checked this scan; neither is a failure), the top issues to fix, blocklist count, and DMARC policy. Includes `pdfUrl` — the same auth-gated endpoint that returns a branded one-page PDF (send your bearer token). Use this to summarize a domain's posture or hand a client a report.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Domain name tracked in the account, e.g. example.com.

  Exemple d'appel

  {"name": "get_deliverability_report", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_deliverability_score≈ 122 tokens

  Return the overall deliverability score and letter grade for a domain (runs a fresh scan).

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Domain to score, e.g. example.com.

  Exemple d'appel

  {"name": "get_deliverability_score", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_dmarc_summary≈ 196 tokens

  Summarize ingested DMARC aggregate (RUA) reports for a domain tracked in your InboxGuard account: report volume, pass rate, top sending sources, and the rua inbox to publish. The domain must already be added to the account, and the plan must include DMARC ingest.

  Paramètres, retour & exemple (2)

  Paramètres

  • days · integer · optionnel
    Lookback window in days (default 30, max 90).
  • domain · string · requis
    Domain name tracked in the account, e.g. example.com.

  Exemple d'appel

  {"name": "get_dmarc_summary", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_dns_fix_plan≈ 218 tokens

  Compute the exact DNS-record changes needed to fix a tracked domain's deliverability, based on its latest scan and the org's connected registrar (Cloudflare/Route 53/GoDaddy/Namecheap). Read-only — nothing changes. Returns the `ops` to pass verbatim to apply_dns_fix, plus `manualReview` items that need a human decision (SPF sender list, DKIM keys, BIMI logo). Requires the domain to be tracked, a scan to exist, and a registrar connection covering the zone.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Domain name tracked in the account, e.g. example.com.

  Exemple d'appel

  {"name": "get_dns_fix_plan", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_domain≈ 160 tokens

  Full detail for one tracked domain: the domain record, the latest scan with all per-check findings (spf, dmarc, dkim, ptr, mta_sts, tls_rpt, mx_tls, blocklist), recent score history, open/recent alerts, and Google Postmaster stats when connected.

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Domain name as tracked in the account, e.g. example.com.

  Exemple d'appel

  {"name": "get_domain", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_inbox_placement_status≈ 118 tokens

  Report whether a seed-list inbox-placement provider is connected for the org, which provider, and how many tests have run. Lists the supported providers when not connected.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_inbox_placement_status", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_inbox_placement_test≈ 176 tokens

  Poll a seed-list inbox-placement test by testId. Returns status (running/completed/failed) and, once measured, the Inbox/Spam/Missing counts and inbox-placement score (0–100). Call after sending your campaign to the seed addresses from start_inbox_placement_test.

  Paramètres, retour & exemple (1)

  Paramètres

  • testId · string · requis
    The testId returned by start_inbox_placement_test.

  Exemple d'appel

  {"name": "get_inbox_placement_test", "arguments": {"testId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_portfolio≈ 168 tokens

  Org-wide deliverability rollup across every monitored domain: average score + overall grade, the grade distribution (how many domains are A/B/C/D/F/unscored), total open alerts, the domains needing attention (lowest score / open alerts first), and a per-client-group breakdown. Use this for an at-a-glance portfolio health summary across an agency or multi-domain account.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_portfolio", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_scan_job≈ 149 tokens

  Poll an async batch scan started with scan_domains_batch: returns status (queued/running/succeeded/partial/failed), completed count, and per-domain results (domain, ok, score, grade) as they finish.

  Paramètres, retour & exemple (1)

  Paramètres

  • jobId · string · requis
    The jobId returned by scan_domains_batch.

  Exemple d'appel

  {"name": "get_scan_job", "arguments": {"jobId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_snds_ip_stats≈ 141 tokens

  Return the latest per-IP reputation from Microsoft SNDS for the org's sending IPs: filter result (GREEN/YELLOW/RED), complaint-rate band, spam-trap hits, message volume, and current block status. Requires SNDS to be connected (see connect_snds / get_snds_status).

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_snds_ip_stats", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_snds_status≈ 132 tokens

  Report whether Microsoft SNDS is connected for the org, the last sync time + status, how many sending IPs are tracked, and how many are currently blocked by Outlook/Hotmail. Use before get_snds_ip_stats to confirm the integration is live.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_snds_status", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_alerts≈ 195 tokens

  List the account's deliverability alerts (score drops, check failures, blocklist listings). Defaults to open alerts only.

  Paramètres, retour & exemple (3)

  Paramètres

  • limit · integer · optionnel
    Max alerts to return (default 50).
  • resolved · string · optionnel · false | true | all
    'false' = open alerts only (default), 'true' = resolved only, 'all' = both.
  • severity · string · optionnel · critical | warn | info | all
    Filter by severity (default 'all').

  Exemple d'appel

  {"name": "list_alerts", "arguments": {"limit": 1, "resolved": "false", "severity": "critical"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_domains≈ 93 tokens

  List the account's tracked domains with latest scan score, last scan time, and open alert count.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_domains", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_inbox_placement_tests≈ 106 tokens

  List recent seed-list inbox-placement tests for the org (most recent first) with their status and Inbox/Spam/Missing scores.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_inbox_placement_tests", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_registrar_connections≈ 146 tokens

  List the registrar accounts (Cloudflare, Route 53, GoDaddy, Namecheap) connected to the org — provider, verification, last-used time — plus the supported providers. Use this to check whether the detect-and-fix loop (get_dns_fix_plan / apply_dns_fix) is available before attempting it.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_registrar_connections", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_scans≈ 158 tokens

  List recent scans (id, domain, run time, score) across all tracked domains, or for one domain when a name is given.

  Paramètres, retour & exemple (2)

  Paramètres

  • limit · integer · optionnel
    Max scans to return (default 20).
  • domain · string · optionnel
    Optional: restrict to one tracked domain by name, e.g. example.com. Omit for all domains.

  Exemple d'appel

  {"name": "list_scans", "arguments": {"limit": 1, "domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• remove_domain≈ 170 tokens

  Stop monitoring a domain and delete it (and its scan history) from the account. DESTRUCTIVE and not reversible. Requires an owner/admin API key with write or full scope. (To ADD a domain, run scan_domain with this API key — authenticated scans auto-track the domain.)

  Paramètres, retour & exemple (1)

  Paramètres

  • domain · string · requis
    Domain name tracked in the account, e.g. example.com.

  Exemple d'appel

  {"name": "remove_domain", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• resolve_alert≈ 164 tokens

  Mark an alert resolved (or reopen it with resolved=false). Requires an API key with write/full scope. Resolving an already-resolved alert is a no-op.

  Paramètres, retour & exemple (2)

  Paramètres

  • alertId · string · requis
    Alert UUID, from list_alerts or get_domain.
  • resolved · boolean · optionnel
    true (default) marks the alert resolved; false reopens it.

  Exemple d'appel

  {"name": "resolve_alert", "arguments": {"alertId": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• scan_domain≈ 293 tokens

  Run a full email-deliverability scan (SPF, DKIM, DMARC, MTA-STS, TLS-RPT, MX TLS, BIMI, DNS blocklists) for a domain and return a 0-100 score with per-check findings. A check can come back `not_applicable` (does not apply to this domain, e.g. MTA-STS on a domain with no MX — excluded from the score, not a failure) or `unverified` (could not be determined this scan, e.g. DKIM behind an ESP with a random per-tenant selector like Amazon SES Easy DKIM — never treat as a failure). `scoreSubtitle` explains the denominator when anything was excluded. Runs at your plan tier (full blocklist set on paid plans) and saves the scan to the domain history in your account.

  Paramètres, retour & exemple (2)

  Paramètres

  • domain · string · requis
    Domain to scan, e.g. example.com.
  • dkimSelectors · array · optionnel
    Optional DKIM selectors to probe.

  Exemple d'appel

  {"name": "scan_domain", "arguments": {"domain": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• scan_domains_batch≈ 201 tokens

  Queue an asynchronous batch scan of up to 50 domains and get a jobId immediately (avoids the 30s per-call limit). Poll get_scan_job with the jobId until status is succeeded/partial/failed to read per-domain scores. Requires an API key with write or full scope. These scans are NOT added to monitoring or saved to history.

  Paramètres, retour & exemple (1)

  Paramètres

  • domains · array · requis
    1-50 domains to scan, e.g. ["example.com","acme.com"].

  Exemple d'appel

  {"name": "scan_domains_batch", "arguments": {"domains": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• start_inbox_placement_test≈ 188 tokens

  Start a seed-list inbox-placement test. Returns a testId, the seed addresses to mail your campaign to, and (if the provider requires it) a header to insert. After sending to the seeds, poll get_inbox_placement_test for the Inbox/Spam/Missing verdict. Requires inbox-placement to be connected and an owner/admin API key with write or full scope.

  Paramètres, retour & exemple (1)

  Paramètres

  • subject · string · optionnel
    Optional subject line to associate with the test.

  Exemple d'appel

  {"name": "start_inbox_placement_test", "arguments": {"subject": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.inboxguard.io/mcp