Security & Testing

inboxguard.io

Performs email deliverability scans and checks for domain security configurations.

1 endpoint28 known toolsFirst detected July 8, 2026Last detected August 13, 2026

ENDPOINT 1

https://mcp.inboxguard.io/mcp

No auth detected

MCP server metadata

Name: inboxguard
Version: 1.6.0

Capabilities

toolsresources

Server instructions

InboxGuard tools cover deliverability scanning AND the authenticated product end to end. Deliverability scanning: scan_domain (renders an interactive scorecard ui://inboxguard/scan-result), get_deliverability_score, check_blocklists, analyze_headers (re-verify SPF/DKIM/DMARC/ARC on a raw email), scan_domains_batch + get_scan_job (async batch of up to 50). Every tools/call requires an API-key bearer token — for a keyless one-off scan, POST to the REST endpoint /scan-domain (5/hour per IP). With an API key, scans run at the org's plan tier and auto-track the domain; account tools: list_domains, get_domain, remove_domain, list_scans, list_alerts, resolve_alert, get_dmarc_summary, list_registrar_connections, create_notification_channel, create_share_link. Detect-and-fix loop: scan_domain → get_dns_fix_plan → apply_dns_fix → re-scan. Reputation feeds: connect_snds → get_snds_status → get_snds_ip_stats (Microsoft SNDS per-IP Outlook/Hotmail reputation). Inbox-placement: connect_inbox_placement → start_inbox_placement_test (returns seed addresses to mail) → get_inbox_placement_test (Inbox/Spam/Missing verdict). Reporting: get_deliverability_report → a domain's score, per-check status, top issues, and a PDF download URL. Portfolio: get_portfolio → org-wide rollup (avg score, grade distribution, domains needing attention, per-client-group breakdown). Discovery is open; tools/call needs an API-key bearer token (https://inboxguard.io/auth.md). Docs: https://inboxguard.io/llms-full.txt

Known tools 28

scan_domain

Run a full email-deliverability scan (SPF, DKIM, DMARC, MTA-STS, TLS-RPT, MX TLS, BIMI, DNS blocklists) for a domain and return a 0-100 score with per-check findings.

Potential side effects

get_deliverability_score

Return the overall deliverability score and letter grade for a domain (runs a fresh scan).

Inferred read-only

check_blocklists

Check a domain (apex + MX-host IPs) against supported DNS blocklists and return listings, targets checked, and issues (authoritative-side queries; no public-resolver false positives).

Inferred read-only

get_dmarc_summary

Summarize ingested DMARC aggregate (RUA) reports for a domain tracked in your InboxGuard account: report volume, pass rate, top sending sources, and the rua inbox to publish.

Potential side effects

list_domains

List the account's tracked domains with latest scan score, last scan time, and open alert count.

Inferred read-only

get_domain

Full detail for one tracked domain: the domain record, the latest scan with all per-check findings (spf, dmarc, dkim, ptr, mta_sts, tls_rpt, mx_tls, blocklist), recent score history, open/recent alerts, and Google Postmaster stats when connected.

Inferred read-only

list_alerts

List the account's deliverability alerts (score drops, check failures, blocklist listings).

Inferred read-only

list_scans

List recent scans (id, domain, run time, score) across all tracked domains, or for one domain when a name is given.

Inferred read-only

resolve_alert

Mark an alert resolved (or reopen it with resolved=false).

Inferred read-only

get_dns_fix_plan

Compute the exact DNS-record changes needed to fix a tracked domain's deliverability, based on its latest scan and the org's connected registrar (Cloudflare/Route 53/GoDaddy/Namecheap).

Inferred read-only

apply_dns_fix

Apply a DNS fix plan to a tracked domain by publishing records at the connected registrar.

Inferred read-only

analyze_headers

Re-verify SPF, DKIM, DMARC, and ARC from a raw RFC 5322 email (full message or just the headers block).

Potential side effects

scan_domains_batch

Queue an asynchronous batch scan of up to 50 domains and get a jobId immediately (avoids the 30s per-call limit).

Inferred read-only

get_scan_job

Poll an async batch scan started with scan_domains_batch: returns status (queued/running/succeeded/partial/failed), completed count, and per-domain results (domain, ok, score, grade) as they finish.

Inferred read-only

remove_domain

Stop monitoring a domain and delete it (and its scan history) from the account.

Potential side effects

list_registrar_connections

List the registrar accounts (Cloudflare, Route 53, GoDaddy, Namecheap) connected to the org — provider, verification, last-used time — plus the supported providers.

Inferred read-only

create_notification_channel

Create a channel that InboxGuard alerts are delivered to: webhook (HMAC-signed), Slack, Microsoft Teams, PagerDuty, SMS, or email.

Potential side effects

create_share_link

Create a read-only public share link for a tracked domain's latest report (anyone with the URL can view it; no account).

Potential side effects

connect_snds

Store this org's Microsoft SNDS (Smart Network Data Services) automated-data-access key so InboxGuard syncs per-IP Outlook/Hotmail reputation daily.

Inferred read-only

get_snds_status

Report whether Microsoft SNDS is connected for the org, the last sync time + status, how many sending IPs are tracked, and how many are currently blocked by Outlook/Hotmail.

Inferred read-only

get_snds_ip_stats

Return the latest per-IP reputation from Microsoft SNDS for the org's sending IPs: filter result (GREEN/YELLOW/RED), complaint-rate band, spam-trap hits, message volume, and current block status.

Potential side effects

connect_inbox_placement

Store the org's seed-list inbox-placement provider + API key (provider: 'mailreach' or 'glockapps'; GlockApps also needs projectId).

Inferred read-only

get_inbox_placement_status

Report whether a seed-list inbox-placement provider is connected for the org, which provider, and how many tests have run.

Inferred read-only

start_inbox_placement_test

Start a seed-list inbox-placement test.

Inferred read-only

get_inbox_placement_test

Poll a seed-list inbox-placement test by testId.

Inferred read-only

list_inbox_placement_tests

List recent seed-list inbox-placement tests for the org (most recent first) with their status and Inbox/Spam/Missing scores.

Inferred read-only

get_deliverability_report

Return a structured deliverability report for a tracked domain: the latest score + letter grade + `scoreSubtitle` (explains the denominator when a check was excluded, e.g.

Inferred read-only

get_portfolio

Org-wide deliverability rollup across every monitored domain: average score + overall grade, the grade distribution (how many domains are A/B/C/D/F/unscored), total open alerts, the domains needing attention (lowest score / open alerts first), and a per-client-group breakdown.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.inboxguard]
url = "https://mcp.inboxguard.io/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "inboxguard": {
      "type": "http",
      "url": "https://mcp.inboxguard.io/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: inboxguard
Remote MCP URL: https://mcp.inboxguard.io/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "inboxguard": {
      "url": "https://mcp.inboxguard.io/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "inboxguard": {
      "type": "http",
      "url": "https://mcp.inboxguard.io/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "inboxguard",
  "transport": "streamable-http",
  "url": "https://mcp.inboxguard.io/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for inboxguard.io was fetched 2026-07-27T04:09:41.652Z and is being refreshed.

Trust status Neutral

inboxguard.io is assessed as Neutral: No suspicious signals found, but no strong positive signal either

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.