io.github.Integrity-Os/deliverability-doctor
Check if a domain can be email-spoofed: SPF, DMARC, DKIM, MX graded from public DNS. Authless.
Que pouvez-vous faire avec io.github.Integrity-Os/deliverability-doctor ?
check_email_security(domain)— SPF (incl. RFC 7208 multiple-record permerrorcompare_email_security(domains[2..5])— comparison table with grades.
Installation
Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).
claude mcp add --transport http deliverability-doctor 'https://deliverability-doctor.deliverability-doctor.workers.dev/mcp'
{
"mcpServers": {
"deliverability-doctor": {
"type": "http",
"url": "https://deliverability-doctor.deliverability-doctor.workers.dev/mcp"
}
}
}
Documentation
Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.
Deliverability Doctor
Remote MCP server: "Can my domain be email-spoofed?" answered from public DNS, graded, with concrete fixes. Connectable to Claude (custom connector) and ChatGPT (Apps SDK / MCP connector) — both speak MCP, one server serves both.
Tools
check_email_security(domain)— SPF (incl. RFC 7208 multiple-record permerror andredirect=handling), DMARC (policy, rua, pct), MX, DKIM at 7 common selectors. Graded A–F report, fixes per finding, upsell line only when problems exist. Accepts bare domain, URL, or email address.compare_email_security(domains[2..5])— comparison table with grades.
Design decisions
- Authless: reads public DNS only, stores nothing, takes nothing but a domain. Lowest possible connect friction; nothing sensitive to protect.
- DNS-over-HTTPS (Cloudflare → Google fallback): identical code runs on local
Node and on Cloudflare Workers — no
dnsmodule dependency. - Stateless streamable HTTP: fresh transport per request, no sessions; safe to scale, trivial for clients.
- NXDOMAIN is refused, not graded — "domain doesn't exist" ≠ "spoofable".
- Verified against known postures before first run: gmail.com (
redirect=must not be flagged), n8n.io (must grade A onp=reject), missing-everything domain (must grade F), NXDOMAIN (must refuse).
Run
npm install
node server.js # :8787/mcp
Quick public demo: cloudflared tunnel --url http://localhost:8787 → use
https://<random>.trycloudflare.com/mcp as the connector URL.
Status 2026-08-23
- Local: end-to-end MCP verified (initialize / tools/list / tools/call).
- Public: live via quick tunnel, initialize verified from the public URL.
- Durable hosting: pending — Cloudflare Workers deploy needs Kacper's account (~5 min). Tunnel URL dies with the process/PC.
- Directory submissions (Anthropic connector directory, ChatGPT apps): need the durable URL first, then Kacper's developer accounts.
Monetization path
Free tool = distribution. Report links the $99 written audit (niekonieczny.gumroad.com/l/vscjt) only when problems are found. NOTE: Gumroad payouts currently frozen on Stripe KYC — unfreeze before promoting.
Questions fréquentes
Qu'est-ce que io.github.Integrity-Os/deliverability-doctor ?
Check if a domain can be email-spoofed: SPF, DMARC, DKIM, MX graded from public DNS. Authless.
Comment installer io.github.Integrity-Os/deliverability-doctor ?
Il fonctionne comme serveur distant. Dans Claude Code : claude mcp add --transport http deliverability-doctor 'https://deliverability-doctor.deliverability-doctor.workers.dev/mcp'. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.
Faut-il une clé API pour io.github.Integrity-Os/deliverability-doctor ?
Son entrée au registre n'indique aucune clé ni secret obligatoire. Certaines fonctions peuvent tout de même demander un compte auprès du service auquel il se connecte.
io.github.Integrity-Os/deliverability-doctor est-il open source ?
Oui. Son code est sur GitHub sous licence MIT.
Qui maintient io.github.Integrity-Os/deliverability-doctor ?
Il est publié par Integrity-Os. AI.tn le référence sans le maintenir ni le recommander.
Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.