Scan and fix a domain's email deliverability (SPF, DKIM, DMARC, MTA-STS, BIMI, DNS blocklists).
Inferido de los transportes que declara este listado (streamable-http). Que un cliente no aparezca aquí no significa que se haya descartado: simplemente Forge no puede confirmarlo.
La verificación confirma la identidad del publicador (la propiedad del repo), no la seguridad del código. El análisis de seguridad cubre los CVE conocidos y los scripts de instalación sospechosos.
Leído de un handshake MCP real initialize → tools/list contra el endpoint declarado. No se invocó ninguna herramienta: tools/list es la llamada de introspección de solo lectura que el protocolo define para esto. Refleja lo que el servidor anunciaba en ese momento; un endpoint alojado no está fijado a ninguna versión y puede cambiar sin avisar.
https://mcp.inboxguard.io/mcp28 herramientas · 132 msscan_domainRun a full email-deliverability scan (SPF, DKIM, DMARC, MTA-STS, TLS-RPT, MX TLS, BIMI, DNS blocklists) for a domain and return a 0-100 score with per-check findings. A check can come back `not_applicable` (does not apply to this domain, e.g. MTA-STS on a domain with no MX — excluded from the score…Run a full email-deliverability scan (SPF, DKIM, DMARC, MTA-STS, TLS-RPT, MX TLS, BIMI, DNS blocklists) for a domain and return a 0-100 score with per-check findings. A check can come back `not_applicable` (does not apply to this domain, e.g. MTA-STS on a domain with no MX — excluded from the score…
| Parámetro | Tipo | Descripción |
|---|---|---|
| domain* | string | Domain to scan, e.g. example.com. |
| dkimSelectors | array | Optional DKIM selectors to probe. |
get_deliverability_scoreReturn the overall deliverability score and letter grade for a domain (runs a fresh scan).Return the overall deliverability score and letter grade for a domain (runs a fresh scan).
| Parámetro | Tipo | Descripción |
|---|---|---|
| domain* | string | Domain to score, e.g. example.com. |
check_blocklistsCheck a domain (apex + MX-host IPs) against supported DNS blocklists and return listings, targets checked, and issues (authoritative-side queries; no public-resolver false positives).Check a domain (apex + MX-host IPs) against supported DNS blocklists and return listings, targets checked, and issues (authoritative-side queries; no public-resolver false positives).
| Parámetro | Tipo | Descripción |
|---|---|---|
| domain* | string | Domain to check, e.g. example.com. |
get_dmarc_summarySummarize ingested DMARC aggregate (RUA) reports for a domain tracked in your InboxGuard account: report volume, pass rate, top sending sources, and the rua inbox to publish. The domain must already be added to the account, and the plan must include DMARC ingest.Summarize ingested DMARC aggregate (RUA) reports for a domain tracked in your InboxGuard account: report volume, pass rate, top sending sources, and the rua inbox to publish. The domain must already be added to the account, and the plan must include DMARC ingest.
| Parámetro | Tipo | Descripción |
|---|---|---|
| domain* | string | Domain name tracked in the account, e.g. example.com. |
| days | integer | Lookback window in days (default 30, max 90). |
list_domainsList the account's tracked domains with latest scan score, last scan time, and open alert count.List the account's tracked domains with latest scan score, last scan time, and open alert count.
No se publicó ningún esquema de entrada para esta herramienta.
get_domainFull detail for one tracked domain: the domain record, the latest scan with all per-check findings (spf, dmarc, dkim, ptr, mta_sts, tls_rpt, mx_tls, blocklist), recent score history, open/recent alerts, and Google Postmaster stats when connected.Full detail for one tracked domain: the domain record, the latest scan with all per-check findings (spf, dmarc, dkim, ptr, mta_sts, tls_rpt, mx_tls, blocklist), recent score history, open/recent alerts, and Google Postmaster stats when connected.
| Parámetro | Tipo | Descripción |
|---|---|---|
| domain* | string | Domain name as tracked in the account, e.g. example.com. |
list_alertsList the account's deliverability alerts (score drops, check failures, blocklist listings). Defaults to open alerts only.List the account's deliverability alerts (score drops, check failures, blocklist listings). Defaults to open alerts only.
| Parámetro | Tipo | Descripción |
|---|---|---|
| resolved | string | 'false' = open alerts only (default), 'true' = resolved only, 'all' = both. |
| severity | string | Filter by severity (default 'all'). |
| limit | integer | Max alerts to return (default 50). |
list_scansList recent scans (id, domain, run time, score) across all tracked domains, or for one domain when a name is given.List recent scans (id, domain, run time, score) across all tracked domains, or for one domain when a name is given.
| Parámetro | Tipo | Descripción |
|---|---|---|
| domain | string | Optional: restrict to one tracked domain by name, e.g. example.com. Omit for all domains. |
| limit | integer | Max scans to return (default 20). |
resolve_alertMark an alert resolved (or reopen it with resolved=false). Requires an API key with write/full scope. Resolving an already-resolved alert is a no-op.Mark an alert resolved (or reopen it with resolved=false). Requires an API key with write/full scope. Resolving an already-resolved alert is a no-op.
| Parámetro | Tipo | Descripción |
|---|---|---|
| alertId* | string | Alert UUID, from list_alerts or get_domain. |
| resolved | boolean | true (default) marks the alert resolved; false reopens it. |
get_dns_fix_planCompute the exact DNS-record changes needed to fix a tracked domain's deliverability, based on its latest scan and the org's connected registrar (Cloudflare/Route 53/GoDaddy/Namecheap). Read-only — nothing changes. Returns the `ops` to pass verbatim to apply_dns_fix, plus `manualReview` items that…Compute the exact DNS-record changes needed to fix a tracked domain's deliverability, based on its latest scan and the org's connected registrar (Cloudflare/Route 53/GoDaddy/Namecheap). Read-only — nothing changes. Returns the `ops` to pass verbatim to apply_dns_fix, plus `manualReview` items that…
| Parámetro | Tipo | Descripción |
|---|---|---|
| domain* | string | Domain name tracked in the account, e.g. example.com. |
apply_dns_fixApply a DNS fix plan to a tracked domain by publishing records at the connected registrar. DESTRUCTIVE: it creates/updates/deletes DNS records. Two-step by design — first call get_dns_fix_plan, then pass its `connectionId` and `ops` here verbatim. The server re-derives the diff from the latest scan…Apply a DNS fix plan to a tracked domain by publishing records at the connected registrar. DESTRUCTIVE: it creates/updates/deletes DNS records. Two-step by design — first call get_dns_fix_plan, then pass its `connectionId` and `ops` here verbatim. The server re-derives the diff from the latest scan…
| Parámetro | Tipo | Descripción |
|---|---|---|
| domain* | string | Domain name tracked in the account, e.g. example.com. |
| connectionId* | string | The connectionId from get_dns_fix_plan. |
| ops* | array | The `ops` array from get_dns_fix_plan, passed verbatim. The server validates each op against a freshly recomputed diff before executing. |
analyze_headersRe-verify SPF, DKIM, DMARC, and ARC from a raw RFC 5322 email (full message or just the headers block). Returns InboxGuard's independent verdict (`ours`), the sender's own Authentication-Results (`theirs`), whether they `agree`, and parsed envelope/headers — useful for spotting forged or mismatched…Re-verify SPF, DKIM, DMARC, and ARC from a raw RFC 5322 email (full message or just the headers block). Returns InboxGuard's independent verdict (`ours`), the sender's own Authentication-Results (`theirs`), whether they `agree`, and parsed envelope/headers — useful for spotting forged or mismatched…
| Parámetro | Tipo | Descripción |
|---|---|---|
| message* | string | The raw email — full RFC 5322 message, or at least the headers block (Received, Authentication-Results, DKIM-Signature, From, …). |
| senderIp | string | Optional: connecting IP to evaluate SPF against (overrides the IP parsed from Received headers). |
| helo | string | Optional: the SMTP HELO/EHLO domain. |
| mailFrom | string | Optional: the envelope MAIL FROM (return-path) address. |
scan_domains_batchQueue an asynchronous batch scan of up to 50 domains and get a jobId immediately (avoids the 30s per-call limit). Poll get_scan_job with the jobId until status is succeeded/partial/failed to read per-domain scores. Requires an API key with write or full scope. These scans are NOT added to monitorin…Queue an asynchronous batch scan of up to 50 domains and get a jobId immediately (avoids the 30s per-call limit). Poll get_scan_job with the jobId until status is succeeded/partial/failed to read per-domain scores. Requires an API key with write or full scope. These scans are NOT added to monitorin…
| Parámetro | Tipo | Descripción |
|---|---|---|
| domains* | array | 1-50 domains to scan, e.g. ["example.com","acme.com"]. |
get_scan_jobPoll an async batch scan started with scan_domains_batch: returns status (queued/running/succeeded/partial/failed), completed count, and per-domain results (domain, ok, score, grade) as they finish.Poll an async batch scan started with scan_domains_batch: returns status (queued/running/succeeded/partial/failed), completed count, and per-domain results (domain, ok, score, grade) as they finish.
| Parámetro | Tipo | Descripción |
|---|---|---|
| jobId* | string | The jobId returned by scan_domains_batch. |
remove_domainprivilegiadaStop monitoring a domain and delete it (and its scan history) from the account. DESTRUCTIVE and not reversible. Requires an owner/admin API key with write or full scope. (To ADD a domain, run scan_domain with this API key — authenticated scans auto-track the domain.)Stop monitoring a domain and delete it (and its scan history) from the account. DESTRUCTIVE and not reversible. Requires an owner/admin API key with write or full scope. (To ADD a domain, run scan_domain with this API key — authenticated scans auto-track the domain.)
| Parámetro | Tipo | Descripción |
|---|---|---|
| domain* | string | Domain name tracked in the account, e.g. example.com. |
list_registrar_connectionsList the registrar accounts (Cloudflare, Route 53, GoDaddy, Namecheap) connected to the org — provider, verification, last-used time — plus the supported providers. Use this to check whether the detect-and-fix loop (get_dns_fix_plan / apply_dns_fix) is available before attempting it.List the registrar accounts (Cloudflare, Route 53, GoDaddy, Namecheap) connected to the org — provider, verification, last-used time — plus the supported providers. Use this to check whether the detect-and-fix loop (get_dns_fix_plan / apply_dns_fix) is available before attempting it.
No se publicó ningún esquema de entrada para esta herramienta.
create_notification_channelCreate a channel that InboxGuard alerts are delivered to: webhook (HMAC-signed), Slack, Microsoft Teams, PagerDuty, SMS, or email. Returns the channel id, and for kind=webhook the `signing_secret` used to verify deliveries. Requires an owner/admin API key with write or full scope.Create a channel that InboxGuard alerts are delivered to: webhook (HMAC-signed), Slack, Microsoft Teams, PagerDuty, SMS, or email. Returns the channel id, and for kind=webhook the `signing_secret` used to verify deliveries. Requires an owner/admin API key with write or full scope.
| Parámetro | Tipo | Descripción |
|---|---|---|
| kind* | string | Channel type. |
| target* | string | Destination matching `kind`: the webhook/Slack/Teams URL, PagerDuty integration key, phone number (E.164), or email address. |
| displayName | string | Optional label for the channel. |
| severityFilter | array | Which alert severities to deliver (default ["critical","warn"]). |
create_share_linkCreate a read-only public share link for a tracked domain's latest report (anyone with the URL can view it; no account). Returns a `token` and the public `url` (https://inboxguard.io/r/<token>). Requires an owner/admin API key with write or full scope, on a plan that includes public reports.Create a read-only public share link for a tracked domain's latest report (anyone with the URL can view it; no account). Returns a `token` and the public `url` (https://inboxguard.io/r/<token>). Requires an owner/admin API key with write or full scope, on a plan that includes public reports.
| Parámetro | Tipo | Descripción |
|---|---|---|
| domain* | string | Domain name tracked in the account, e.g. example.com. |
connect_sndsStore this org's Microsoft SNDS (Smart Network Data Services) automated-data-access key so InboxGuard syncs per-IP Outlook/Hotmail reputation daily. Get the key from the SNDS Automated Data Access page (https://sendersupport.olc.protection.outlook.com/snds/). Requires an owner/admin API key with wr…Store this org's Microsoft SNDS (Smart Network Data Services) automated-data-access key so InboxGuard syncs per-IP Outlook/Hotmail reputation daily. Get the key from the SNDS Automated Data Access page (https://sendersupport.olc.protection.outlook.com/snds/). Requires an owner/admin API key with wr…
| Parámetro | Tipo | Descripción |
|---|---|---|
| key* | string | The SNDS access key from the SNDS Automated Data Access page. |
| label | string | Optional label, e.g. "prod sending IPs". |
get_snds_statusReport whether Microsoft SNDS is connected for the org, the last sync time + status, how many sending IPs are tracked, and how many are currently blocked by Outlook/Hotmail. Use before get_snds_ip_stats to confirm the integration is live.Report whether Microsoft SNDS is connected for the org, the last sync time + status, how many sending IPs are tracked, and how many are currently blocked by Outlook/Hotmail. Use before get_snds_ip_stats to confirm the integration is live.
No se publicó ningún esquema de entrada para esta herramienta.
get_snds_ip_statsReturn the latest per-IP reputation from Microsoft SNDS for the org's sending IPs: filter result (GREEN/YELLOW/RED), complaint-rate band, spam-trap hits, message volume, and current block status. Requires SNDS to be connected (see connect_snds / get_snds_status).Return the latest per-IP reputation from Microsoft SNDS for the org's sending IPs: filter result (GREEN/YELLOW/RED), complaint-rate band, spam-trap hits, message volume, and current block status. Requires SNDS to be connected (see connect_snds / get_snds_status).
No se publicó ningún esquema de entrada para esta herramienta.
connect_inbox_placementStore the org's seed-list inbox-placement provider + API key (provider: 'mailreach' or 'glockapps'; GlockApps also needs projectId). Enables start_inbox_placement_test. Requires an owner/admin API key with write or full scope.Store the org's seed-list inbox-placement provider + API key (provider: 'mailreach' or 'glockapps'; GlockApps also needs projectId). Enables start_inbox_placement_test. Requires an owner/admin API key with write or full scope.
| Parámetro | Tipo | Descripción |
|---|---|---|
| provider* | string | Inbox-placement vendor. |
| apiKey* | string | The vendor API key. |
| projectId | string | GlockApps project id (required for provider=glockapps). |
get_inbox_placement_statusReport whether a seed-list inbox-placement provider is connected for the org, which provider, and how many tests have run. Lists the supported providers when not connected.Report whether a seed-list inbox-placement provider is connected for the org, which provider, and how many tests have run. Lists the supported providers when not connected.
No se publicó ningún esquema de entrada para esta herramienta.
start_inbox_placement_testStart a seed-list inbox-placement test. Returns a testId, the seed addresses to mail your campaign to, and (if the provider requires it) a header to insert. After sending to the seeds, poll get_inbox_placement_test for the Inbox/Spam/Missing verdict. Requires inbox-placement to be connected and an…Start a seed-list inbox-placement test. Returns a testId, the seed addresses to mail your campaign to, and (if the provider requires it) a header to insert. After sending to the seeds, poll get_inbox_placement_test for the Inbox/Spam/Missing verdict. Requires inbox-placement to be connected and an…
| Parámetro | Tipo | Descripción |
|---|---|---|
| subject | string | Optional subject line to associate with the test. |
get_inbox_placement_testPoll a seed-list inbox-placement test by testId. Returns status (running/completed/failed) and, once measured, the Inbox/Spam/Missing counts and inbox-placement score (0–100). Call after sending your campaign to the seed addresses from start_inbox_placement_test.Poll a seed-list inbox-placement test by testId. Returns status (running/completed/failed) and, once measured, the Inbox/Spam/Missing counts and inbox-placement score (0–100). Call after sending your campaign to the seed addresses from start_inbox_placement_test.
| Parámetro | Tipo | Descripción |
|---|---|---|
| testId* | string | The testId returned by start_inbox_placement_test. |
list_inbox_placement_testsList recent seed-list inbox-placement tests for the org (most recent first) with their status and Inbox/Spam/Missing scores.List recent seed-list inbox-placement tests for the org (most recent first) with their status and Inbox/Spam/Missing scores.
No se publicó ningún esquema de entrada para esta herramienta.
get_deliverability_reportriesgo de inyecciónReturn a structured deliverability report for a tracked domain: the latest score + letter grade + `scoreSubtitle` (explains the denominator when a check was excluded, e.g. "80/100 · scored on 65 of 83 applicable points · 1 check unverified"), each check's status (pass/warn/fail/unverified/not_appli…Return a structured deliverability report for a tracked domain: the latest score + letter grade + `scoreSubtitle` (explains the denominator when a check was excluded, e.g. "80/100 · scored on 65 of 83 applicable points · 1 check unverified"), each check's status (pass/warn/fail/unverified/not_appli…
turns a branded one-page PDF (send your bearer token). Use this to summarize a dom…| Parámetro | Tipo | Descripción |
|---|---|---|
| domain* | string | Domain name tracked in the account, e.g. example.com. |
get_portfolioOrg-wide deliverability rollup across every monitored domain: average score + overall grade, the grade distribution (how many domains are A/B/C/D/F/unscored), total open alerts, the domains needing attention (lowest score / open alerts first), and a per-client-group breakdown. Use this for an at-a-…Org-wide deliverability rollup across every monitored domain: average score + overall grade, the grade distribution (how many domains are A/B/C/D/F/unscored), total open alerts, the domains needing attention (lowest score / open alerts first), and a per-client-group breakdown. Use this for an at-a-…
No se publicó ningún esquema de entrada para esta herramienta.
28 de 28 herramientas publicaron una descripción.
Los nombres y descripciones de las herramientas los escribe el publicador y se muestran literalmente como texto inerte. Son las cadenas que un cliente MCP pasa al modelo, así que Forge las analiza en busca de patrones de inyección de prompts — cualquier hallazgo aparece junto al análisis de seguridad de arriba. «Privilegiada» es una coincidencia de palabra clave en el nombre de la herramienta, no una auditoría de lo que hace: un nombre inofensivo puede hacer cualquier cosa.
Scan and fix a domain's email deliverability (SPF, DKIM, DMARC, MTA-STS, BIMI, DNS blocklists).
Los nombres enlazados abren el índice de Forge con todas las entradas que se observó que exponen esa herramienta. Ver todas las herramientas indexadas.
Esta entrada no publica ningún paquete de npm, así que Forge no tiene un árbol de dependencias para ella. Es una carencia de cobertura, no una afirmación de que no tenga dependencias.