BlackVeil DNS & Email Security Scanner MCP MCP server

An official MCP server from BlackVeil Security that allows AI agents to perform read-only audits of domain DNS and email security. It provides 81 tools to check SPF, DMARC, DNSSEC, SSL, and brand exposure, returning structured findings with NIST-aligned grades and remediation advice.

Endpoint and access

No sign-in: your client connects and lists tools immediately, with no account or key.

No sign-inEndpoint checked 2026-10-05Operated by BlackVeil Security

MCP endpoint (Streamable HTTP)

https://dns-mcp.blackveilsecurity.com/mcp

Vendor documentation

What you can do with it

Audit a domain's DNS and email security
Check SPF, DKIM, and DMARC records
Detect lookalike and typosquat domains
Generate and validate DMARC records

Tools advertised by the last live check:

check_mx
check_spf
check_dmarc
check_dkim
check_dnssec
check_ssl
check_mta_sts
check_ns
check_caa
check_bimi
check_tlsrpt
check_http_security
check_dane
check_ptr
check_dane_https
check_svcb_https
check_lookalikes
check_subdomailing
scan_domain
batch_scan
batch_scan_start
batch_scan_status
batch_scan_findings
compare_domains
compare_baseline
check_shadow_domains
check_txt_hygiene
check_mx_reputation
check_srv
check_zone_hygiene
generate
get_domain_rank
get_benchmark
get_provider_insights
assess_spoofability
check_resolver_consistency
explain_finding
map_supply_chain
analyze_drift
validate_fix
resolve_spf_chain
discover_subdomains
map_compliance
sge_quickscan
prioritize_portfolio_leads
simulate_attack_paths
check_dbl
check_rbl
cymru_asn
rdap_lookup
check_realtime_threat_feed
check_nsec_walkability
check_dnssec_chain
check_agent_discovery
check_llms_txt
check_dnskey_strength
check_fast_flux
check_subdomain_takeover
check_authoritative_dns_infra
check_root_server_set
discover_brand_domains
discover_brand_domains_start
discover_brand_domains_status
discover_brand_domains_findings
brand_audit_single
brand_audit_batch_start
brand_audit_status
brand_audit_get_report
list_brand_audit_watches
register_brand_audit_watch
delete_brand_audit_watch
scan_buckets_start
scan_buckets_status
scan_buckets_findings
osint_investigate_domain_start
osint_investigate_infrastructure_start
osint_investigate_supply_chain_start
osint_investigate_username_start
osint_investigate_email_start
osint_investigation_status
osint_investigation_report

Connect from your client

Each snippet registers the same endpoint; pick the client you use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Claude Code

Run this once in a terminal. It registers a Streamable HTTP server. Use --scope project to write .mcp.json for the repo.

Claude Code configuration

claude mcp add --transport http blackveil-dns-email-security-scanner-mcp https://dns-mcp.blackveilsecurity.com/mcp

Codex

Run this once. Codex stores MCP servers in ~/.codex/config.toml (or .codex/config.toml in a trusted project).

Codex configuration

codex mcp add blackveil-dns-email-security-scanner-mcp --url https://dns-mcp.blackveilsecurity.com/mcp

Cursor

Merge this server into .cursor/mcp.json in your project, then enable blackveil-dns-email-security-scanner-mcp in your MCP settings.

Cursor configuration

{
  "mcpServers": {
    "blackveil-dns-email-security-scanner-mcp": {
      "url": "https://dns-mcp.blackveilsecurity.com/mcp"
    }
  }
}

Cline

Merge this into cline_mcp_settings.json (Cline → MCP Servers → Configure). The type must be streamableHttp for a remote HTTP server.

Cline configuration

{
  "mcpServers": {
    "blackveil-dns-email-security-scanner-mcp": {
      "type": "streamableHttp",
      "url": "https://dns-mcp.blackveilsecurity.com/mcp",
      "disabled": false
    }
  }
}

VS Code

Merge this server into .vscode/mcp.json. Use MCP: List Servers to start blackveil-dns-email-security-scanner-mcp and inspect its tools.

VS Code configuration

{
  "servers": {
    "blackveil-dns-email-security-scanner-mcp": {
      "type": "http",
      "url": "https://dns-mcp.blackveilsecurity.com/mcp"
    }
  }
}

Gemini CLI

Run this once. It writes .gemini/settings.json in the current project; pass --scope user for ~/.gemini/settings.json.

Gemini CLI configuration

gemini mcp add --transport http blackveil-dns-email-security-scanner-mcp https://dns-mcp.blackveilsecurity.com/mcp

Claude Desktop

Merge this into claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\), then restart Claude Desktop.

Claude Desktop configuration

{
  "mcpServers": {
    "blackveil-dns-email-security-scanner-mcp": {
      "url": "https://dns-mcp.blackveilsecurity.com/mcp"
    }
  }
}

Windsurf

Merge this into ~/.codeium/windsurf/mcp_config.json, then refresh MCP in Cascade. Windsurf remote servers use serverUrl, not url.

Windsurf configuration

{
  "mcpServers": {
    "blackveil-dns-email-security-scanner-mcp": {
      "serverUrl": "https://dns-mcp.blackveilsecurity.com/mcp"
    }
  }
}

See all 957

Do you run BlackVeil DNS & Email Security Scanner MCP?

Prove ownership with a DNS record, a well-known file, or your Official MCP Registry entry, and your edits publish immediately. Proofs are re-checked weekly; admins can still hide or remove a listing.

Claim this listing