Lookproof DNS and mail security checks runs on your own machine — the client starts it, so there is no endpoint to ping. 343 installs a week from pypi.
SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS and DNS checks for domains, paid per call in USDC (x402)
The linked repository no longer exists on GitHub — it was deleted or made private.
We have not read this server's code yet, 21 h ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
этот файл ставится пользователю, но в репозитории его нет
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add lookproof-mcp -- uvx lookproof-mcp
{
"mcpServers": {
"lookproof-mcp": {
"command": "uvx",
"args": [
"lookproof-mcp"
]
}
}
}
[mcp_servers.lookproof-mcp]
command = "uvx"
args = ["lookproof-mcp"]
{
"mcpServers": {
"lookproof-mcp": {
"command": "uvx",
"args": [
"lookproof-mcp"
]
}
}
}
{
"servers": {
"lookproof-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"lookproof-mcp"
]
}
}
}
Optional settings from the registry entry, left out of the block above:
X402_PAY (Set to 1 to pay for calls. Without it every tool is a dry run that only reports the price), PRIVATE_KEY_FILE (Path to a file (chmod 600) with the private key of a dedicated wallet holding a few dollars of USDC on Base), PRIVATE_KEY (Private key of a dedicated wallet (alternative to PRIVATE_KEY_FILE)), MAX_SPEND_USD (Spending cap per session (one server process) in USD), PAYTO_ALLOWLIST (Optional comma-separated addresses the server may pay; a 402 asking for any other payTo is refused).
Pay-per-call domain and email security check: SPF, DKIM, DMARC, TLS, DNSSEC, BIMI, with exact fixes.
Domain checks: SPF, DKIM, DMARC, BIMI, MTA-STS, SSL/TLS and HTTP security headers.
Assess any domain's email security across SPF, DMARC, DKIM, MTA-STS, DNSSEC, DANE, and TLS-RPT.
DMARC/SPF/DKIM/MX checks, email score, 100-domain bulk score, webhook watch alerts (x402 USDC).
Audit a domain's email and web security: SPF, DKIM, DMARC, MTA-STS, DNSSEC, TLS, WHOIS. No API keys.
DNS, email-security and website intelligence for your domains: SPF/DKIM/DMARC, changes, subdomains.
DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools.
Paid email, DNS, mail-security and RDAP intelligence for agents over x402.
Answers built from our own checks of this server.