Nel Veil runs on your own machine — the client starts it, so there is no endpoint to ping. 50 installs a week from npm. Last commit 4 Sep 2026.
Free passive security scanning - check any domain's DMARC, TLS, headers, and exposures.
Today is the operative word: we check Nel Veil every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add nel-veil -- npx -y nel-veil-mcp
{
"mcpServers": {
"nel-veil": {
"args": [
"-y",
"nel-veil-mcp"
],
"command": "npx"
}
}
}
[mcp_servers.nel-veil]
command = "npx"
args = ["-y", "nel-veil-mcp"]
{
"mcpServers": {
"nel-veil": {
"args": [
"-y",
"nel-veil-mcp"
],
"command": "npx"
}
}
}
{
"mcpServers": {
"nel-veil": {
"args": [
"-y",
"nel-veil-mcp"
],
"command": "npx"
}
}
}
This one needs environment variables set before it will start:
NEL_API_URL (Override the NEL VEIL API base URL. Only needed for local development against a self-hosted backend; leave unset to use the public API at https://api.nelprofessional.com.).
The author declared them in the registry entry; get the values from the project itself.
Domain checks: SPF, DKIM, DMARC, BIMI, MTA-STS, SSL/TLS and HTTP security headers.
Domain security scanning for AI agents. A-F grades, 8 checks, fix snippets.
Contract and agent-package scans, phishing URL and OFAC checks, domain and header checks.
Scan websites for security vulnerabilities, headers, TLS, and email security.
Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.
Free front-end security check for any website: a grade plus the secrets and keys it exposes.
Free website check: HTTPS setup and security headers, scored with plain-English fixes. No account.
Tech stack, email security (SPF, DMARC, MX provider) and domain age API + MCP. 25 free domains/day.
Answers built from our own checks of this server.