Email Deliverability MCP Server

Use Our Email Tools From Your AI Assistant

The Postbox Services MCP server connects our free deliverability and security checks directly to Claude, ChatGPT, Grok, Cursor and any other AI that speaks the Model Context Protocol. Ask your assistant "is my domain blacklisted?" or "where does this link really go?" and it runs the real check on our infrastructure - live DNS, 24 blacklists, actual SMTP analysis - instead of guessing from training data. Free, no account, no API key.

https://mcp.postboxservices.com/mcp
“Is acme.com on any email blacklists?”“Grade acme.com for spoofing risk”“Where does this shortened link actually go?”

Server name: Postbox Services - Email Deliverability & Security Tools · open access · fair-use limits · live since 26 September 2026

Why a live check beats asking the AI raw (Why do I need your Email Deliverability MCP server when I can ask my questions directly to AI?)

Ask an AI about your domain without a tool connected, and one of three things happens - none of them is a DNS query:

  1. It guesses. Your domain's DNS records and blacklist status are not in any training set - DNS zones are not crawled, and blacklists answer queries, they do not publish pages. A confident assessment of an SPF record the model has never seen is invention, not analysis.
  2. It searches the web - and search finds pages about your domain, not your DNS. At best the AI paraphrases a third-party checker's cached page, secondhand and as old as that page's last render. Blacklists change hour to hour; DNS records change whenever someone edits them.
  3. The careful ones decline - "I can't check live DNS." Accurate, and you still have no answer.

The advice layer is frozen too: a model trained before its cutoff may still recommend the pct= tag (removed from DMARC in RFC 9989) or quote sender rules that changed in 2024.

With this server connected, the guessing stops. That is what MCP email tools are for: instead of remembering, the AI measures - a DMARC MCP check reads the record that exists right now, a blacklist check queries all 24 lists at the moment you ask, a mail test analyzes a real message you just sent. Ground truth, in the chat, with a link to the full report.

claude.ai / Claude Desktop ✓ verified, with screenshots

These are the same product surface: connectors attach to your Claude account, and chats sync between the browser and the Desktop app - set it up once, use it in both. (Screenshots below are from the Desktop app on Linux; the browser dialogs are identical.)

  1. Open claude.ai → your initials (bottom-left) → Settings → Connectors.
  2. Click Add custom connector. Name it Postbox Tools, paste the URL above, and leave authentication on No sign-in (claude.ai auto-detects this - our server has open access by design).
  3. Click Add. You will see all 8 tools listed with a permission setting each - Needs approval (Claude asks before each use) is a fine default; set the read-only checks to Always allow for smoother sessions.
  4. In any new chat, open the tools menu near the message box, enable Postbox Tools, and ask away.
Adding the Postbox Tools custom connector in claude.ai with No sign-in detected
Step 2 - claude.ai auto-detects the open-access server ("No sign-in - Detected").
claude.ai showing all 8 Postbox Tools with per-tool permissions
Step 3 - the 8 tools as claude.ai lists them, each with its own permission.
Claude answering a blacklist question using the Postbox Tools MCP server - clean across domain and IP blacklists
The result: Claude runs the real checks ("Used Postbox Tools, ran 8 commands").

Claude Code (terminal) ✓ verified

One command, then the tools are available in your coding sessions (handy for checking a client's domain without leaving the terminal):

claude mcp add --transport http --scope user postbox-tools https://mcp.postboxservices.com/mcp

Confirm with claude mcp list - you should see postbox-tools ... ✓ Connected. Remove any time with claude mcp remove postbox-tools.

Cursor

Add the server to ~/.cursor/mcp.json (create the file if it does not exist), then restart Cursor. The tools appear in the Composer/Agent tool list:

{
  "mcpServers": {
    "postbox-tools": {
      "url": "https://mcp.postboxservices.com/mcp"
    }
  }
}

Standard Cursor remote-MCP config; verified run + screenshot coming.

ChatGPT ✓ verified, with screenshots

Use the web app (chatgpt.com) - in our testing (September 2026) it has the smoothest flow; the desktop app can manage MCP servers but lagged on exposing them in chats.

  1. chatgpt.com → Plugins (sidebar) → Add ▾ → Add MCP server.
  2. In the Create MCP App dialog: Name Postbox Tools, paste the server URL, and set Authentication: No authentication (it defaults to OAuth - our server needs none). Optionally add a description and our official icon: download the 128px PNG (5 KB). Tick the trust confirmation and Create.
  3. First use shows a one-time Connect Postbox Tools consent - approve it.
  4. Ask away. Tip: mentioning the tool by name ("...use the postbox_tools MCP") makes ChatGPT reach for it reliably; different models phrase the answer differently, but the underlying check is identical.
ChatGPT Create MCP App dialog filled in for Postbox Tools with No authentication
Step 2 - the Create MCP App dialog, filled in. Note Authentication: No authentication.
ChatGPT one-time consent dialog for connecting Postbox Tools
Step 3 - the one-time connect consent.
ChatGPT answering a blacklist question using the Postbox Tools MCP - clean across 8 IPs and 24 blacklists
The result: ChatGPT runs the live check - 8 IPs against 24 blacklists - and links the full report.

Using the ChatGPT desktop app instead?

Its dialog is Plugins → Add → Add MCP server → "Connect to a custom MCP", and it defaults the Type to STDIO - switch it to Streamable HTTP BEFORE saving (paste the URL in the URL field). ChatGPT does not let you change the type later without uninstalling. In our tests the desktop app registered the server fine (it appears under the MCPs tab) but chats there did not always expose it - if that happens, chat on the web app; the server is shared account-wide.

ChatGPT desktop app MCPs tab showing postbox_tools enabled
Desktop app: the MCPs tab with postbox_tools registered and enabled.

Grok ✓ verified, with screenshots

  1. In Grok, open Settings → Connectors and choose Custom Connector.
  2. Name: Postbox Tools, Server URL: the address above → Add Connector. Grok lists all 8 tools as enabled.
  3. Ask in plain words - "Use Postbox Tools to check if mydomain.com is on any email blacklists" - and Grok calls the tool and answers from the live result.
Adding the Postbox Tools custom connector in Grok
Step 1-2 - the Custom Connector dialog.
Grok showing Postbox Tools connected with all 8 tools enabled
Connected - all 8 tools enabled.
Grok calling the Postbox Tools blacklist checker and reporting a clean result
The result: Grok calls the checker live - clean across 8 IPs x 24 blacklists - and links the full report.

The two-step full deliverability test works from Grok too: ask for a spam test, send one email from your own account to the disposable address it hands you, then ask for the score.

Grok creating a disposable deliverability-test address via Postbox Tools
Step 1 - "use postboxtools to help me run a spam test": Grok creates the disposable test address and the shareable report link.
Sending a test email from Gmail to the disposable mailtester address
Step 2 - send any email from the account you want to test to that address (here, Gmail).
Grok reporting a 10/10 deliverability score with a per-category breakdown
Step 3 - reply "sent" and Grok fetches the scored result: 10/10 with the per-category breakdown and the full report link.

The 8 tools your AI gets

ToolWhat it doesPowered by
check_blacklistChecks a domain or IP against 24 DNS blacklists (Spamhaus ZEN, Barracuda, SpamCop and more)
Try: “Is acme.com on any email blacklists?”
Postbox Blacklist Check
check_spoofabilityGrades how exposed a domain is to spoofing and BEC, A to F, from its public DNS
Try: “Could someone send phishing emails pretending to be acme.com? Grade it.”
Postbox Spoof Check
trace_redirectFollows a URL through every redirect hop to its real destination, with phishing flags
Try: “Where does this shortened link actually go: https://bit.ly/xyz”
Postbox Redirect Checker
create_mailtestTwo-step test, step 1: mints a disposable address - YOU then send a real email to it from the system you want tested (nothing happens until you do)
Try: “Run a spam test for my newsletter setup”
Postbox Mailtester
get_mailtest_resultTwo-step test, step 2: after your email arrives, fetches the /10 score, breakdown and action plan
Try: “I have sent the test email - what is my score?”
Postbox Mailtester
analyze_emlAnalyzes a raw .eml file (headers + content) when you cannot send a live email
Try: “Here is a bounced email file - why did it land in spam? (attach the .eml)”
Postbox Mailtester
get_domain_ageRegistration date and age of a domain (young domains = weak sending reputation)
Try: “How old is the domain acme.com?”
Postbox Mailtester
whois_lookupRegistrar, created/expires dates, nameservers, DNSSEC and status flags
Try: “Who is the registrar for acme.com and when does it expire?”
Postbox Mailtester

Every answer includes a link to the full report on the tool's own site - the AI gives you the summary, the report gives you every detail, shareable.

Try these prompts once connected

  • "Is mydomain.com on any email blacklists?"
  • "How spoofable is mydomain.com? Can someone send phishing as us?"
  • "Where does this link actually go: [paste any shortened URL]"
  • "Run a deliverability test for my newsletter" - then send one email to the address Claude gives you and ask for your score.
  • "Here is a bounced email file - why did it fail?" (attach the .eml)

Data handling

We built this server the way we advise clients to build theirs, so here is the policy in plain words:

  • Email files are never stored. analyze_eml processes the raw email in memory, returns the result, and discards it - nothing is written to disk, nothing is cached, and there is no way to retrieve a submitted file afterwards.
  • Deliverability-test reports (create_mailtest) work exactly like the web tool: the report lives at its private link for 30 days, then is permanently deleted.
  • Domain, IP and URL check results are cached briefly (up to 24 hours, keyed only by the input) so repeated lookups stay fast.
  • Logs hold request metadata, not content: client IP, tool name, timestamps and fair-use counters, kept only as long as abuse control needs them. Message content never appears in any log.
  • URL tracing is SSRF-hardened. Server-side fetching validates every redirect hop, not just the submitted URL - private, loopback and link-local ranges are blocked at each step, only http/https on standard ports is followed, and all fetching runs on isolated infrastructure.
  • No accounts, no API keys, no stored conversations. We see the check input your AI sends - the domain, IP, URL or email file - and nothing else about your chat.

Frequently asked questions

What is an MCP server?

MCP (Model Context Protocol) is an open standard that lets AI assistants use external tools. Connecting an MCP server to Claude or another assistant is like handing it a toolbox: when you ask a question the tools can answer, the AI calls them and builds its reply on live data instead of memory. Our server exposes the Postbox Services free deliverability and security checks as 8 such tools.

Is it really free? Do I need an account?

Yes, free, and no account - the server has open access by design, the same as our web tools. Fair-use limits apply (per-client rate limits and daily service ceilings) so the free service stays fast for everyone.

What data do you see when my AI calls a tool?

Only the check input itself - the domain, IP, URL or email file the tool needs - plus standard request metadata. Email files submitted to analyze_eml are processed in memory and never stored; test reports are deleted after 30 days; logs hold metadata only, never message content. Full details in the Data handling section above.

Why do results sometimes show links written like hxxps://evil[.]com?

Deliberate safety: URLs of third-party sites in our tool summaries are defanged so a malicious link can never ride an AI answer as something clickable. Links to our own full reports stay live.

Which AI apps work with it?

Anything that speaks remote MCP over Streamable HTTP. Verified so far: claude.ai and Claude Desktop (one shared connector - verified together), Claude Code, ChatGPT (web app) and Grok. Cursor instructions are below; verification screenshots coming.

My AI says a tool hit a limit - what happened?

You met one of the fair-use guards: a per-minute rate limit, a daily per-tool ceiling, or the bulk-scanning cap (checking many different domains from one client in a day). Wait and retry, use the web tool directly, or contact us for legitimate bulk needs.

Found a problem the tools can only diagnose? Fixing it is what we do all day.

Prefer the classic way? All 8 tools are free on the web too.

Chat with us!