Psychevus email security tools

Connect Remote server

claude mcp add --transport http email-security https://psychevus.com/api/mcp

{
  "mcpServers": {
    "email-security": {
      "url": "https://psychevus.com/api/mcp"
    }
  }
}

{
  "servers": {
    "email-security": {
      "type": "http",
      "url": "https://psychevus.com/api/mcp"
    }
  }
}

Settings > Connectors > Add custom connector
URL: https://psychevus.com/api/mcp

Tools 11 found in our last check

• check_email_domain

  Assess, from public DNS, whether a domain's email is set up to be trusted by inboxes and to resist impersonation. It can't see a provider's spam filtering or the domain's sending reputation. Reads the domain's public SPF, DKIM and DMARC records and returns plain-language answers…

• find_lookalike_domains

  Look for registered lookalikes of a domain that could be used to impersonate it (other endings, look-alike characters like rn for m, an added word such as -billing, typos). Generates about 70 candidates, reads public DNS and registry (RDAP) data for them, and reports which exist…

• analyze_email_headers

  Read what the mail servers recorded about one received email, to help explain why it was trusted, filed as spam or looks fraudulent: SPF, DKIM and DMARC results with alignment, Microsoft SCL and SpamAssassin verdicts, a Reply-To pointing at another domain, each delivery hop with…

• verify_email_signature

  Verify the DKIM signatures of one raw email (headers and body, as copied from Gmail's Show original or a .eml file): recomputes the body hash, canonicalises the signed headers and checks each signature against the key the signing domain publishes in DNS (RFC 6376, 8301, 8463). R…

• count_spf_lookups

  Count the DNS lookups an SPF record would cost with the given include hostnames, nested includes resolved live, against the RFC 7208 limit of 10. Use it before proposing a merged SPF record.

• check_payment_change_request

  Weigh an email asking to change a supplier's (vendor's) bank details, one of the costliest forms of business email compromise. Compares the sender (and Reply-To) with the supplier's real domain for lookalike tricks (other endings, look-alike or other-alphabet characters, typos,…

• check_payment_policy

  Read a business's payment-policy.txt (https://<domain>/.well-known/payment-policy.txt): how it changes bank details (for example never by email), which domains its invoices come from, and fingerprints of the accounts it is paid into. Pass an account to check whether it is on the…

• assess_callback_record

  Check the facts of a callback that verified a supplier's bank-detail change against the rules auditors and social-engineering insurance usually require: the number called came from a source that predates the request, never from the request itself (pass requestText and every phon…

• verify_callback_record

  Verify a callback record file saved by https://psychevus.com/tools/payment-check/callback-record. It answers three questions separately (layers): integrity (both digests, the sealed verdict, the approval refers to this exact record), history (both timestamps against this site's…

• timestamp_digest

  Get a signed timestamp (compact JWS, EdDSA, verifiable with https://psychevus.com/.well-known/psychevus-proof-keys.json) stating that psychevus.com saw this SHA-256 digest at this second. Use it to make an audit record (a callback record, an approval) tamper-evident: hash the ca…

• check_dns_propagation

  After a DNS change, check whether four public resolvers (Cloudflare, Google, NextDNS, AdGuard) already return the new SPF, DMARC, DKIM, MTA-STS, TLS-RPT or BIMI record, and how long caches may keep the old one. Pass the value just published as expect to compare.

Details

More communication servers See all

• Formpit

  Form backend with an inbox: create form endpoints, read submissions and reply by email.

• IGNOREO

  Tools for AI agents, pay per call in USDC (x402): privacy scan, site/email/VIN checks, chess, more

• Palimpalem

  Websites for local businesses: draft, keep, edit by chat, publish; domain, DNS, e-mail, Plus.

• Quokka Korea Tools

  Korean holidays, business days & legal deadlines, won amounts in words, NEIS/SMS byte counts

• Turbo Notify: WhatsApp for AI agents

  Send, receive, edit and react to WhatsApp messages from your own number. OAuth or API key sign-in.

• Turbo Notify: WhatsApp for AI agents

  Send, receive, edit and react to WhatsApp messages from your own number. OAuth or API key sign-in.