BLACKVEIL DNS MCP

BLACKVEIL DNS MCP inspects DNS and email security through a hosted HTTP endpoint or a self-hosted local integration.

Domain and email configuration checks

BLACKVEIL exposes tools for inspecting a domain’s DNS and email security posture, explaining findings and preparing remediation. The project documents areas including SPF, DKIM and DMARC, with additional infrastructure and investigation features. Use the result to identify a specific configuration problem rather than treating a single grade as proof that a domain is secure.

Hosted or self-hosted connection

The hosted service provides a Streamable HTTP MCP endpoint. The project also documents native stdio and legacy HTTP+SSE paths. Free access and paid tools have different limits. Some hosted operations require authentication or a paid tier; a tool that appears in discovery may still reject a request your account cannot run.

Verify a finding

Start with a domain you administer. Request its email-authentication posture, inspect the returned records and confirm the proposed change against the domain’s intended mail providers. A generated DNS record is a proposal to review, not evidence that the record was installed.

Terms and access

The repository uses BUSL-1.1 source-available licensing. Hosted access, API keys and self-host deployment settings are separate concerns. Query-string API keys are rejected by the hosted production service; use the documented headers or OAuth path. Keep an evidence trail for a finding that will lead to a DNS change.

Project documentation

Repository and setup guide