KitScout

Categories › Communication › Email

Psychevus email security tools

MCP serverVerified domain · psychevus.comRemote● LiveFree to try

DKIM signature checks with DMARC alignment, email header analysis and payment-fraud checks.

Install

Remote server: your requests and data go to psychevus.com. Claude Code: claude mcp add --transport http psychevus-email-security-tools https://psychevus.com/api/mcp · Claude app: Settings → Connectors → Add custom connector.

What it can do

The tools this server listed when we connected to it, in its own words.

  • check_email_domain — Assess, from public DNS, whether a domain's email is set up to be trusted by inboxes and to resist impersonation. It can't see a provider's
  • find_lookalike_domains — Look for registered lookalikes of a domain that could be used to impersonate it (other endings, look-alike characters like rn for m, an adde
  • analyze_email_headers — Read what the mail servers recorded about one received email, to help explain why it was trusted, filed as spam or looks fraudulent: SPF, DK
  • verify_email_signature — Verify the DKIM signatures of one raw email (headers and body, as copied from Gmail's Show original or a .eml file): recomputes the body has
  • count_spf_lookups — Count the DNS lookups an SPF record would cost with the given include hostnames, nested includes resolved live, against the RFC 7208 limit o
  • check_payment_change_request — Weigh an email asking to change a supplier's (vendor's) bank details, one of the costliest forms of business email compromise. Compares the
  • check_payment_policy — Read a business's payment-policy.txt (https://<domain>/.well-known/payment-policy.txt): how it changes bank details (for example never by em
  • assess_callback_record — Check the facts of a callback that verified a supplier's bank-detail change against the rules auditors and social-engineering insurance usua
  • verify_callback_record — Verify a callback record file saved by https://psychevus.com/tools/payment-check/callback-record. It answers three questions separately (lay
  • timestamp_digest — Get a signed timestamp (compact JWS, EdDSA, verifiable with https://psychevus.com/.well-known/psychevus-proof-keys.json) stating that psyche
  • check_dns_propagation — After a DNS change, check whether four public resolvers (Cloudflare, Google, NextDNS, AdGuard) already return the new SPF, DMARC, DKIM, MTA-

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools