Psychevus email security tools

Install

Pick the AI app you use, then copy the settings.

Passed 2/3 checks · What you ask goes through the maker’s server (psychevus.com)

claude mcp add --transport http --scope user email-security https://psychevus.com/api/mcp

{
  "mcpServers": {
    "email-security": {
      "url": "https://psychevus.com/api/mcp"
    }
  }
}

{
  "servers": {
    "email-security": {
      "type": "http",
      "url": "https://psychevus.com/api/mcp"
    }
  }
}

Which apps can use it

Based on how this server connects and on each app’s own docs, checked Nov 10, 2026.

Connect over the internet in

ClaudeChatGPTGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatOpen WebUIRaycast

All apps, with pros and cons →

What it can do

Tool names and descriptions exactly as the server reported them on Nov 11, 2026. The maker wrote them, not us; we show them as plain text.

• check_email_domain

  Assess, from public DNS, whether a domain's email is set up to be trusted by inboxes and to resist impersonation. It can't see a provider's spam filtering or the domain's sending reputation. Reads the domain's public SPF, DKIM and DMARC records and returns plain-language answers

• find_lookalike_domains

  Look for registered lookalikes of a domain that could be used to impersonate it (other endings, look-alike characters like rn for m, an added word such as -billing, typos). Generates about 70 candidates, reads public DNS and registry (RDAP) data for them, and reports which exist,

• analyze_email_headers

  Read what the mail servers recorded about one received email, to help explain why it was trusted, filed as spam or looks fraudulent: SPF, DKIM and DMARC results with alignment, Microsoft SCL and SpamAssassin verdicts, a Reply-To pointing at another domain, each delivery hop with

• verify_email_signature

  Verify the DKIM signatures of one raw email (headers and body, as copied from Gmail's Show original or a .eml file): recomputes the body hash, canonicalises the signed headers and checks each signature against the key the signing domain publishes in DNS (RFC 6376, 8301, 8463). Re

• count_spf_lookups

  Count the DNS lookups an SPF record would cost with the given include hostnames, nested includes resolved live, against the RFC 7208 limit of 10. Use it before proposing a merged SPF record.

• check_payment_change_request

  Weigh an email asking to change a supplier's (vendor's) bank details, one of the costliest forms of business email compromise. Compares the sender (and Reply-To) with the supplier's real domain for lookalike tricks (other endings, look-alike or other-alphabet characters, typos, a

• check_payment_policy

  Read a business's payment-policy.txt (https:// /.well-known/payment-policy.txt): how it changes bank details (for example never by email), which domains its invoices come from, and fingerprints of the accounts it is paid into. Pass an account to check whether it is on the busines

• assess_callback_record

  Check the facts of a callback that verified a supplier's bank-detail change against the rules auditors and social-engineering insurance usually require: the number called came from a source that predates the request, never from the request itself (pass requestText and every phone

• verify_callback_record

  Verify a callback record file saved by https://psychevus.com/tools/payment-check/callback-record. It answers three questions separately (layers): integrity (both digests, the sealed verdict, the approval refers to this exact record), history (both timestamps against this site's p

• timestamp_digest

  Get a signed timestamp (compact JWS, EdDSA, verifiable with https://psychevus.com/.well-known/psychevus-proof-keys.json) stating that psychevus.com saw this SHA-256 digest at this second. Use it to make an audit record (a callback record, an approval) tamper-evident: hash the can

• check_dns_propagation

  After a DNS change, check whether four public resolvers (Cloudflare, Google, NextDNS, AdGuard) already return the new SPF, DMARC, DKIM, MTA-STS, TLS-RPT or BIMI record, and how long caches may keep the old one. Pass the value just published as expect to compare.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 12, 2026

• ! Caution

  Maker matches the repo

  The registry lists no source repo, so we cannot match the publisher (psychevus.com) to the code

• … Not checked yet

  Still maintained

  We have not read this repo from GitHub yet

• … Not checked yet

  Has a licence

  We have not read this repo from GitHub yet

• ✓ Pass

  Endpoint responds

  Responded in 671 ms (HTTP 200)

• – Not applicable

  Sign-in with OAuth

  No sign-in needed

• ✓ Pass

  No hidden instructions in tool descriptions

  Read 11 tool descriptions and found no hidden instructions to the AI

User reviews

No reviews yet

Sign in with Google to write a review

Compared with others in Cybersecurityi

• More stars than 0% of the other 1041 servers in this category
• Published to the registry more recently than 97% of the other 1041 servers in this category
• Basic checks equal to or better than 44% of the other 1041 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Others in the same category

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Robin: AI-Powered Dark Web OSINT

Dark web OSINT over Tor: search onion engines, scrape pages, report with your own model.

by apurvsinghgautam·Growing·★ 8K·Updated 40 days ago

Runs on your computer

Install

HOL Guard

Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.

by hashgraph-online·Widely used·↓ 7.1K/wk·★ 1.1K·Updated 7 days ago

Runs on your computer

Install

SonarQube MCP Server

Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants.

by SonarSource·Growing·★ 685·Updated yesterday

Runs on your computer

Install

README from the maker

No README found in the repo