BlackVeil DNS & Email Security Scanner MCP Server

Know where you stand. Source-available DNS & email security scanner for Claude, Cursor, VS Code, and MCP clients across Streamable HTTP, stdio, and legacy HTTP+SSE. Its 3 documented tools cluster into group, tier, scan included. It is available as a remote MCP endpoint.

Teams that work with cybersecurity, saas and cloudflare workers and want a hosted endpoint instead of running a local process. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-09-17 · ★ 9 · #63 OF 90 MAINTAINED EMAIL · VERIFIED 2026-09-18

NOASSERTION · TypeScript servers · how we verify → /methodology

01 · Install BlackVeil DNS & Email Security Scanner

before you install - you'll need

BV_API_KEY

Environment variables documented in the project's README - it lists which are required and which have defaults.

Claude Code

claude mcp add madaburns-bv-mcp --transport http https://dns-mcp.blackveilsecurity.com/mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "madaburns-bv-mcp": {
      "url": "https://dns-mcp.blackveilsecurity.com/mcp"
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

https://dns-mcp.blackveilsecurity.com/mcp

transport: streamable-http

endpoint alive - responded to MCP initialize · probed 2026-09-17

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as remote - your agent's requests go to dns-mcp.blackveilsecurity.com

endpoint auth accepted our unauthenticated MCP initialize - no credentials needed to connect

license no standard license detected - usage rights unclear; check the repo before commercial use

registry vendor namespace com.blackveilsecurity - domain-verified with the official MCP registry

03 · What BlackVeil DNS & Email Security Scanner can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

An agent gets 3 documented tools across group, tier, scan included, including group, tier, scanIncluded.

The 3 tools it gives your agent

Extracted from the project's README - what BlackVeil DNS & Email Security Scanner lets an agent do.

group
- functional group (email_auth, infrastructure, brand_threats, dns_hygiene, intelligence, remediation, discovery, identity_secops, meta).
tier
- scoring tier (core / protective / hardening); absent for non-scoring tools.
scanIncluded
- true when the tool runs inside scan_domain's parallel audit.

Latest releases

v3.82.0 · 2026-09-18

Adds a seventh SGE control and the fail-soft TypeSafe/Jev client foundation, plus a · round of attribution and brand-discovery correctness fixes. Scoring model stays at · 1.34.0 and @blackveil/dns-checks at 1.49.0…

dns-checks-v1.49.0 · 2026-09-15

Immutable scoring artifact. Consumers must verify the attached SHA-256 before installation.

v3.81.2 · 2026-09-15

Fixes the two issues that 3.81.1 still did not resolve in production (#973, #974). Scoring model 1.34.0 (from 1.33.0) and @blackveil/dns-checks 1.49.0 (from 1.48.0, PARITY_CORPUS_VERSION in lockstep), so bv-web-prod…

04 · Who maintains BlackVeil DNS & Email Security Scanner

BlackVeil DNS & Email Security Scanner is maintained by madaburns. It's the only MCP server we track from this author; the repo dates to Feb 2026.

05 · Facts

category
email - ranked #63 of 90 actively-maintained email servers as of 2026-09-18.
release cadence
10+ releases in the last 90 days (latest 2026-09-18)
registry
com.blackveilsecurity/dns (active, first published 2026-04-21 · 109 versions)

06 · BlackVeil DNS & Email Security Scanner FAQ

Is BlackVeil DNS & Email Security Scanner still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-17 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

What can BlackVeil DNS & Email Security Scanner do?

An agent gets 3 documented tools across group, tier, scan included, including group, tier, scanIncluded.

How do I install BlackVeil DNS & Email Security Scanner?

Run `claude mcp add madaburns-bv-mcp --transport http https://dns-mcp.blackveilsecurity.com/mcp`. The README documents one environment variable (BV_API_KEY) to set first. You can also paste the ready-made client config above.

Does BlackVeil DNS & Email Security Scanner require authentication?

No - the endpoint accepted our unauthenticated MCP initialize when probed on 2026-09-17; you can connect without credentials.

07 · Alternatives to BlackVeil DNS & Email Security Scanner