Negotiated 2025-06-18. The bar is 2025-06-18 or newer.
Pass
HTTPS
The endpoint URL is https.
Performance
Not measured
Fast (p50)
Median latency 63 ms over 1 samples in 7 days. The bar is 1000 ms. Need at least 5 samples.
Not measured
Consistent (p95)
95th percentile 63 ms over 1 samples in 7 days. The bar is 3000 ms. Need at least 20 samples.
Not measured
Reliable (uptime)
1 of 1 attempts returned a tool list in 30 days (100%). The bar is 99%. Need at least 30 samples.
Not measured
Stable tool list
Fewer than two successful probes in 30 days, so tool-list stability is not measured.
Access
Pass
Open access
tools/list succeeded with no credential, and the record declares none.
Not measured
Standard auth
Auth is not required, so the OAuth metadata check does not apply.
Not measured
Free tier cited
No publisher quote has been checked.
Tools
Pass
Tools described
Every tool description is at least 20 characters.
Pass
Valid input schemas
Every inputSchema is a JSON Schema object.
Pass
Parameters documented
4 of 4 parameters have a description (100%). The bar is 80%.
Pass
Safety hints
Every tool sets readOnlyHint or destructiveHint.
Publisher
Pass
Verified namespace
Listed in the Official MCP Registry.
Pass
Website matches publisher
The website host matches the reverse-domain namespace.
Pass
Source repo linked
A repository URL is on file.
Not measured
Repo owner matches
This namespace is not an io.github login, so the owner comparison does not apply.
Pass
Recently updated
Updated 2026-10-27T14:48:50.789887Z, within 180 days.
Not measured
Open-source licence
The GitHub licence lookup has not returned an OSI result yet.
Start using SecLens.ONE Email Security
Connect to this server
Choose your client, copy the configuration, then enable the server in your client’s MCP settings.
Run this command in your terminal, then restart Claude Code.
Claude Code
claude mcp add --transport http seclens-one-email-security https://seclens.one/mcp
Capabilities
Tools 3
assess_domain
Start a fresh public email-security check of one domain (SPF, DKIM, DMARC, MTA-STS, TLS-RPT, DANE, DNSSEC, MX and BIMI). Use this when there is no stored result yet or you need an up-to-date one; to read an existing result, call get_result instead. It returns only a queue confirmation, not the report. The response includes poll_after_ms. Wait that long, then poll get_result. A check usually takes a few seconds and is stopped after 45 seconds at most.
Discovered get_result
Return the latest stored public report for one domain: score from 0 to 100, profile (mail, null_mx or no_mx), per-protocol findings, and Remediation.packs with the DNS records to publish. BIMI is reported but does not change the score. Use this to read a report or to poll after assess_domain; use get_summary for figures across all domains instead. If the domain has not been checked yet, or the check is still running, it returns HTTP 404 JSON with error not_found. In that case call assess_domain and poll again. Public reports expire after 24 hours.
Discovered get_summary
Return totals for every domain in the public SecLens.ONE corpus, plus a list of those domains with their latest score, newest first. "stats" holds the domain count, average score, score bands and per-protocol present and effective counts. "results" holds one row per domain (Domain, Score, Generated, Profile, IsMailEnabled, HasNullMX, NullMXCompliant). Use this for overall adoption figures, not for one domain's details (use get_result instead). By default, results lists the 50 newest domains and is about 8 KB. The maximum limit is 500. Stats always cover the full corpus. Set stats_only to true for stats and an empty results list.