How do I install Seclens?

Seclens is a remote plugin. You do not need to install anything locally. Add the server URL to your AI app's MCP configuration and you are ready to go.

Is Seclens safe to use?

Yes. Seclens passed MCP Marketplace's automated security scan with a score of 10/10 (low risk). Every server on MCP Marketplace is security-scanned before it's listed; see the full security report on this page for the findings and permissions.

What AI apps work with Seclens?

Seclens uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Seclens MCP Server

by 42Sec Pte Ltd

Developer ToolsLow Risk10.0MCP RegistryRemote

Free

Server data from the Official MCP Registry

Assess any domain's email security across SPF, DMARC, DKIM, MTA-STS, DNSSEC, DANE, and TLS-RPT.

About

Assess any domain's email security across SPF, DMARC, DKIM, MTA-STS, DNSSEC, DANE, and TLS-RPT.

Remote endpoints: streamable-http: https://seclens.one/mcp

Security Report

10.0

Low Risk10.0Low Risk

Valid MCP server (1 strong, 1 medium validity signals). No known CVEs in dependencies. Imported from the Official MCP Registry.

3 tools verified · Open access · No issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Found in Source Code

Found by scanning the linked source code. This listing connects to a hosted endpoint, so none of this runs on your machine: it describes what the server software does where it is hosted.

HTTP Network Access

Connects to external APIs or services over the internet.

How to Connect

Remote Plugin

No local installation needed. Your AI client connects to the remote endpoint directly.

Add this to your MCP configuration to connect:

{
  "mcpServers": {
    "one-seclens-seclens": {
      "url": "https://seclens.one/mcp"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

SecLens.ONE email security assessor

Standalone Go CLI for the public email-security checks on SecLens.ONE.

Scored protocols are SPF, DMARC, DKIM, MTA-STS, TLS-RPT, DANE, and DNSSEC. BIMI is informational and does not change the score. The assessor uses passive DNS and one HTTPS GET to the MTA-STS policy endpoint. It does not send mail.

Protocol logic lives in internal/assessor/rfc*/ packages. Thin bridge files wire DNS lookups and scoring.

Source is https://github.com/42Sec-Pte-Ltd/seclens.

Checks

SPF (RFC 7208). Presence, qualifiers, lookup limits, and common misconfiguration hints.
DMARC (RFC 7489). Policy, reporting tags, and enforcement.
DKIM (RFC 6376). Common selector discovery.
MTA-STS (RFC 8461). DNS advertisement, one HTTPS GET of the policy, and MX matching.
TLS-RPT (RFC 8460). _smtp._tls advertisement and reporting URIs.
DANE (RFC 7672). TLSA records for discovered MX hosts.
DNSSEC (RFC 4034 and RFC 4035). DS presence and the DoH AD-bit signal.
BIMI. Informational only. It does not change the score.
Null MX (RFC 7505). Detects domains that do not receive mail.

Bulk assessment uses bounded concurrency. Output is text, JSON, or JSONL. JSON DoH resolvers default to Cloudflare. Google and Quad9 are supported.

MCP Server

Anonymous Streamable HTTP at https://seclens.one/mcp.

Tools are get_result, assess_domain, and get_summary.

Cursor 1-Click Install opens Add SecLens.ONE.

mcp.json:

{
  "mcpServers": {
    "seclens": {
      "type": "http",
      "url": "https://seclens.one/mcp"
    }
  }
}

Dependencies

Core DNS and HTTP use the Go standard library. One module dependency handles internationalized domain names.

golang.org/x/net/idna handles punycode and IDNA for MTA-STS MX host matching.

Run go list -m all after go mod download to inspect the module graph.

Build

go build -o seclens ./cmd/seclens

Assess

./seclens assess cloudflare.com
./seclens assess --format jsonl example.com google.com
cat domains.txt | ./seclens assess --stdin --concurrency 12 --format jsonl > results.jsonl
./seclens assess --file domains.txt --resolver google,cloudflare

Resolver flag values are cloudflare, google, and quad9. Separate a pool with commas.

Tests

go test ./...

Research

The CLI measures the same controls as the SecLens Top-1M studies:

License

Licensed under the Apache License, Version 2.0.

Reviews

No reviews yet

Be the first to review this server!

More Developer Tools MCP Servers

Rea

Free

by Morluto · Developer Tools

Reverse engineer anything from your terminal or agent with one CLI and MCP server.

Paperclip

Free

by Paperclipai · Developer Tools

Trending hip-hop artist momentum scores across four cultural dimensions.

Git

Free

by Modelcontextprotocol · Developer Tools

Read, search, and manipulate Git repositories programmatically

Toleno

Free

by Toleno · Developer Tools

Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.

mcp-creator-python

Free

by mcp-marketplace · Developer Tools

Create, build, and publish Python MCP servers to PyPI — conversationally.