Skip to main content
Glama

Suped DMARC

Server Details

DMARC monitoring and report analysis with SPF/DKIM diagnostics. Connect your Suped account to inspect monitored domains, email authentication issues, DMARC records and original report XML. Add domains for monitoring and create client organizations as an authorized MSP administrator. Access follows your Suped permissions. Adding a domain does not change DNS records; tools cannot resolve or dismiss issues.

Ownership verified
Status
Healthy
OAuth
Works in Glama
Last Tested
Transport
Streamable HTTP · MCP 2025-11-25
URL

TDQS

A3.9/5.0

Scored across 7 tools

Disambiguation4/5

Most tools are clearly separated by resource and action. The only potential overlap is between get_dmarc_records and download_dmarc_report, though the descriptions distinguish aggregated DMARC data from raw report XML.

Naming Consistency5/5

All tool names use consistent snake_case verb_noun patterns: create_*, get_*, list_*, download_*. The convention is predictable throughout.

Tool Count5/5

Seven tools is well-scoped for a DMARC management server, covering organizations, domains, reports, and issues without excessive surface area.

Completeness3/5

The surface covers creation and listing/retrieval for key resources, but lacks update/delete/archive operations for domains, organizations, and issues. Agents may hit dead ends for lifecycle management beyond creation and reading.

Available Tools

7 tools
create_domainAdd domainA
Idempotent
Inspect

Adds a domain to the specified Suped organization. Requires regular organization access; billing-only membership is insufficient. Returns the existing domain if already present, or restores it if archived. This adds the domain to Suped; it does not change the domain's DNS records.

NameRequiredDescriptionDefault
domainYesEmail sending domain, such as example.com.
organizationIdYes

TDQS

A4.3/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations: it discloses the auth requirement (regular org membership, not billing-only), the create-or-return-existing semantics, the archived-domain restore path, and the fact that no DNS records are touched. The annotations only declare readOnly=false, idempotent=true, destructive=false; the description supplies the operational detail that makes those hints actionable.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four short sentences, each carrying distinct information (action, permission requirement, idempotent/restore behavior, non-effect on DNS). The clause "This adds the domain to Suped" is mildly redundant with the opening sentence, keeping it from a 5.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema and only two required params, the description covers the essentials: what happens on success, what happens if the domain exists, and the permission model. It does not describe the returned domain object's shape or any normalization behavior, a minor remaining gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 50%: 'domain' is documented in the schema, while 'organizationId' only carries a 24-hex pattern with no explanation. The description references "the specified Suped organization" but adds no guidance on how to source or format that ID, so it neither compensates for nor worsens the gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource ("Adds a domain to the specified Suped organization") and explicitly bounds the effect ("does not change the domain's DNS records"), which cleanly separates it from siblings like get_domains and get_dmarc_records.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states a real precondition — regular organization access, with billing-only membership insufficient — which tells the agent when the call will fail. It stops short of explicitly routing between siblings (e.g., when to use this vs. get_domains), so it is clear context but not full when/when-not guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

create_organizationCreate MSP client organizationAInspect

Creates a client organization under an existing MSP. Advertised only to administrators of an accessible MSP. Requires administrator access to the specified parent MSP, its organization ID, and a client name. Returns {organization: {id, name, isMsp, mspOrganizationId}}. Each successful call creates a new organization.

NameRequiredDescriptionDefault
nameYesName of the client organization to create.
mspOrganizationIdYesParent MSP organization ID from list_organizations.

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=false, idempotentHint=false, and destructiveHint=false. Beyond that, the description adds the admin-only visibility constraint and explicitly warns that every successful call creates a new organization, which reinforces the non-idempotent behavior with concrete consequence. It doesn't discuss duplicate-name handling or failure modes, keeping it below a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four short sentences, front-loaded with the action, then access constraint, then return shape. The final sentence slightly overlaps idempotentHint=false but earns its place by stating the side effect plainly.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter mutation with no output schema, the description covers access requirements, parameter sourcing, return shape, and the create-on-every-call side effect. Only duplicate-name or conflict behavior is unaddressed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters are already documented, including the pattern and the list_organizations hint. The description restates 'its organization ID, and a client name' without adding format or sourcing detail beyond the schema, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource — 'Creates a client organization under an existing MSP' — which an agent can easily separate from create_domain and list_organizations. It never explicitly contrasts itself with those siblings, so it falls short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives real prerequisites (administrator access to the parent MSP, organization ID, client name) and notes it is only advertised to MSP admins. However, it offers no when-to-use or when-not-to-use guidance relative to alternatives, so usage is only implied.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

download_dmarc_reportDownload DMARC reportA
Read-only
Inspect

Returns the original raw XML for the specified DMARC report as an embedded application/xml resource. The report must belong to the specified organization. Requires regular access to the report's organization; billing-only membership is insufficient.

NameRequiredDescriptionDefault
reportIdYesReport ID from a row returned by get_dmarc_records.
organizationIdYes

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the read-only, non-destructive profile, but the description adds genuinely new behavior: the return is raw XML served as an embedded application/xml resource, plus a non-obvious authorization rule that billing-only membership is insufficient. Missing detail on size limits or failure modes for very large reports.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences, front-loaded with what is returned before the access constraints. No filler or restatement of the title.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists, and the description does the needed work by describing the return payload format. Combined with the authorization caveat, an agent has enough to invoke correctly; only edge-case behavior (large reports, retention) is absent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 50%: reportId is documented in the schema as coming from get_dmarc_records, while organizationId has no schema description. The description partially compensates by constraining organizationId (report must belong to it, regular access required), so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a concrete verb and resource: 'Returns the original raw XML for the specified DMARC report as an embedded application/xml resource.' The emphasis on raw XML implicitly separates it from the aggregate/record listing at get_dmarc_records, though no sibling is named explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explains prerequisites ('must belong to the specified organization', 'requires regular access... billing-only membership is insufficient') but never states when to pick this over get_dmarc_records or other siblings. Usage is implied by the prerequisites rather than given as routing guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_dmarc_recordsGet DMARC recordsA
Read-only
Inspect

Retrieves DMARC data for the specified Suped organization. Mirrors the public /api/public/dmarc-records API: returns {status: 'success', dmarcRecords: [...]}, with the same record fields plus reportId on each row. startDate and endDate select reports by reported end date, inclusively; endDate must be after/equal to startDate. Requires regular organization access; billing-only membership is insufficient.

NameRequiredDescriptionDefault
endDateYesEnd of the date range, e.g. 2026-10-06T23:59:59Z.
startDateYesStart of the date range, e.g. 2026-10-01T00:00:00Z.
organizationIdYes

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and destructiveHint=false, and the description adds genuinely useful context beyond them: the exact response envelope, the reportId field added per row, and the authorization prerequisite. It omits pagination/limits and result-size behavior for a potentially large record list.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tight sentences, front-loaded with purpose then contract then prerequisites; each sentence carries information. Slightly dense with API-mirroring detail, but nothing is redundant.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Complete enough for a 3-required-param read tool: it documents the return shape (no output schema exists), the filtering semantics, and the access requirement. Only edge behaviors like empty ranges or large result handling are unaddressed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 67%, and the description compensates by explaining that startDate/endDate filter on reported end date inclusively and that endDate must not precede startDate — semantics absent from the schema. organizationId's 24-hex pattern is only conveyed via the schema, not the description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Retrieves DMARC data') scoped to a Suped organization, and clarifies the return payload shape. It does not explicitly distinguish itself from the sibling download_dmarc_report, leaving the read-vs-download distinction to inference.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives concrete usage context: dates select reports by reported end date inclusively, endDate must be >= startDate, and regular organization access is required (billing-only insufficient). It stops short of naming when to prefer download_dmarc_report over this tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_domainsList domainsA
Read-only
Inspect

Lists all domains for the specified Suped organization. Returns an array of {domain, archived}, including archived domains. Requires regular organization access; billing-only membership is insufficient.

NameRequiredDescriptionDefault
organizationIdYes

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/destructive=false and openWorld=false; the description goes beyond them by disclosing the return shape ({domain, archived}), that archived domains are included, and the authorization requirement. Pagination, ordering, and rate limits remain unspecified.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tight sentences, front-loaded with purpose, then return shape, then access caveat. No redundant or filler text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description helpfully documents the return array and the archived-domain inclusion, plus the access requirement. It is essentially complete for a simple list tool; only parameter format details are left to the schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the single organizationId parameter is undocumented in structured fields. The description conveys that the parameter selects the Suped organization whose domains are returned and that billing-only memberships are rejected, but it omits format details (24-char hex ObjectId) and that the value is required.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Lists all domains') scoped to a named organization, which cleanly separates it from create_domain, list_organizations, and the DMARC tools. It stops short of explicitly naming a sibling or spelling out when listing domains is the right call versus another lookup.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied by the resource and scope, and it adds a real prerequisite ('requires regular organization access; billing-only membership is insufficient'). However, it names no alternatives and gives no when-not guidance (e.g. when to use get_dmarc_records instead).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_issuesList issuesA
Read-only
Inspect

Lists all saved email authentication issues for the specified Suped organization. Includes open, resolved, and dismissed issues with their statuses. Requires regular organization access; billing-only membership is insufficient.

NameRequiredDescriptionDefault
organizationIdYes

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, openWorldHint=false and destructiveHint=false, so safety is covered; the description adds genuinely new context by disclosing that dismissed/resolved issues are included (not just open ones) and by spelling out the authorization tier required. It omits volume/pagination behavior, which keeps it out of the top band.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences, zero filler, and the core action is front-loaded ahead of the status scope and the access caveat. Nothing repeats the title or annotations.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter read tool with no output schema, the description covers action, scope, status breadth, and authorization. The only real gap is the identifier format and result size, both of which an agent would benefit from knowing before calling.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With a single parameter at 0% schema description coverage, the description carries the burden and only says 'the specified Suped organization' — it does not explain that organizationId is a 24-character hex ObjectId or how to obtain one. The meaning is inferable but not enriched beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Lists all saved email authentication issues') plus the scoping dimension (per organization) and the breadth of statuses covered. It is clearly distinct from the sibling tools (create_domain, get_dmarc_records, list_organizations), though it never names an alternative, so it stops short of the top band.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives a real prerequisite ('requires regular organization access; billing-only membership is insufficient'), which tells the agent when the call will fail. It does not, however, say when to prefer this over get_dmarc_records or any other sibling, so usage is only implied.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_organizationsList organizationsA
Read-only
Inspect

Lists the organizations accessible to the connected Suped account, including accessible MSP client organizations. Returns {organizations: [{id, name, isMsp, mspOrganizationId?}]}.

NameRequiredDescriptionDefault

No parameters

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds value beyond that by disclosing the result envelope and per-organization fields (id, name, isMsp, mspOrganizationId), which matters because no output schema exists. It says nothing about pagination or empty-list behavior, but with zero parameters a fully-returned list is a reasonable inference.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, zero waste, and the scope constraint is front-loaded ahead of the return shape. The inline field list is compact enough not to bloat the definition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

A zero-parameter, read-only list tool with no output schema: the description supplies the missing return contract itself, plus the account scoping that determines what the list contains. Nothing an agent needs in order to call it correctly is absent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes no parameters, so there is nothing for the description to disambiguate and the baseline of 4 applies. No false parameter hints are introduced.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description pairs a specific verb (Lists) with a specific resource (organizations) and bounds the scope to those accessible to the connected Suped account, including MSP client orgs. It also enumerates the returned fields, so an agent knows exactly what it gets. It does not explicitly contrast with siblings like create_organization or get_domains, so it stops short of 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied: an agent infers this is the discovery step before creating or querying domains. There is no explicit when-to-use statement, no exclusion clause, and no named alternative — though the 'accessible to the connected account' scoping does help an agent decide whether this covers MSP client tenants.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 7 tool updates
    • First observedcreate_domain
    • First observedcreate_organization
    • First observeddownload_dmarc_report
    • First observedget_dmarc_records
    • First observedget_domains
    • First observedlist_issues
    • First observedlist_organizations

Publisher details

Operator
Suped · Publisher source
Vendor relationship
First-party · Publisher source
Trust center
Not available
Restrictions
A Suped account with access to at least one organization is required. DMARC reports must be configured and received before report data is available. Existing Suped plan limits and organization permissions apply. Creating an MSP client requires administrator access to its parent MSP. OAuth uses the suped:write scope for reading and creation; it does not grant access to additional organizations. · Publisher source

Related MCP Servers

  • A
    license
    Not graded
    quality
    B
    maintenance
    Perplexity for social: ask what competitors are running across social and get answers grounded in real ad and creative data, not guesses.
    2
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Enables brand visibility monitoring across major AI platforms like ChatGPT, Claude, Gemini, and Perplexity. It allows users to track visibility scores, analyze competitor data, and receive actionable insights to improve AI-generated brand recommendations.
    16
    4 npm
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Browse IndustryLens's published competitive-intelligence reports and head-to-head competitor comparisons from any AI agent — real, source-backed data.
    MIT
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources