Skip to main content
Glama
raj-rubicon

Rubiscout Email Analysis MCP Server

by raj-rubicon

rubiscout-mcp

MCP server for Rubiscout — AI-powered email header analysis for phishing, spoofing, and BEC detection. Exposes Rubiscout's forensic analysis as tools for Claude Code, Claude Desktop, Cursor, and any other MCP-compatible agent.

Install

npx rubiscout-mcp

Or install globally:

npm install -g rubiscout-mcp

Related MCP server: mailX tools

Configuration

Get a free API key at rubiscout.com/dashboard, then add to your MCP client config (e.g. ~/.claude/settings.json or Claude Desktop config):

{
  "mcpServers": {
    "rubiscout": {
      "command": "npx",
      "args": ["-y", "rubiscout-mcp"],
      "env": {
        "RUBISCOUT_API_KEY": "rbs_live_..."
      }
    }
  }
}

Alternatively, set RUBISCOUT_API_KEY as a system environment variable and omit the env block.

Tools

Tool

Description

analyze_email

Submit a raw email string for full forensic analysis. Returns verdict, risk score, authentication results (SPF/DKIM/DMARC/ARC), IP reputation, routing trace, and recommendations.

get_analysis

Retrieve a previously stored analysis by UUID.

list_analyses

List recent analyses, optionally filtered by risk score.

Example usage

Once configured, ask your agent directly:

"Analyze this email for me and tell me if it's a phishing attempt" [paste email]

"Get my last 5 analyses and summarize the threat patterns"

"Analyze all .eml files in this directory and flag any Critical or High risk ones"

Development

npm install
npm run build
npm start

Docker

docker build -t rubiscout-mcp .
docker run -i -e RUBISCOUT_API_KEY=rbs_live_... rubiscout-mcp

License

MIT

Install Server
A
license - permissive license
A
quality
C
maintenance

Maintenance

Maintainers
Response time
Release cycle
Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • A
    license
    -
    quality
    D
    maintenance
    An advanced email security analysis MCP server for real-time phishing detection, comprehensive header analysis, and threat intelligence integration. It enables users to extract indicators of compromise and validate email authentication protocols like DKIM, SPF, and DMARC.
    Last updated
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for email deliverability: validate SPF/DKIM/DMARC/BIMI, check blacklists, test SMTP/IMAP, look up DNS, and generate ready-to-deploy records for any major email provider. Ships with two one-click prompts (audit-deliverability, setup-dns). Public, no auth.
    Last updated
    17
    MIT
  • F
    license
    -
    quality
    D
    maintenance
    Wraps the ScanMalware.com API to enable phishing triage, malware scanning, and certificate inspection through natural language, allowing users to submit scans, retrieve results, and analyze threats via MCP tools.
    Last updated

View all related MCP servers

Related MCP Connectors

  • Emailable MCP — wraps the Emailable email verification API (emailable.com)

  • DMARC analytics for AI assistants — domain health, SPF/DKIM records, compliance stats, anomalies.

  • Scan and fix email auth (SPF, DMARC, DKIM, MX, blacklists, expiry) + DNS checks. Validated fixes.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/raj-rubicon/rubiscout-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server