scan_email

com.ismalicious/mcp-server · Verify this server

Scan ONE email message for phishing and malware before delivering, opening or acting on it. Send the raw message (eml, preferred) or the fields you already parsed (message: headers, text, html, attachment names, types and digests). Returns a verdict (malicious | suspicious | clean | inconclusive), a recommendedAction (quarantine | review | warn | deliver), a 0-100 riskScore, a headline you can relay as is, the strongest reasons, and what it could not check (coverage.skipped). It reads the sender and Reply-To, the connecting server, every link host and every attachment hash against threat intelligence, plus the tells of a phishing message: link text that names another site, a domain or a display name that imitates a well-known brand, a program named like a document, a display name that shows another address, credentials in a URL, an IDN homograph. From a raw message it also reads attachments for structure, never running them: the file type from its bytes, macros and remote templates in Office files, risky entries in archives, PDF actions, HTML that rebuilds a file in the browser; a message attached to it is read as a message of its own. It also flags text aimed at an AI reading the mail (prompt injection, including text hidden from a person). It never runs an attachment, fetches a link or calls a third party while you wait. malicious needs a listing in our data: the shape of a message alone asks for a review at most. clean is a positive claim and needs your own receiving system's DMARC pass: pass authservId (the id it writes in its Authentication-Results header) or trustAuthenticationResults, otherwise a message with nothing against it is inconclusive, which is not safe. deliver means no objection from this scan; never use it to release a message another engine quarantined. Costs one scan of the scan meter per message, whatever its size (not a request of the monthly quota).