Palisade DMARC Agent
About
AI-powered DMARC and email authentication management for SPF, DKIM, DMARC, BIMI, MTA-STS, DNS records, and remediation tasks.
Details
- Author
- palisadeemail
- Categories
- Cloud Service, Infrastructure
Jump to
Setup
Install Palisade DMARC Agent in your MCP client (Claude Desktop, Cursor, Windsurf, and others).
Repository: https://github.com/palisadeemail/palisade-mcp
Follow the installation instructions in the repository README, then restart your MCP client.
Connect an MCP client to thePalisadeMCP server, which monitors and manages email authentication (SPF, DKIM, DMARC, MTA-STS, BIMI) for your domains.
Palisade's MCP server is remote (Streamable HTTP athttps://api.palisade.email/mcp). This package is a thin local bridge for stdio-based clients, usingmcp-remoteunder the hood. Clients that support remote HTTP MCP servers with a bearer token can point at the URL directly and skip this package.
Create one atapp.palisade.email→ Settings → API keys, or programmatically via headless signup. See thedeveloper guide.
PALISADE_API_KEY=secret_... npx -y @palisadeemail/mcp
{ "mcpServers": { "palisade": { "command": "npx", "args": ["-y", "@palisadeemail/mcp"], "env": { "PALISADE_API_KEY": "secret_..." } } } }
Direct (clients that support remote HTTP MCP)
{ "mcpServers": { "palisade": { "type": "http", "url": "https://api.palisade.email/mcp", "headers": { "Authorization": "Bearer secret_..." } } } }
Whenheaders.Authorizationis set, the client authenticates with that API key and does not fall back to OAuth. The server replies401with aWWW-Authenticatechallenge whenever credentials are missing or rejected, so a bad key surfaces as a connection error rather than silently starting an OAuth flow. The one exception isAPI-key-only discoverybelow, where a client opts out of that challenge on purpose.
Some MCP directories probe an endpoint before they forward a configured API key. For those clients, usehttps://api.palisade.email/mcp?auth=api-key. It keeps API-key authentication enabled but omits the OAuth discovery challenge from an unauthenticated probe. Send the sameAuthorization: Bearer secret_...header after connecting.
If the server connects but the Palisade tools are missing
A session that offers onlyauthenticate/complete_authenticationis using an OAuth-based entry, not your API-key entry. The Palisade server has no reduced tool set: any authenticated caller gets the full list underTools. Those two tools come from the client's own pending-OAuth state.
This usually means a same-named server is configured somewhere else and is the one in effect. In Claude Code,--scope localapplies only to the directory it was run in, and apalisadeentry in user scope (from a previous OAuth connection) applies everywhere else. Check which entry actually wins:
The reported scope is the one in effect. If it is not the entry holding your API key, remove the other one, for exampleclaude mcp remove palisade -s user, or give the API-key entry a distinct name.
Accounts (get_account), domains (list_domains,get_domain,add_domain,remove_domain,verify_domain), DNS setup (get_dns_records— the exact records to publish at your own DNS provider), MTA-STS (get_mta_sts,enable_mta_sts), remediation tasks (list_tasks,get_task), groups (list_groups), and billing (get_subscription,start_checkout,get_billing_portal_url).
Palisade tells you which DNS records to publish; you apply them at whatever DNS provider hosts the domain. Payment happens on Stripe-hosted pages.
- PALISADE_API_KEY(required) — your Palisade API key.
- PALISADE_MCP_URL(optional) — override the server URL (defaults tohttps://api.palisade.email/mcp).
Navigate your Aiven projects and interact with the PostgreSQL®, Apache Kafka®, ClickHouse® and OpenSearch® services
Yunxiao MCP Server provides AI assistants with the ability to interact with the Yunxiao platform.
Get prescriptive CDK advice, explain CDK Nag rules, check suppressions, generate Bedrock Agent schemas, and discover AWS Solutions Constructs patterns.
This AWS Labs Model Context Protocol (MCP) server for CloudTrail enables your AI agents to query AWS account activity for security investigations, compliance auditing, and operational troubleshooting.
Core AWS MCP server providing prompt understanding and server management capabilities.
Analyze CDK projects to identify AWS services used and get pricing information from AWS pricing webpages and API.
Query and analyze your Axiom logs, traces, and all other event data in natural language
Manage and interact with Microsoft Azure services.
Bastion: External Attack Surface Monitoring
Ask your AI assistant about your attack surface: run scans, catch expiring certificates and domains, triage findings, and generate reports.
Agent-ready global image CDN that AI agents can install and operate through MCP.
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.

