WarmInboxes Free Deliverability Tools
Free cold email deliverability checks, list tools, inbox planning and original placement research.
| Endpoint | https://warminboxes.com/mcp (streamable-http) |
|---|---|
| Registry version | 1.0.0 |
| Now | 52 tools · grade D (64) · pin ts_c62bf888fd8d5b67d7e822d7d84ad122 · protocol 2025-06-18 |
| First / last listed | 2026-11-08 00:31 UTC / 2026-11-08 00:31 UTC |
| Grade over time | 2026-11-08: D (64), 52 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: check_deliverability check_spf check_dkim check_dmarc check_bimi check_mta_sts check_ssl check_dns lookup_txt check_rdns check_blacklist check_surbl check_nameservers check_domain_expiry check_google_domain check_cname verify_email lookup_mx segment_esp plan_from_list plan_infrastructure quote_inboxes get_diagnostic_playbook expand_spintax generate_unsubscribe check_email_authentication check_domain_reputation check_tracking_domain check_bulk_sender_requirements analyze_headers analyze_email_html analyze_dmarc_report analyze_cold_email audit_campaign analyze_bounces analyze_microsoft_headers preview_inbox generate_dns_records plan_rotation plan_verification_waterfall clean_csv convert_csv combine_csvs check_suppression spamhaus_dbl_guidance burned_inbox_guidance cold_email_writing_resources find_lead_lists find_tools find_resources read_resource get_pricing
check_deliverability | Grade a domain A-F for cold email readiness. Checks SPF, DKIM, DMARC, MX, blacklists and domain age together and returns a weighted score with a per-check breakdown and what to fix. Start here for open-ended "is this domain any good" questions. params: domain* |
check_spf | Look up a domain's SPF record and validate it, including the recursive DNS lookup count that silently breaks SPF past 10. params: domain* |
check_dkim | Find and validate a domain's DKIM signing key, including key strength. Leave selector empty to auto-scan 26 common selectors (google, selector1, k1, and the rest). When no key is found, reports whether the selectors are delegated by CNAME to a provider that has not published one — the usual Microsoft 365 failure, where the records are right but signing was never switched on. params: domain*, selector |
check_dmarc | Look up and parse a domain's DMARC record: policy, subdomain policy, percentage, alignment and reporting tags, each explained. p=none (monitoring) passes: it meets Google and Yahoo's requirement and is fine for broad cold email. p=quarantine is the step for stricter enforcement; do not tell someone p=none is broken. params: domain* |
check_bimi | Validate a domain's BIMI record, the logo SVG, the VMC, and the DMARC enforcement level Gmail requires before it will show a brand logo. params: domain* |
check_mta_sts | Validate a domain's _mta-sts DNS record and its published policy file: mode, MX patterns, max_age and TLS-RPT. params: domain* |
check_ssl | Read a host's TLS certificate: issuer, validity dates and days remaining, subject alternative names, key type and size, signature algorithm, chain, negotiated protocol and whether the chain is trusted and covers the hostname. Use it on an MTA-STS policy host (mta-sts.<domain>) or a click-tracking domain, where an expired certificate stops mail or turns every click into a browser warning. Port 25 i params: domain*, port |
check_dns | Query any DNS record type for a domain: MX, TXT, A, AAAA, CNAME, NS, SOA, CAA. params: domain*, type |
lookup_txt | Every TXT record on a domain, with each one identified (SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI, or which service's ownership token it is), plus the four underscore names a receiver reads — _dmarc, _mta-sts, _smtp._tls and default._bimi — in the same lookup. Names the three mistakes that are invisible from reading the records: more than one SPF record, which makes a receiver return permerror so S params: domain* |
check_rdns | The PTR record for an IPv4 or IPv6 address, and the forward lookup that decides whether it counts. Reverse DNS is delegated to whoever holds the address block, so a PTR alone proves nothing — the operator of an IP can point it at any hostname, including one they do not own. Only the round trip is evidence: PTR names a host, that host resolves back to the same address. That pair is forward-confirme params: ip* |
check_blacklist | Check a domain or IP against 20+ major email blacklists (Spamhaus, Barracuda, SORBS and others) and report which list it appears on. params: input* |
check_surbl | Check domains against the SURBL URI blacklist in bulk. URI blacklists list the domains that appear inside a message body, so a listed tracking or landing domain sends the whole email to spam however clean the sender is. Up to 100 domains per call. params: domains* |
check_nameservers | Get the NS records and the DNS provider behind one domain or a whole list. Useful for working out who actually controls a domain's DNS before trying to fix its records. params: domains* |
check_domain_expiry | Get a domain's registrar, creation date, expiry date and days remaining, over RDAP with a WHOIS fallback for ccTLDs that publish no RDAP service. Domain age is one of the strongest cold-email risk signals. params: domain* |
check_google_domain | Tell whether a domain is already attached to a Google Workspace account, or is clear for a fresh Google tenant. params: domain* |
check_cname | Follow a host's full CNAME chain and flag the mistakes that break a cold-email tracking domain. Pass expected to assert where the chain should end up. params: host*, expected |
verify_email | Check email addresses for syntax, live MX records, disposable providers and role prefixes (info@, sales@). Does not open SMTP connections, so catch-all domains come back valid. params: emails* |
lookup_mx | Look up a domain's MX records with priorities and resolved IPs, and identify the mailbox provider (Google Workspace, Microsoft 365, Zoho, Fastmail and others) and any security gateway in front of it (Mimecast, Proofpoint, Barracuda and others). Pass `domains` instead of `domain` for up to 100 at once, which also returns a provider breakdown. Reports a null MX (RFC 7505) rather than treating it as params: domain, domains |
segment_esp | Split a list of domains by the email provider behind them (Google, Microsoft, a security gateway, or another provider) from their MX records. WarmInboxes routes Google-hosted recipients to Google Workspace inboxes and everyone else to Azure; plan_from_list sizes that split. params: domains* |
plan_from_list | Estimates a sending fleet for a recipient list. Looks up the MX records of up to 100 recipient domains (or addresses) to measure the provider mix, then sizes a Google Workspace pool for the Google-hosted recipients and an Azure pool for everyone else (Microsoft 365, other providers and gateway-protected domains, with a warning for gateways); microsoftEsp: "microsoft" moves the Microsoft recipients params: domains*, emailsPerDay*, prewarmed, microsoftEsp, billing, rotation |
plan_infrastructure | Estimates how many inboxes and domains a daily cold email volume needs and the monthly cost at WarmInboxes' published prices. Inputs: emailsPerDay; optionally the provider (esp), prewarmed or fresh, billing cycle, emails per inbox per day and inboxes per domain. With currentInboxes (healthy inboxes already sending) it sizes only the shortfall between their capacity and the target, and says when no params: emailsPerDay*, esp, prewarmed, billing, emailsPerMailbox, mailboxesPerDomain, inboxesPerTenant, rotation, currentInboxes, reservePercent, dealValue, closeRate, positiveRate |
quote_inboxes | Prices a given number of inboxes at WarmInboxes' published prices: the domains (or Azure tenants) they sit on, daily sending capacity at the provider's pace, monthly cost and delivery time. Use it when the person already knows the count ("preview 100 inboxes"); for a send volume use plan_infrastructure. Azure is sold by the tenant, so a count that does not fill one is quoted for the tenants it nee params: inboxes*, provider, prewarmed, billing |
get_diagnostic_playbook | Returns WarmInboxes' diagnostic playbook for a cold email problem: the questions to ask the person, the checks to run in order from cheapest to most expensive (with the tool for each), what WarmInboxes' published studies measured a finding to cost (for example that a SURBL listing left reply rate flat, while Google's domain-reputation refusal cost about 43% of replies), the guides and studies to r params: symptom, scenario |
expand_spintax | Expand a spintax template such as "{Hi|Hey} there" and render its Liquid merge tags, returning the total number of variations, every variable the template references, any variable with no value and no default, and a set of rendered samples. Use it to check a sequence before it sends. params: template*, vars, samples |
generate_unsubscribe | Build a CAN-SPAM and GDPR compliant opt-out footer in plain text and HTML, with a checklist saying which compliance requirements the details given actually satisfy. A footer with no postal address is the usual failure. params: company, address, unsubUrl, style, tone |
check_email_authentication | SPF, DKIM, DMARC, MX, BIMI and MTA-STS for one domain in one call, each judged pass, weak, fail or not set, with the essentials separated from the optional records. BIMI and MTA-STS are optional and come back "absent", never failed. Use it when someone has been told to "fix their email authentication" and does not know which record that means. params: domain* |
check_domain_reputation | For "this domain used to land and now it does not". Checks the domain against SURBL, its authentication, its age and the address its website resolves to, and returns a verdict by elimination (listed, broken, young, clean or unknown) with what it rules out. No reputation score: receivers hold that privately. The Spamhaus DBL needs a paid key and is reported as not checked, never as clean. params: domain* |
check_tracking_domain | Check the domain a campaign's tracked links point at: whether it resolves, serves a valid certificate, is listed on SURBL, sits on a listed address, belongs under the sending domain, and whether it is a platform's shared tracking host. A listed tracking domain is in the body of every message, which is what content filters hash. params: host*, sendingDomain |
check_bulk_sender_requirements | The bulk sender requirements, sorted honestly: SPF, DKIM, DMARC and MX checked from DNS; forward and reverse DNS when given the sending IP; one-click unsubscribe and From alignment when given a received message's raw headers; and the requirements no outside tool can see (complaint rate, per-connection TLS) named as not checked rather than passed. params: domain*, ip, headers |
analyze_headers | Read a received message's raw headers. Returns the SPF, DKIM and DMARC verdicts the receiver recorded, which domains authenticated and whether they align with the From domain (why DMARC failed on a message that "passed"), the relay hops and delays, the sending IP, plain-English issues, and whether the List-Unsubscribe headers satisfy one-click (RFC 8058). Text only: nothing is looked up or stored. params: headers* |
analyze_email_html | Read an email's HTML. Returns its size against Gmail's ~102 KB clipping limit with what is taking the room, every link and image host, tracking pixels, URL shorteners, and each linked domain checked against SURBL. Parsed inertly: nothing loads, no pixel fires, no link is followed. The SURBL lookups count against the daily free limit; set scan to false to skip them. params: html*, scan |
analyze_dmarc_report | Read DMARC aggregate (rua) reports and say who is sending as the domain and what fails: messages passing and failing, failures that are alignment only, quarantined and rejected counts, and each sending IP with its SPF and DKIM outcome, failing senders first. Takes the report XML, several of them, or a .gz report as base64. Duplicate reports are counted once. params: xml, gzipBase64 |
analyze_cold_email | Score a cold email's copy 0-100 for spam risk before it is sent: weighted trigger words by category and severity (subject hits weigh extra), ALL-CAPS, links and shorteners, currency and percent-off offers, obfuscated spellings, missing personalisation or opt-out, length. Returns each finding with how much it cost and how to fix it. Content only: it cannot see reputation or authentication. params: subject, body* |
audit_campaign | Audit a cold email campaign before launch: the lead CSV and the sequence checked together for merge tags with no column or empty values, variable syntax the sequencer will not parse, role and disposable addresses, duplicates and too many contacts per company, plus a send forecast from the sending settings. Pass the CSV text and every step of the sequence. params: csv*, sequence*, inboxes, perInbox, daysPerWeek, stepGapDays, maxPerCompany |
analyze_bounces | Classify bounce messages (NDRs): invalid address, full or disabled mailbox, reputation block, authentication failure, throttling, content block or configuration, each with whether it is hard, soft or a block, why it happened and what to do. Separate several bounces with a blank line. params: bounces* |
analyze_microsoft_headers | Read the spam verdict Microsoft 365 or Outlook stamped on a delivered message: SCL (spam confidence), BCL (bulk), PCL, SFV, the category, and the SPF, DKIM, DMARC and composite authentication results, each explained. Use it when mail lands in Outlook junk. For Gmail or any provider's routing and alignment, use analyze_headers. params: headers* |
preview_inbox | Show how a cold email's sender name, subject line and preview text are cut off in Gmail desktop, Gmail mobile and Outlook, with warnings (no sender name, all caps, empty preview, etc.). Use it to check a subject line fits before sending. params: subject*, fromName, body |
generate_dns_records | Write an SPF record from the providers that send for a domain (with an estimate of its DNS lookups against the limit of 10), a DMARC record from a policy, and where a provider publishes DKIM. Returns host, type and value to publish. It writes records; to check what is published, use check_spf, check_dmarc and check_dkim. params: spfProviders, spfIncludes, spfMx, spfAll, dmarcPolicy, dmarcRua, dmarcPct, dmarcSubdomainPolicy, dkimProvider |
plan_rotation | Suggests a two-batch inbox rotation schedule: the fleet split in half, one batch sending while the other rests, swapped every 1, 2 or 4 weeks. Returns batch sizes, the daily load per active inbox compared with a 15-a-day pace, how many inboxes the volume needs at that pace, and an eight-week calendar. A suggested schedule only: it does not pause, resume or change any inbox or sequencer. params: sendsPerDay*, inboxes*, cadenceWeeks |
plan_verification_waterfall | Price an email verification waterfall: the list run through verifiers in sequence with unknowns passed down the chain, every order compared, cheapest cost per usable email first. Uses typical figures for three verifiers unless you pass your own prices and resolve rates (POST JSON for verifiers). params: listSize*, verifiers |
clean_csv | Clean a lead CSV: malformed, duplicate, role-based (info@, sales@) and disposable addresses removed, with a count for each reason. Returns the cleaned CSV when it is 500 rows or fewer; a larger file is summarised and the person is sent to the page to download the full result. Does not verify mailboxes exist. params: csv*, removeRole, removeDisposable |
convert_csv | Rename a lead CSV's columns to the fields a sequencer imports (Instantly, Smartlead, EmailBison, or generic snake_case). Every row and column is kept; only the header changes, and columns with no standard field keep a snake_case name for custom variables. Returns the mapping, and the converted CSV when it is 500 rows or fewer. params: csv*, platform* |
combine_csvs | Merge several lead CSVs into one, matching columns that mean the same thing (Email, email_address, E-mail), optionally removing duplicate emails and adding a column for the file each row came from. Returns the combined CSV when it is 500 rows or fewer. POST JSON: files is an array. params: files*, dedupe, addSource |
check_suppression | Check a campaign list against a do-not-contact list before sending: exact email matches and, optionally, whole suppressed domains, with a per-company cap. Returns what was removed and why, and the clean CSV when it is 500 rows or fewer. params: csv*, suppression, suppressionCsv, matchDomains, maxPerCompany |
spamhaus_dbl_guidance | Explains how to check a domain on the Spamhaus Domain Block List by hand at https://check.spamhaus.org. Does not query the Spamhaus DBL (it needs a paid key) and never returns a listing verdict: the result states that nothing was checked, gives Spamhaus's own lookup, and names the blocklist checks this server does run (check_surbl, check_blacklist). params: domain |
burned_inbox_guidance | Use for "how do I run an inbox placement test", "are my emails landing in spam" or "is my inbox burned". Directs the person to WarmInboxes’ free inbox placement test and Burned Inbox Checker at https://burnedinbox.com, which sends a real test and shows where it lands. This server cannot send email, so it runs no test itself; the result gives the link and names the checks here that answer part of t params: domain |
cold_email_writing_resources | Directs the person to Cold Email AI, the WarmInboxes cold email writing assistant at https://warminboxes.com/AI (a custom GPT on ChatGPT). Does not generate email copy itself; the result gives the link and names the tools here that check a draft (analyze_cold_email, preview_inbox, expand_spintax). params: none |
find_lead_lists | Searches WarmInboxes' own catalogue of about 1,000 free B2B lead lists, by industry, role and country, as published at https://warminboxes.com/leads. It does not search the web or any other database. Returns the best-matching lists with lead counts, verified email counts and each list's page. Lists are emailed to the person from that page; this tool cannot request or download a list. params: query, category, limit |
find_tools | Find the WarmInboxes free tool for a task ("check my email headers", "clean a CSV", "will this land in spam") and say how to use it: the MCP tool to call here, or the page to send the person to when it runs only in the browser. Call with no task to list every tool. params: task, callableOnly, limit |
find_resources | Search what WarmInboxes publishes: operator notes (WarmInboxes' rules from running fleets, with the research behind them), cold email guides, deliverability playbooks, original studies and their datasets, costed infrastructure recipes, tool demo videos, inbox guides per sequencer and AI agent, provider comparisons, Claude skills, the changelog, and the offer and about pages. Searches titles and fu params: query, type, limit |
read_resource | Read a WarmInboxes operator note, guide, study, playbook, dataset, recipe, comparison or changelog entry in full, as markdown. Long pages come in parts split at headings: the first call says how many, and nextPart gives the one to ask for. Datasets also return their data as JSON. Use the url find_resources gave you. params: url*, part |
get_pricing | The WarmInboxes price list as data: prewarmed and fresh inboxes on Google Workspace, Microsoft 365 and Azure, every billing cycle, the safe daily send pace per inbox, and delivery time. For a costed fleet for a volume, use plan_infrastructure. params: none |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.