Mailcheck – Free/open-source email deliverability checker (SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI) (korpo.pro)
from mailcheck@lemmy.dbzer0.com to selfhosted@lemmy.world on 26 Apr 00:13
https://lemmy.dbzer0.com/post/67786948

Hey fellow self-horders!

I built mailcheck — a free, open-source tool that checks all 6 email authentication protocols (SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI) for any domain and gives you a 0–100 deliverability score.

Try it: korpo.pro — type any domain and get instant results.

Self-host it: It’s MIT licensed with a FastAPI backend. pip install mailcheck or clone from our Forgejo repo.

CLI: mailcheck example.com — great for CI/CD integration (exit code 2 on critical issues).

API: curl https://korpo.pro/api/v1/check/example.com — no auth needed, 100 req/hr.

Batch mode: mailcheck --file domains.txt

I found that many well-known domains have misconfigurations — even big crypto projects. The tool helped me fix my own domain’s email auth setup.

Would love feedback from email/infra folks!

#selfhosted

threaded - newest

savvywolf@pawb.social on 26 Apr 00:37 next collapse

The problem with tools like this is that they don’t actually check that the mail is sent correctly. You can define security keys, but they don’t mean anything if your mail server doesn’t use them correctly.

For testing, I use www.mail-tester.com which you send an email to and it does more thorough tests on the server and email itself.

Dultas@lemmy.world on 26 Apr 06:07 collapse

Yeah and I’m not seeing any mention of blocklist checking. I was sending email for months with no issue then the ISP apparently updated their PBL.

irmadlad@lemmy.world on 26 Apr 01:13 next collapse

Firefox 149.0.2 (64-bit), Linux Mint, using VPN. I must have settings that are blocking the processing of the domain for whatever reason. I’ve tried multiple domains including well known domains. No joy. Sorry about that.

pHr34kY@lemmy.world on 26 Apr 02:18 next collapse

Interesting. I’m getting full marks on mxtoolbox but failing the same tests on this one.

wilo108@lemmy.ml on 26 Apr 04:10 next collapse

Shows a failure if the DKIM selector isn’t on an arbitrary list? What’s going on there?

ikidd@lemmy.dbzer0.com on 26 Apr 04:22 next collapse

Yah, I don’t think this is working. It’s failing spf and dkim records that have worked for years

Decronym@lemmy.decronym.xyz on 26 Apr 04:30 collapse

Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:

Fewer Letters More Letters
SSL Secure Sockets Layer, for transparent encryption
TLS Transport Layer Security, supersedes SSL
VPN Virtual Private Network

1 acronyms in this thread; the most compressed thread commented on today has 6 acronyms.

[Thread #256 for this comm, first seen 26th Apr 2026, 04:30] [FAQ] [Full list] [Contact] [Source code]