Changelog
Twenty new tools, the agent surface, and recipes
The week the free tool set went from 35 to 55, the public MCP server from 20 tools to 23, and the authenticated API got its onboarding page and its reference on this site. Also the week three things that were wrong got fixed in the open.
Tools
- MX lookup with provider and gateway identification, an email provider checker, and a bulk MX lookup for up to 2,000 domains with a CSV out. MX lookup
- A DNS utility cluster: TXT, A, AAAA and SOA record lookups, each with the interpretation the record type needs rather than a bare answer. The TXT lookup identifies every record and reads the four underscore names a receiver uses in the same call. TXT record lookup
- Short aliases for the lookups people search by another name: /dns-lookup, /ns-lookup, /cname-lookup, /ptr-lookup. /dns-lookup
- A DMARC report analyzer that reads the daily aggregate XML in the browser; nothing is uploaded. DMARC report analyzer
- SPF lookup counter, DKIM selector finder, and an email authentication checker that runs SPF, DKIM, DMARC, MX, BIMI and MTA-STS in one pass with the optional ones marked optional. Email authentication checker
- Two header readers: a DMARC alignment checker and a one-click unsubscribe checker (RFC 8058, as Google and Yahoo enforce it). DMARC alignment checker
- Reverse DNS lookup with forward confirmation (FCrDNS) for IPv4 and IPv6, and an IP reputation checker that reports findings rather than an invented score. Reverse DNS lookup
- A tracking domain checker, a Gmail clipping checker, and an email link and pixel scanner that parses HTML inertly so a pasted message cannot fire its own pixel. Tracking domain checker
- A bulk sender requirements checker for the Gmail, Yahoo and Microsoft rules, split into what DNS can settle and what no external tool can see. Bulk sender requirements checker
- A domain reputation checker built as an elimination rather than a grade: listed, broken, too new, or nothing visibly wrong — and what each verdict rules out. Domain reputation checker
- The DKIM checker now tells a delegated-but-unpublished key apart from a missing one, which is the single most common Microsoft 365 DKIM failure and was being reported as "try a custom selector". DKIM checker
For AI agents
- The public MCP server at /mcp went from 20 tools to 23: lookup_txt, check_rdns (which had been deployed and reachable by nobody), and plan_from_list. /for-ai
- plan_from_list is the playbook’s "ideal agent flow" as one call: a recipient list and a daily target in, a costed fleet split into a Google pool and an Azure pool out, with the handoff to the authenticated server at the end. the tool table
- A /developers page documents the transactional API and MCP server the way a deployment platform documents deploys: the user creates the account, the account issues the key, then the assistant connects. Preview before place; never ask for a sequencer password. /developers
- The transactional API reference is published on this site at /transactional-api.md, verbatim, with docs.warminboxes.com authoritative if the two ever differ. /transactional-api.md
- The public MCP server’s own instructions now tell an assistant that every tool is read-only, name the actions it will not find, and say where to send the user instead of "that cannot be done".
- The ChatGPT plugin manifest had three pointers to files that did not exist; all three now resolve.
Pages
- Six infrastructure recipes: fixed, costed plans for common sending volumes, every figure checked against the planner at build time. /recipes
- A How It Works page, and long-form setup pages for Instantly and PlusVibe. /how-it-works
- ChatGPT and Claude added to the integrations, since more inboxes are being driven by them. integrations
Corrections
- Three pieces of copy claimed the Spamhaus DBL was checked. It is not — it needs a paid query key — and one of the three was a pass verdict telling people they were clean on a list nobody had queried. All three fixed; the DBL is now named as not checked wherever it is relevant.
- The 1,000-a-day recipe said the unmatched 20% of a list ride the Google pool and then split the fleet as if they did not. Corrected to the rule it states: $514 a month, not $490. the recipe
- llms.txt said the MCP server carried 15 tools while it served 22. Now checked against the real table at build time, so it cannot drift again.
- The "New" badge was on 47 of 58 tool cards, which is not emphasis. Removed.
Not built, and why
- A catch-all checker, an SMTP TLS checker and an SMTP server test. Outbound port 25 is blocked from the functions this site runs on, and a version of any of them that did not open an SMTP connection would be a false pass.