# Email Forwarding Audit AI Agent Connect

> Email Forwarding Audit MCP lets your AI client scan mailbox configurations to find security holes. It identifies rules pointing to unapproved external addresses, flags inactive configurations, and catches policy violations that could lead to data leaks. You can use it to keep your organization's email traffic within authorized boundaries.

## Overview
- **Category:** security
- **Price:** Free
- **Endpoint:** https://edge.vinkius.com/vk_preview_qfUPuTlJbHs8ApLa56pmNhDoKtq5yuqN1s3elH5R/ai-agent-connect
- **Tags:** audit, email, security, compliance, mailbox

## Description

Managing mailbox security means knowing exactly where your data is going. This MCP gives your AI client the ability to inspect forwarding rules across your organization to ensure they follow your security policies. Instead of manually checking individual mailboxes, you can ask your agent to find specific risks, like rules sending mail to personal accounts or unverified domains. 

It helps you catch shadow IT or malicious forwarding setups that bypass standard controls. You can use it to clean up old, inactive rules that clutter your environment or to verify that every active rule matches your approved list of destinations. It's a direct way to turn your AI client into a security auditor that can pinpoint high-risk policy violations in seconds.

## Tools

### get_unapproved_destinations
This tool finds all email addresses used in forwarding rules that aren't on your authorized list.

### get_approved_rules
Use this to pull a list of all forwarding rules that currently meet your organization's compliance standards.

### get_inactive_rules
This tool identifies any forwarding rules that are currently disabled or inactive.

### identify_compliance_conflicts
This tool checks active rules against your security policies to find direct violations.

## Prompt Examples

**Prompt:** 
```
Show me all the forwarding rules that are currently approved.
```

**Response:** 
```
The approved forwarding rules are: Rule ID 101 (destination: internal@company.com), Rule ID 105 (destination: partner@trusted.com).
```

**Prompt:** 
```
Are there any active rules pointing to unapproved email addresses?
```

**Response:** 
```
Yes, there is one unapproved destination being used: attacker@external.com.
```

**Prompt:** 
```
Find any high-risk compliance conflicts.
```

**Response:** 
```
A high-risk conflict was found: Rule ID 202 is active and points to an unverified external domain.
```

## Capabilities

### Exfiltration Detection
Your agent uses this to find rules sending data to unauthorized external addresses.

### Policy Verification
The AI client runs this to check if active rules violate your specific security mandates.

### Configuration Cleanup
Your agent identifies disabled or inactive rules that no longer serve a purpose.

### Compliance Auditing
The AI client compares current mailbox settings against your organization's approved destination list.

## Use Cases

### Data Leak Prevention
Identify employees who have set up rules to forward work emails to personal accounts.

### Security Audits
Run a quick check to ensure all active forwarding rules point to trusted domains.

### Policy Enforcement
Find specific rules that conflict with your company's data handling policies.

### Mailbox Hygiene
Locate and review disabled rules that are no longer needed in the environment.

## Benefits

- Detects unauthorized email destinations instantly.
- Identifies high-risk policy violations through automated cross-checks.
- Locates inactive rules to reduce configuration clutter.
- Provides a clear view of compliant versus non-compliant forwarding setups.

## How It Works

Connect your AI client to Vinkius and start auditing mailboxes immediately.

1. Connect your preferred MCP-compatible client to Vinkius.
2. Ask your AI client to scan for unapproved email destinations.
3. Review the list of compliance conflicts identified by the agent.
4. Use the findings to remediate unauthorized or inactive rules.

## Frequently Asked Questions

**What can this MCP do for my security team?**
It allows your agent to audit mailbox forwarding rules to find unapproved destinations and policy violations.

**How does it detect unauthorized forwarding?**
It uses the get_unapproved_destinations tool to find rules that point to addresses not on your authorized list.

**Can I find rules that violate my company policy?**
Yes, the identify_compliance_conflicts tool specifically looks for active rules that break your security rules.

**Does this work with my existing AI client?**
Yes, it works with any MCP-compatible client like Claude, Cursor, or Windsurf.

**Can it find old or disabled rules?**
Yes, the get_inactive_rules tool identifies all forwarding rules that are currently disabled.

**How do I find rules that violate security policies?**
You can use the `identify_compliance_conflicts` tool to find active rules that point to unverified destinations or have overly broad conditions.

**Can I filter the audit by a specific date range?**
Yes, the `get_approved_rules` tool accepts `minCreationDate` and `maxCreationDate` parameters to define your audit window.

**How are unapproved destinations identified?**
The `get_unapproved_destinations` tool identifies any destination address used in existing rules that is not present in the organization's authorized destination catalog.