Look twice.Find the gem.

AI agents and MCP servers, each published with its source and what the checks found.

Marketplace

  • Everything
  • AI agents
  • Apps
  • MCP servers
  • Templates
  • What people want
  • What changed this week
  • The verification standard
  • The ooruby Index
  • Servers that publish no source
  • Reliability guides
  • What the catalogue holds
  • Sell here

Our library

  • Everything, in one place
  • Guides
  • Glossary
  • Calculators
  • Checklists and cheat sheets
  • Community

ooruby

  • Home
  • For teams
  • Site status
  • Company projects
  • RSS feed

Verification records what our published tests found on a specific version at a specific date. It is not a warranty, and it does not certify that software is free of defects.

AI agentsAppsMCP serversTemplatesWantedCommunityOur library
Sign inSell
Catalogue/Apps/Spamscanner

Spamscanner

titanism · App

Spamscanner is a spam filter for Node.js, the command line and mail servers. It scores each message with a classifier that reads words in any language, checks links for lookalike domains and attachments for disguised executables and macros, and checks SPF, DKIM, DMARC and ARC. Each result lists the tests that fired with their points. For close calls it can ask a language model, either a local one such as Ollama or a hosted provider, and you can train it on your own mail.

Written by ooruby from the README of spamscanner 7.0.1.

Not claimed by its maker. Is this yours? Prove it and answer the findings

Why it's useful

Mail in many languages is checked for spam, phishing and malware, with each decision explained by the tests that fired.

What you could do with it

  1. 1Scan a saved email file from the command line and read which tests fired and how many points each added.
  2. 2Run it as a Postfix milter so suspected spam gets a subject tag as mail arrives.
  3. 3Ask a local Ollama model for a second opinion on messages the classifier is unsure about.

Written from its documentation: what it says it can do, not what our checks found.

SPappSupport

Maintenance

Not measured

No release date is on record for this package yet. The nightly publisher check records one as it reaches each npm package, about once every ten nights.

Release activity only: it says nothing about quality or safety, and a finished small package can be fine without releases. How it is measured

Not yet tested

What this does not cover

  • ·Everything. Treat it as you would software from anywhere else.

Receipt history: every signed receipt for every version of this listing, and what changed between them.

In its maker's words

Spam, phishing and malware filter for email in any language: a trainable classifier, link and attachment checks, SPF/DKIM/DMARC, and an optional AI second opinion from any LLM, including local Ollama models. Works as a library, CLI, Postfix milter or HTTP

Compare with

  • Proton Mail Bridge Clientside by side
  • Payload Supportside by side
  • Velaro CLIside by side
Compare all 4

How far this has been checked

Static scanned

What it establishes
Its published package, or for a hosted server its source repository at a recorded commit, was read file by file, without running it, by every check in our current scan.
What it does not
How it behaves when it runs, or anything the scan does not read yet: several rubric checks, the repository's history, and compiled code in folders named dist or build. For a hosted server, that the endpoint runs the code that was read. The ooruby Index sets out exactly what was read.
Exactly what was read
Version 7.0.1, the file with digest sha512-f0/OZplomLbwC6YYvyoo+mWeCWkCymsmEM26iTkOfl3wEgMkZRfdPgvVybIhphlgUWXi6/qzR+d/zCgwohXatQ==, as the registry publishes it. A published version cannot be replaced, so this names the same bytes for anyone who checks.
Authentication
Runs locally. No hosted endpoint is listed for this package. You run it on your own machine, so there is no endpoint of ours to authenticate against.
How the rungs work

Adding it

Run it with:

npx -y spamscanner@7.0.1

Pinned to 7.0.1, which is the version the findings above were found in. Drop the version to take whatever is newest, and the report on this page stops describing what you installed.

Where this came from

Registry
npm
Package
spamscanner
Version read
7.0.1
Resolved
2026-10-10
Open the source(opens in a new tab)

No build provenance published. The repository above is the one the publisher declared, and nothing links it to the package you would install. That is not a mark against this listing, since most packages are published this way, but it is a check nobody can run.

The badge, if this is your listing

It renders the current rung (static scanned) and links back here, where what that does and does not establish is one click away. It updates itself as the evidence deepens.

[![ooruby: static scanned](https://ooruby.com/api/badge/spamscanner)](https://ooruby.com/market/spamscanner)

About this listing

Kind
App
Category
Support
Pricing
Free
Sandbox
No
Hosted
No
Updated
2026-10-08
Price
Free
Get it freeVisit maker
Rating
no reviews yet
0 want this so far
Sign in to vote

Sign in to watch this listing and hear when its version, rung or findings change.

Similar apps

All apps
PMappSupport
Clean scanStatic scanned
Offers 100 MCP tools and a matching command line, working through Proton Mail Bridge, which must be running and signed in. Supports several accounts, a read-only mode and a gate on sending.

Proton Mail Bridge Client

googlarz
Free

Lets your AI assistant read, search, draft and send mail in your Proton Mail inbox.

11.3k installs/moMIT
VEappSupport
4 findingsStatic scanned
Signs in through the browser with your Velaro account, then lists bots, starts ingestion for a finished scraper job, creates, revokes or rotates MCP keys, sets routing policy and pushes articles. Commands depend on your plan.

Velaro CLI

velaro
Free

Manages your Velaro AI bots, knowledge base ingestion, MCP API keys and help articles from a terminal.

5.1k installs/moNo licence
PSappSupport
3 findingsStatic scanned
Adds collections, admin views and REST endpoints covering the ticket lifecycle from intake to billing. The optional AI features need an Anthropic API key, or the address of a self-hosted Ollama gateway that you set up yourself.

Payload Support

consilioweb
Free

Turns a Payload CMS admin into a helpdesk with tickets, SLAs, live chat and optional AI assists.

1k installs/moMIT

Verification records what our published tests found on a specific version at a specific date. It is not a warranty, and it does not certify that software is free of defects.