{"uid":"cap_3n1IqZLvh2OaukzXA_7g2","slug":"agent402-domain-security-audit-f31d2478","name":"Agent402 Domain Security Audit","description":"Hand over a domain and get one graded security & email-deliverability audit: SPF, DMARC, DKIM and MX (why your mail lands in spam), the web security headers, and the TLS certificate - every finding from a live probe, with an overall letter grade, a downloadable checks appendix, and a prioritized, specific list of fixes. USDC (x402/MPP) or card (Stripe). Not cached.","url":"https://agent402.tools/v1/domain-audit","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"domain":{"type":"string","description":"The domain to audit, e.g. example.com (also accepts a URL or host)."},"format":{"enum":["markdown","json"],"type":"string","description":"Response shape (default markdown report)."}}},"responseSchema":{"type":"json","example":{"meta":{"tier":"domain-audit","grade":"B","domain":"example.com","composite":82,"email_score":90,"header_score":70,"synthesis_model":"anthropic/claude-opus-5","tls_days_remaining":204},"grade":"B","domain":"example.com","report":"# Domain Security Audit: example.com\n\n**Overall grade: B** (82/100)\n\n## Overall grade\n...","tables":[{"name":"email-checks","rows":[["spf","pass","SPF record present, 1 DNS lookup, ~all qualifier"]],"label":"Email authentication checks","columns":["Check","Status","Detail"]}],"sources":[],"composite":82}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.6","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.6/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.6","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.6","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_PzDn2cqvcXb2sub5NiFcj","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.6","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs a comprehensive security audit of a domain, scoring email authentication (SPF/DKIM/DMARC), TLS/HTTPS configuration, and HTTP security headers, then returns a graded report with actionable findings.","exampleAgentPrompt":"Can you run a full domain security audit on stripe.com and give me the report in markdown — I want to see the grade, email auth scores, and TLS status?","exampleUseCases":[{"title":"Pre-launch security check","prompt":"We're about to go live with acmecorp.com — can you audit it for security issues and give me a grade? I want to see how our email authentication and HTTPS setup looks before we flip the switch."},{"title":"Email deliverability investigation","prompt":"Our emails from sendgrid.acme.io keep landing in spam. Can you audit that domain and check its SPF, DKIM, and DMARC setup so we can figure out what's misconfigured?"},{"title":"Competitive security benchmarking","prompt":"I want to compare the security posture of competitor.com against ours — can you audit it and return the results as JSON so I can plug the scores into my dashboard?"}],"resultDescription":"A structured response containing: an overall letter grade (A–F), a composite score (0–100), sub-scores for email authentication and HTTP security headers, TLS days remaining, a detailed breakdown table of SPF/DKIM/DMARC checks with pass/fail status, and either a human-readable markdown report or a JSON object depending on the requested format.","failureModes":["Invalid or non-existent domain returns an error or partial results","Private/internal domains (e.g. localhost, intranet) may not resolve and will fail","Domains with aggressive rate limiting may return incomplete DNS lookup results","Malformed URL input may fail parsing before audit begins","TLS lookup failures if the domain has no HTTPS endpoint"],"whenToPreferThis":"Choose this endpoint when you need an automated, graded security audit of a public domain covering email authentication (SPF/DKIM/DMARC), HTTP security headers, and TLS certificate status in a single call. It is especially useful for pre-launch reviews, deliverability debugging, compliance checks, or competitive benchmarking. Prefer it over manual DNS lookup tools when you want a synthesized, letter-graded report rather than raw DNS record data.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T00:52:49.361Z","isFirstParty":false}