{"uid":"cap_462BCQrkndxN2tSBZ0sCA","slug":"sitecheck-web-intel-mx-server-port-scanner-df5194f1","name":"SiteCheck Web Intel MX Server Port Scanner","description":"For a mail domain: lists up to 3 MX hosts with their IPv4 addresses and, from Shodan's pre-collected passive scan data, which SMTP ports (25, 465, 587) were seen open on each address. Passive and possibly old; no SMTP conversation, banner, STARTTLS or certificate test is made.","url":"https://api.webintel-api.workers.dev/api/security/mx-server-test?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Mail domain such as gmail.com (required)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_jsWw4dDwNTXPU6PFaHDdy","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"For a mail domain, lists up to 3 MX hosts with their IPv4 addresses and passively-collected Shodan data on which SMTP ports (25, 465, 587) were seen open on each host.","exampleAgentPrompt":"Can you look up the MX servers for protonmail.com and tell me which SMTP ports — 25, 465, or 587 — Shodan has seen open on each of their mail hosts?","exampleUseCases":[{"title":"Email deliverability infrastructure audit","prompt":"Pull the MX servers for our company domain acme.com and show me which SMTP ports are open on each mail host — I want to check if port 587 is properly exposed for submission."},{"title":"Phishing domain mail server check","prompt":"Can you check what MX servers are set up for suspicious-domain.net and whether any SMTP ports like 25 or 465 are open on their IPs? I'm trying to assess if it's set up to send mail."},{"title":"Competitor email infrastructure reconnaissance","prompt":"Look up the mail exchange servers for competitor.com and tell me their IP addresses and which SMTP ports Shodan has recorded as open on each one."}],"resultDescription":"Returns up to 3 MX hosts for the queried domain, each with its resolved IPv4 address(es) and a record of which SMTP ports (25, 465, 587) were observed open in Shodan's passive scan data. Note: data is passive and potentially outdated; no live SMTP connection, banner grab, STARTTLS negotiation, or TLS certificate check is performed.","failureModes":["Domain has no MX records — returns empty or error response","Domain does not exist or is malformed — returns error","Shodan has no passive scan data for an MX host's IP — port data absent or empty","MX hostname does not resolve to an IPv4 address — host skipped","Rate limiting or payment failure — 402 or 429 error returned"],"whenToPreferThis":"Choose this endpoint when you need a quick, passive overview of a mail domain's MX infrastructure and SMTP port exposure without triggering any live network connections. It is ideal for reconnaissance, security audits, or phishing-domain triage where you want MX host IPs and historically observed port status from Shodan without actively probing the target. Prefer alternatives if you need live SMTP banner grabbing, STARTTLS capability testing, or real-time TLS certificate inspection.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-24T12:32:19.649Z","isFirstParty":false,"canonicalSlug":"sitecheck-web-intel-mx-server-port-scanner-df5194f1"}