{"uid":"cap_Azg7PXmOezwGCv6kc50g9","slug":"mta-sts-and-tls-rpt-check-b898dc44","name":"MTA-STS and TLS-RPT Check","description":"MTA-STS and TLS-RPT check for a domain: the _mta-sts DNS record, the published policy file (mode enforce/testing/none, allowed MX, max_age) fetched from mta-sts.<domain>, and the _smtp._tls TLS reporting record. Tells you if inbound email is protected against downgrade attacks. $0.01 per domain.","url":"https://intel.rallylive.ca/email/mta-sts","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_wpvznlxgbdApwxl17Qsye","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks a domain's MTA-STS policy and TLS-RPT reporting record to determine if inbound email is protected against downgrade attacks.","exampleAgentPrompt":"Can you check whether example.com has MTA-STS configured — I want to know the policy mode, which MX hosts are listed, the max_age, and whether the TLS reporting record is set up?","exampleUseCases":[{"title":"Pre-send email security audit","prompt":"Before we start sending email from acmecorp.com, can you check if it has a proper MTA-STS policy in enforce or testing mode, and whether the TLS-RPT record is set up so we get notified of failures?"},{"title":"Vendor email security review","prompt":"I need to check whether our vendor's domain, suppliercorp.net, has MTA-STS configured to protect inbound email — tell me the policy mode and which MX servers are listed."},{"title":"Periodic domain security monitoring","prompt":"Run an MTA-STS and TLS-RPT check on newsletter.mybrand.io and tell me if the policy is in enforce mode, what the max_age is set to, and if there's a valid TLS reporting DNS record."}],"resultDescription":"Returns the _mta-sts DNS record, the fetched MTA-STS policy file contents (including mode: enforce/testing/none, allowed MX hostnames, and max_age), and the _smtp._tls TLS-RPT reporting record — along with an overall assessment of whether inbound email is protected against downgrade attacks.","failureModes":["Domain does not exist — DNS lookup fails","No _mta-sts DNS record found — policy absent","Policy file not reachable at mta-sts.<domain> — HTTP fetch fails","Policy file malformed or missing required fields","No _smtp._tls TLS-RPT record found","Payment not processed — 402 response if x402 payment is missing"],"whenToPreferThis":"Use this endpoint when you need a combined check of both MTA-STS policy (DNS record + hosted policy file) and TLS-RPT reporting configuration for a domain in a single call. Prefer it over manual DNS lookups when you want a parsed, human-readable summary of the policy mode, allowed MX, max_age, and reporting setup — especially for bulk domain audits at $0.01 per domain.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T13:13:19.807Z","isFirstParty":false}