{"uid":"cap_LM1KcsmMykpABhttskhD2","slug":"mta-sts-tls-rpt-email-transport-security-auditor-de827647","name":"MTA-STS & TLS-RPT Email Transport Security Auditor","description":"SMTP transport-security audit: MTA-STS (RFC 8461) + TLS-RPT (RFC 8460). Resolves the policy DNS records, fetches and parses the well-known policy file, cross-validates the policy mx: patterns against the domain's real MX, returns an enforce/report verdict. Complements SPF/DKIM/DMARC with the TLS transport layer. Deterministic, Ed25519-signed. $0.003 USDC via x402 on Base. SYNTHORA.","url":"https://mtasts.hergertsynthora.com/service","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"op":{"enum":["check","mtasts","tlsrpt"],"type":"string","description":"Audit scope (default check = full)"},"domain":{"type":"string","description":"Domain or email address to audit"}}},"responseSchema":{"type":"json","example":{"ok":true,"niche":"mtasts","result":{"score":100,"domain":"example.com","issues":[],"mta_sts":{"mx":["*.mail.example.com"],"mode":"enforce","max_age":604800,"dns_present":true,"mx_matches_dns":true,"policy_reachable":true},"tls_rpt":{"present":true},"verdict":"enforced+reporting"}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.05","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.05/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_usKt8MSatPBq5LynGzzqR","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.05","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits a domain's MTA-STS policy and TLS-RPT configuration by resolving DNS records, fetching the policy file, and cross-validating MX patterns to return an enforce/report verdict","exampleAgentPrompt":"Do a full MTA-STS and TLS-RPT audit on example.com — check whether the policy DNS records, the well-known policy file, and the MX patterns all line up and tell me if it's in enforce or report mode.","exampleUseCases":null,"resultDescription":"Returns a verdict indicating whether the domain's MTA-STS policy is in enforce or report mode, along with the resolved DNS policy records, the parsed policy file contents, MX pattern cross-validation results, and TLS-RPT configuration status. Response is Ed25519-signed for integrity assurance.","failureModes":["Domain not found or invalid — DNS resolution failure","No MTA-STS DNS record present — policy not configured","Policy file unreachable at well-known URL — HTTP fetch failure","MX records do not match any MTA-STS policy mx: patterns — cross-validation mismatch","No TLS-RPT record found — reporting not configured","Invalid domain format provided — input validation error","Payment not processed — x402 payment required error"],"whenToPreferThis":"Use this endpoint when you need to specifically audit the TLS transport layer of email security (MTA-STS + TLS-RPT) for a domain, complementing SPF/DKIM/DMARC checks. Prefer this over generic email security tools when you need RFC 8461/8460 compliance verification with Ed25519-signed deterministic results, or when diagnosing why email TLS enforcement is failing between mail servers.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-13T18:32:57.781Z","isFirstParty":false}