{"uid":"cap_MB5yVioRCwWQkAXOPhqcp","slug":"vextorium-email-security-analyzer-a3593277","name":"Vextorium Email Security Analyzer","description":"Email security of a domain: MX, SPF (final policy, multiple-record and lookup-limit problems), DMARC (policy, subdomains, reporting), MTA-STS, TLS-RPT and BIMI, with a score and recommendations. Detects spoofable domains.","url":"https://api.vextorium.com/v1/email-security?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"required":["domain"],"properties":{"domain":{"type":"string"}}},"type":{"type":"string","const":"http"},"method":{"enum":["POST"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":["object","null"],"properties":{"mx":{"type":["array","null"],"items":{"type":["null","string"]}},"spf":{"type":["object","null"],"properties":{"record":{"type":["string","null"]},"final_policy":{"type":["string","null"]},"dns_queries_approx":{"type":["number","null"]}}},"bimi":{"type":["boolean","null"]},"dmarc":{"type":["object","null"],"properties":{"policy":{"type":["string","null"]},"record":{"type":["string","null"]},"percentage":{"type":["string","null"]},"reports_to":{"type":["string","null"]},"subdomains":{"type":["string","null"]}}},"score":{"type":["number","null"]},"domain":{"type":["string","null"]},"mta_sts":{"type":["boolean","null"]},"tls_rpt":{"type":["boolean","null"]},"warnings":{"type":["array","null"],"items":{"type":["null","string"]}}}}}}}},"responseSchema":{"type":"json","example":{"mx":["5 gmail-smtp-in.l.google.com.","10 alt1.gmail-smtp-in.l.google.com."],"spf":{"record":"v=spf1 redirect=_spf.google.com","final_policy":"no 'all'","dns_queries_approx":1},"bimi":false,"dmarc":{"policy":"none","record":"v=DMARC1; p=none; sp=quarantine; rua=mailto:mailauth-reports@google.com","percentage":"100","reports_to":"mailto:mailauth-reports@google.com","subdomains":"quarantine"},"score":45,"domain":"gmail.com","mta_sts":true,"tls_rpt":true,"warnings":["DMARC at p=none: it only monitors, it does not protect against spoofing."]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.004","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.004/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.004","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.004","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_z46NCcCiy3ndrN6WpJYey","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.004","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Analyzes a domain's email security posture by checking MX, SPF, DMARC, MTA-STS, TLS-RPT, and BIMI records, returning a score, warnings, and spoofability detection.","exampleAgentPrompt":"Can you check the email security setup for example.com — I want to know if it can be spoofed, what the SPF and DMARC policies look like, whether MTA-STS is enabled, and what score it gets overall?","exampleUseCases":[{"title":"Pre-send domain spoofability check","prompt":"Before we launch this phishing simulation campaign, check whether acmecorp.com can actually be spoofed — I need to see its DMARC policy, SPF setup, and overall email security score."},{"title":"Customer domain onboarding audit","prompt":"We're onboarding newclient.io to our email platform — can you pull their full email security report including MX, SPF, DMARC, MTA-STS, and any warnings about gaps in their configuration?"},{"title":"Competitor email security benchmarking","prompt":"I want to compare how our domain securityfirst.com stacks up on email security — run a full audit and give me the score plus any warnings about spoofing risks or missing records."}],"resultDescription":"Returns a JSON object containing the domain's MX record list, SPF record string and final policy, approximate SPF DNS lookup count, DMARC record with policy/subdomain policy/reporting address/percentage, MTA-STS boolean, TLS-RPT boolean, BIMI boolean, a numeric security score (0–100), and an array of human-readable warnings about spoofability or misconfiguration issues.","failureModes":["Invalid or non-existent domain returns error or empty/null fields","Domain with no DNS records may return null for all email security fields","SPF lookup limit exceeded reported as a warning rather than hard error","Typo in domain name leads to incorrect analysis with no indication of error","Transient DNS resolution failures may produce incomplete results"],"whenToPreferThis":"Choose this endpoint when you need a comprehensive, multi-protocol email security audit covering SPF, DMARC, MX, MTA-STS, TLS-RPT, and BIMI in a single call, especially when spoofability detection and a composite score are needed. It is better than manual DNS lookups when you want interpreted policy analysis (e.g. detecting 'no all' in SPF or DMARC at p=none) with actionable warnings rather than raw DNS data.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-11T18:54:42.321Z","isFirstParty":false,"canonicalSlug":"vextorium-email-security-analyzer-b62c331e"}