{"uid":"cap_bo461yOjfUWZ6CKsQtJcP","slug":"mailproof-x402-domain-email-security-audit-31a8d38d","name":"MailProof x402 — Domain Email Security Audit","description":"Pay-per-request email and domain verification. No API keys, subscriptions, SMTP probes, or stored addresses.","url":"https://mailproof-rescue.savannah-5966.chatgpt.site/api/v1/domain-audit","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","pattern":"^[A-Za-z0-9.-]+$","maxLength":253,"description":"Domain to audit as a URL query parameter. Public DNS and HTTPS evidence is checked in real time and not retained."}},"additionalProperties":false}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"spf":{"valid":true,"present":true,"lookupCount":3,"lookupLimit":10},"dmarc":{"valid":true,"policy":"reject","present":true},"grade":"strong","score":85,"dnssec":{"validated":true},"domain":"example.com","mtaSts":{"mode":"enforce","policyValid":true},"auditedAt":"2026-08-19T09:00:00.000Z","limitations":["No mailbox, SMTP handshake, sending reputation or inbox-placement test is performed."],"mailRouting":{"present":true,"provider":"Google Workspace"},"remediation":[],"tlsReporting":{"valid":true,"present":true},"controlCoverage":[{"status":"pass","control":"DMARC enforcement"}]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"29","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$29/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"29","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"29","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_KkMZBXtIyTeYERz6ZDFl-","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"29","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits a domain's email security posture by checking SPF, DMARC, DNSSEC, MTA-STS, TLS reporting, and mail routing configuration in real time.","exampleAgentPrompt":"Can you run a full email security audit on stripe.com and tell me if their SPF, DMARC, and DNSSEC are properly configured and what grade they get?","exampleUseCases":[{"title":"Pre-send domain trust check","prompt":"Before we send that outreach campaign to leads at acmecorp.com, can you audit their domain's email security to see if they have DMARC enforcement set up and what mail provider they use?"},{"title":"Security posture review for client domain","prompt":"My client just handed over their domain, clientbrand.io — can you do an email security audit on it and tell me what's misconfigured, what the score is, and what we need to fix?"},{"title":"Vendor email security vetting","prompt":"We're onboarding a new vendor at payroll-partner.net — can you check whether their domain has SPF, DMARC with a reject policy, DNSSEC, and MTA-STS all properly in place?"}],"resultDescription":"Returns a JSON object containing: SPF validity and DNS lookup count, DMARC policy and validity, DNSSEC validation status, MTA-STS mode and policy validity, TLS reporting status, detected mail routing provider, an overall security grade (e.g. 'strong') and numeric score (0-100), a list of passing/failing security controls, remediation recommendations, and a timestamp of when the audit was performed. Also includes a limitations notice clarifying no SMTP handshake or inbox-placement testing is performed.","failureModes":["Invalid domain format — domain must match pattern ^[A-Za-z0-9.-]+$ and be ≤253 characters","Domain does not exist or has no DNS records — may return absent/invalid statuses for all checks","DNS lookup timeouts causing incomplete SPF resolution results","MTA-STS policy fetch failures if the domain's HTTPS policy endpoint is unreachable","Payment failure via x402 protocol before the request is processed"],"whenToPreferThis":"Choose this endpoint when you need a fast, pay-per-use, no-subscription email security audit that checks SPF, DMARC, DNSSEC, MTA-STS, and TLS reporting without requiring API keys or storing any domain data. Prefer it over general DNS lookup tools when you need a scored, graded, remediation-oriented security report specifically focused on email authentication infrastructure. Not appropriate if you need SMTP handshake testing, mailbox existence checks, inbox placement analysis, or sending reputation scores.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T18:31:36.442Z","isFirstParty":false}