{"uid":"cap_dXSXj3tykBxsFBUlCZEJN","slug":"agentstall-za-email-security-checker-ff57c77f","name":"AgentStall ZA Email Security Checker","description":"Email security and spoofing check for any domain: grades DMARC, SPF, DNSSEC, MTA-STS and TLS-RPT from public DNS and says how easily fake email could be sent in the domain's name. Alternatively returns daily-updated scorecards ranking banks, government bodies, regulators and telecoms in South Africa, Nigeria, Kenya, Egypt, Ghana and 6 other African countries.","url":"https://agentstall.nilesh-b54.workers.dev/v1/email-security?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":[],"properties":{"domain":{"type":"string","description":"Domain to check, e.g. example.co.za (use this or sector)"},"sector":{"type":"string","description":"Leave empty when checking a domain. For a ranked scorecard instead, give a sector: banks_insurers, government, metros, regulators_soe, telecoms, all (e.g. banks_insurers)"},"country":{"type":"string","description":"Scorecard only: ZA (default), NG, KE, EG, GH, MA, RW, UG, TZ, MU, BW, or ALL"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"dmarc":{"policy":"quarantine"},"grade":"B","score":75,"domain":"example.co.za","findings":["no MTA-STS: incoming mail encryption can be downgraded"],"spoofing":"harder (lands in spam)"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_j6AfcvaINbtaCV3Dmh4x7","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks a South African domain's email security configuration (DMARC, MTA-STS, SPF) and returns a grade, score, and spoofing-risk assessment, or a sector-wide scorecard.","exampleAgentPrompt":"Can you check the email security grade for fnb.co.za — I want to know if it can be spoofed and what DMARC policy it has?","exampleUseCases":[{"title":"Spoofing risk check for a supplier","prompt":"Before we onboard this new supplier, can you check the email security score for their domain supplierco.co.za — specifically whether their emails could be spoofed and what their DMARC policy is?"},{"title":"Sector-wide government email security audit","prompt":"Give me an email security scorecard for all South African government domains — I want to see which ones are most at risk of email spoofing."},{"title":"Email security check before a phishing report","prompt":"I got a suspicious email claiming to be from sars.gov.za — can you check that domain's email security grade and whether it's easy to spoof emails from them?"}],"resultDescription":"Returns a JSON object containing the domain checked, an overall email security grade (e.g. A–F), a numeric score (0–100), the DMARC policy in effect (none/quarantine/reject), a spoofing difficulty assessment (e.g. 'harder (lands in spam)'), and a list of specific security findings such as missing MTA-STS or weak DMARC configuration. For sector queries, returns an aggregated scorecard across multiple domains.","failureModes":["Domain not found or does not exist — returns empty or error result","No DNS records present for the domain — minimal findings returned","Payment not made — returns HTTP 402 with PAYMENT-REQUIRED header","Invalid sector value — returns error indicating valid sector options","Domain parameter missing without sector — returns validation error","Rate limiting or upstream DNS timeout — may return partial results"],"whenToPreferThis":"Choose this endpoint when you need to assess email spoofing risk, DMARC configuration, or overall email security posture for South African domains (.co.za and others). It uniquely offers sector-level scorecards for South African banks, insurers, government, metros, telecoms, and regulators — making it ideal for compliance audits, threat intelligence, and supplier vetting in a South African context. Use it over generic DMARC checkers when you need structured, graded output with spoofing-risk language or sector benchmarking.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-11-02T00:35:25.152Z","isFirstParty":false,"canonicalSlug":"agentstall-za-email-security-checker-ff57c77f"}