{"uid":"cap_fsIpDmmfAA2iF4m9Ft2li","slug":"tinstop-email-security-check-2051347f","name":"Tinstop Email Security Check","description":"Tinstop is a machine-payable Website Intelligence API for domain security and performance audits: DNS, SSL/TLS, HTTP security headers, SPF/DKIM/DMARC email authentication, and Google PageSpeed. Pay per call with x402 using USDC on Base. No accounts or API keys.","url":"https://tinstop.com/v1/email-security-check?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"domain":{"type":"string","description":"The domain name to check email security records for (e.g. 'example.com'). Do not include http:// or https:// protocol prefixes."}}},"responseSchema":{"type":"object","title":"EmailCheckResponse","required":["domain","score","subscores","issues","checks","audited_at","cached","scan_id"],"properties":{"score":{"type":"integer","title":"Score","description":"Calculated overall email security score (0-100)"},"cached":{"type":"boolean","title":"Cached","description":"True if response was served from cache"},"checks":{"type":"object","title":"Checks","description":"Raw check results for SPF, DKIM, and DMARC records","additionalProperties":true},"domain":{"type":"string","title":"Domain","description":"Audited domain name"},"issues":{"type":"array","items":{"type":"object","additionalProperties":true},"title":"Issues","description":"Identified email security vulnerabilities"},"scan_id":{"type":"string","title":"Scan Id","description":"The unique database record tracking ID for this scan"},"subscores":{"type":"object","title":"EmailSubscores","required":["spf","dkim","dmarc"],"properties":{"spf":{"type":"integer","title":"Spf","description":"SPF record security subscore (0-100)"},"dkim":{"type":"integer","title":"Dkim","description":"DKIM configuration subscore (0-100)"},"dmarc":{"type":"integer","title":"Dmarc","description":"DMARC alignment and policy subscore (0-100)"}},"description":"Subscores representing SPF, DKIM, and DMARC metrics separately"},"audited_at":{"type":"string","title":"Audited At","description":"ISO 8601 UTC timestamp of the check request"},"request_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Request Id","description":"Gateway request tracking ID"}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.05","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.05/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.05","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_pOrUIUDJja0pQW3CG8fVz","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.05","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits a domain's email authentication setup by checking SPF, DKIM, and DMARC records and returning a scored security report with identified vulnerabilities.","exampleAgentPrompt":"Can you check the email security setup for stripe.com — I want to see if their SPF, DKIM, and DMARC records are properly configured and get an overall score?","exampleUseCases":[{"title":"Pre-acquisition domain security vetting","prompt":"Before we finalize this acquisition, can you audit the email security posture of acmecorp.com — specifically whether they have SPF, DKIM, and DMARC properly set up, and flag any vulnerabilities?"},{"title":"Email spoofing risk assessment","prompt":"I'm worried that our domain, mybusiness.com, could be spoofed in phishing attacks. Can you run a full SPF, DKIM, and DMARC check and tell me how protected we are?"},{"title":"Vendor email security compliance check","prompt":"We require all vendors to have DMARC enforcement enabled. Can you check email security records for vendor-partner.com and tell me their DMARC policy and overall score?"}],"resultDescription":"Returns a JSON object containing an overall email security score (0-100), individual subscores for SPF, DKIM, and DMARC (each 0-100), raw DNS record check results, a list of identified email security vulnerabilities with details, the audited domain, ISO 8601 timestamp, a unique scan ID, and a flag indicating whether the result was served from cache.","failureModes":["Invalid domain format (protocol prefix included) may cause parsing errors","Domain with no DNS records may return zero scores and empty checks","Non-existent or unregistered domains may return errors or null record sets","DKIM check may return incomplete results if no DKIM selector is discoverable","Payment failure via x402/USDC may prevent the request from being processed","Rate limiting or network timeouts may cause delayed or failed responses"],"whenToPreferThis":"Choose this endpoint when you specifically need a scored, structured audit of a domain's email authentication records (SPF, DKIM, DMARC) in a single API call without managing API keys or accounts. It is particularly well-suited for AI agents that need machine-readable scores and issue lists for email security compliance checks, phishing risk assessments, or vendor vetting workflows. Prefer this over manual DNS lookups when you need a normalized 0-100 scoring model across all three email authentication protocols simultaneously.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-11T12:42:01.172Z","isFirstParty":false,"canonicalSlug":"tinstop-email-security-check-2051347f"}