{"uid":"cap_lZgeEXfyPKUsKf5o5thBl","slug":"vextorium-email-security-analyzer-b62c331e","name":"Vextorium Email Security Analyzer","description":"Email security of a domain: MX, SPF (final policy, multiple-record and lookup-limit problems), DMARC (policy, subdomains, reporting), MTA-STS, TLS-RPT and BIMI, with a score and recommendations. Detects spoofable domains.","url":"https://api.vextorium.com/seguridad-correo-pago?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"required":["dominio"],"properties":{"dominio":{"type":"string"}}},"type":{"type":"string","const":"http"},"method":{"enum":["POST"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":["object","null"],"properties":{"mx":{"type":["array","null"],"items":{"type":["null","string"]}},"spf":{"type":["object","null"],"properties":{"registro":{"type":["string","null"]},"politica_final":{"type":["string","null"]},"consultas_dns_aprox":{"type":["number","null"]}}},"bimi":{"type":["boolean","null"]},"dmarc":{"type":["object","null"],"properties":{"politica":{"type":["string","null"]},"registro":{"type":["string","null"]},"porcentaje":{"type":["string","null"]},"reportes_a":{"type":["string","null"]},"subdominios":{"type":["string","null"]}}},"avisos":{"type":["array","null"],"items":{"type":["null","string"]}},"dominio":{"type":["string","null"]},"mta_sts":{"type":["boolean","null"]},"tls_rpt":{"type":["boolean","null"]},"puntuacion":{"type":["number","null"]}}}}}}},"responseSchema":{"type":"json","example":{"mx":["5 gmail-smtp-in.l.google.com.","10 alt1.gmail-smtp-in.l.google.com.","20 alt2.gmail-smtp-in.l.google.com.","30 alt3.gmail-smtp-in.l.google.com.","40 alt4.gmail-smtp-in.l.google.com."],"spf":{"registro":"v=spf1 redirect=_spf.google.com","politica_final":"sin 'all'","consultas_dns_aprox":1},"bimi":false,"dmarc":{"politica":"none","registro":"v=DMARC1; p=none; sp=quarantine; rua=mailto:mailauth-reports@google.com","porcentaje":"100","reportes_a":"mailto:mailauth-reports@google.com","subdominios":"quarantine"},"avisos":["DMARC en p=none: solo monitoriza, no protege contra suplantación."],"dominio":"gmail.com","mta_sts":true,"tls_rpt":true,"puntuacion":45}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.004","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"registry","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.004/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.004","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.004","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_r8eQQ9bSuY_-HMWqmITmG","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.004","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Analyzes a domain's email security posture by checking MX, SPF, DMARC, MTA-STS, TLS-RPT, and BIMI records, returning a score and actionable recommendations.","exampleAgentPrompt":"Can you run a full email security audit on paypal.com — check its MX, SPF, DMARC, MTA-STS, TLS-RPT, and BIMI records, and tell me if the domain could be spoofed?","exampleUseCases":[{"title":"Pre-send domain spoofability check","prompt":"Before we launch this email campaign, can you check whether our sender domain acme-corp.com has proper SPF, DMARC, and MTA-STS set up, and flag anything that could let attackers spoof us?"},{"title":"Vendor due diligence email security review","prompt":"We're about to onboard a new supplier at vendor-xyz.com — can you audit their email security configuration and tell me if their DMARC policy actually protects against spoofing or just monitors?"},{"title":"Competitor phishing risk assessment","prompt":"I want to know if rival-brand.com is vulnerable to email spoofing attacks — check their full email security setup including SPF lookup limits, DMARC enforcement percentage, and whether they have MTA-STS enabled."}],"resultDescription":"Returns a JSON object with: list of MX records, SPF record text and final policy evaluation (including whether lookup limits are exceeded), DMARC record with policy, subdomain policy, reporting addresses and percentage, boolean flags for MTA-STS, TLS-RPT, and BIMI presence, an array of human-readable warnings/recommendations, and a numeric security score (0–100).","failureModes":["Domain does not exist or has no DNS records — may return null fields","SPF record has too many DNS lookups causing evaluation failure","DMARC record is malformed and cannot be parsed","Network/DNS timeout during record resolution","Invalid domain input format returns an error"],"whenToPreferThis":"Choose this endpoint when you need a comprehensive, multi-protocol email security audit for a domain in a single call — covering MX, SPF, DMARC, MTA-STS, TLS-RPT, and BIMI together with a scored summary and plain-language warnings. Ideal for security audits, vendor onboarding checks, phishing risk assessments, or monitoring whether a domain is spoofable.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T18:47:46.763Z","isFirstParty":false,"canonicalSlug":"vextorium-email-security-analyzer-b62c331e"}