{"uid":"cap_ngk7VSyd3Wjaz_pdPFm4K","slug":"netzhandwerker-email-security-checker-cbdb2759","name":"Netzhandwerker Email Security Checker","description":"x402-Werkzeuge für autonome Agenten.","url":"https://tools.netzhandwerker.de/v1/email/security","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"domain":{"type":"string","description":"Domain ohne Schema, z. B. example.com"},"no_cache":{"type":"boolean","default":false,"description":"Ergebnis-Cache von 6 Stunden je Domain umgehen"},"dkim_selectors":{"type":"array","items":{"type":"string"},"maxItems":25,"description":"Eigene DKIM-Selektoren. Werden zusätzlich zu 25 gängigen Namen probiert, da Selektoren im DNS nicht auflistbar sind."}}},"responseSchema":{"type":"json","example":{"score":41,"checks":{"spf":{"value":{"record":"v=spf1 include:_spf.google.com ~all","dns_lookups":4,"all_mechanism":"~all"},"detail":{"de":"SPF endet auf \"~all\" (softfail).","en":"SPF ends in \"~all\" (softfail)."},"status":"schwach"},"dmarc":{"value":{"record":null},"detail":{"de":"Kein DMARC-Datensatz.","en":"No DMARC record."},"status":"fehlt"}},"domain":"example.com","findings":[{"fix":"_dmarc.example.com. 3600 IN TXT \"v=DMARC1; p=none; rua=mailto:dmarc@example.com; adkim=r; aspf=r; pct=100\"","title":{"de":"DMARC fehlt","en":"DMARC missing"},"severity":"kritisch","why_it_matters":{"de":"Ohne DMARC entscheidet jeder Empfänger selbst, was mit einer gefälschten Mail geschieht.","en":"Without DMARC every receiver decides for itself what happens to a forged message."}}],"checked_at":"2026-08-06T12:00:00.000Z","spoofing_risk":"hoch"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_mlGOkOz5FNI2DNzuaX3Kw","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Analyzes a domain's email security configuration (SPF, DKIM, DMARC) and returns a scored report with findings and spoofing risk.","exampleAgentPrompt":"Can you check the email security setup for acme.com — I want to know if SPF, DKIM, and DMARC are properly configured and what the spoofing risk looks like? Also try the DKIM selector 'google' in addition to the common ones.","exampleUseCases":[{"title":"Pre-send domain security audit","prompt":"Before we launch our email campaign, can you check the email security records for ourfirm.com and tell me if we have any critical issues with SPF, DMARC, or DKIM that could cause deliverability problems?"},{"title":"Investigating phishing risk for a client domain","prompt":"A client thinks their domain brandname.com might be getting abused for phishing — can you run a full email security check and tell me the spoofing risk level and what records are missing or weak?"},{"title":"Verifying third-party vendor email setup","prompt":"We're onboarding a new vendor at vendordomain.net — can you check their email authentication configuration, including DKIM selectors 'mandrill' and 'sendgrid', and give me a security score so I can assess their trustworthiness?"}],"resultDescription":"Returns a numeric security score (0–100), per-check results for SPF, DMARC, and DKIM (including record values and weak/missing status), a spoofing risk rating (e.g. 'hoch'/'high'), a list of prioritized findings with severity levels, human-readable explanations in German and English, and actionable DNS fix suggestions. Includes the domain checked and timestamp.","failureModes":["Invalid or non-existent domain returns error or empty results","DNS lookup timeouts for slow or unresponsive nameservers","DKIM selectors not found if none of the standard 25 or custom selectors match","Cache returning stale results if no_cache is not set (6-hour TTL)","Exceeding the 25 custom DKIM selector limit returns a validation error"],"whenToPreferThis":"Use this endpoint when you need a structured, scored audit of a domain's email authentication stack (SPF, DKIM, DMARC) with actionable remediation hints, especially for autonomic agent workflows that require machine-readable severity levels and bilingual (DE/EN) output. Prefer this over generic DNS lookup tools when you need a composite security score and spoofing risk assessment rather than raw record data.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-13T18:40:18.644Z","isFirstParty":false}