16trust / 100

Email Security

by Vextorium in Security & trust

x402 APIFailing, checked 2 h ago

Email security of a domain: MX, SPF (final policy, multiple-record and lookup-limit problems), DMARC (policy, subdomains, reporting), MTA-STS, TLS-RPT and BIMI, with a score and recommendations. Detects spoofable domains.

POST https://api.vextorium.com/v1/email-security

Last 30 days

All checks passedSome failedAll failedNot checked
Uptime
0.0%
Response time
- typical, - slowest 5%
Last check
2 h ago: Amount "0.004" is not in atomic token units
Next check
any minute now

How to call it

# See the payment challenge (nothing is charged)
curl -i -X POST "https://api.vextorium.com/v1/email-security" \
  -H "content-type: application/json" \
  -d '{"domain":"gmail.com"}'
import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:8453",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fapi.vextorium.com%2Fv1%2Femail-security
const res = await pay("https://api.vextorium.com/v1/email-security", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({"domain":"gmail.com"}),
});
console.log(await res.json());

Example input

{
  "domain": "gmail.com"
}

Example output

{
  "bimi": false,
  "dmarc": {
    "percentage": "100",
    "policy": "none",
    "record": "v=DMARC1; p=none; sp=quarantine; rua=mailto:[email protected]",
    "reports_to": "mailto:[email protected]",
    "subdomains": "quarantine"
  },
  "domain": "gmail.com",
  "mta_sts": true,
  "mx": [
    "5 gmail-smtp-in.l.google.com.",
    "10 alt1.gmail-smtp-in.l.google.com."
  ],
  "score": 45,
  "spf": {
    "dns_queries_approx": 1,
    "final_policy": "no 'all'",
    "record": "v=spf1 redirect=_spf.google.com"
  },
  "tls_rpt": true,
  "warnings": [
    "DMARC at p=none: it only monitors, it does not protect against spoofing."
  ]
}

Security scan

  • No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTimePrice
2 h agoAmount "0.004" is not in atomic token units40278 ms$0.004
6 h agoAmount "0.004" is not in atomic token units402131 ms$0.004
11 h agoAmount "0.004" is not in atomic token units402135 ms$0.004
15 h agoAmount "0.004" is not in atomic token units40282 ms$0.004
19 h agoAmount "0.004" is not in atomic token units40277 ms$0.004
23 h agoAmount "0.004" is not in atomic token units40280 ms$0.004
27 h agoAmount "0.004" is not in atomic token units40270 ms$0.004
31 h agoAmount "0.004" is not in atomic token units402101 ms$0.004
35 h agoAmount "0.004" is not in atomic token units40278 ms$0.004
40 h agoAmount "0.004" is not in atomic token units40280 ms$0.004
43 h agoAmount "0.004" is not in atomic token units40279 ms$0.004
2 days agoAmount "0.004" is not in atomic token units40278 ms$0.004
2 days agoAmount "0.004" is not in atomic token units40278 ms$0.004
2 days agoAmount "0.004" is not in atomic token units402139 ms$0.004
3 days agoAmount "0.004" is not in atomic token units40289 ms$0.004