Report

Last 30 days

Uptime

100%

Response time

736 ms typical, 932 ms slowest 5%

Last check

3 h ago

Next check

any minute now

How to call it

# See the payment challenge (nothing is charged)
curl -i -X GET "https://api.inboxguardstest.com/v1/report?test_id=abcdefgh2345"

import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { ExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client().register(
  "eip155:8453",
  new ExactEvmScheme(privateKeyToAccount(process.env.AGENT_KEY)),
);
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? Preflight it first for $0.005:
// GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fapi.inboxguardstest.com%2Fv1%2Freport
const res = await pay("https://api.inboxguardstest.com/v1/report?test_id=abcdefgh2345");
console.log(await res.json());

Example input

{
  "test_id": "abcdefgh2345"
}

Example output

{
  "authentication": {
    "dkim": [
      {
        "aligned": true,
        "domain": "example.com",
        "key_bits": 2048,
        "result": "pass",
        "selector": "s1"
      }
    ],
    "dmarc": {
      "policy": "quarantine",
      "result": "pass"
    },
    "spf": {
      "evaluated": true,
      "result": "pass"
    }
  },
  "cloudflare": {
    "accepted": true,
    "spam_score": 2
  },
  "connection": {
    "fcrdns": true,
    "helo": "mail.example.com",
    "ip": "192.0.2.10",
    "ptr": [
      "mail.example.com"
    ],
    "source": "cloudflare_received",
    "spamcop": "not_listed"
  },
  "findings": [
    {
      "area": "spf",
      "id": "spf_pass",
      "severity": "pass",
      "title": "SPF pass for example.com"
    }
  ],
  "grade": "B",
  "links": {
    "checked": [],
    "reason": "link reputation not configured",
    "status": "not_checked",
    "unchecked_domains": [
      "example.com"
    ]
  },
  "message": {
    "body_analyzed": true,
    "envelope_from": "[email protected]",
    "from_domain": "example.com",
    "size_bytes": 5321
  },
  "notes": [
    "These are deliverability signals, not a guarantee of inbox placement."
  ],
  "partial_errors": [],
  "received_at": "2026-10-10T06:48:16.999Z",
  "schema_version": "1.0",
  "score": 88,
  "suggestions": [],
  "test_id": "abcdefgh2345",
  "top_fixes": [
    {
      "fix": "Add an https unsubscribe URL plus List-Unsubscribe-Post: List-Unsubscribe=One-Click.",
      "id": "list_unsubscribe_no_one_click",
      "title": "List-Unsubscribe present but not one-click"
    }
  ],
  "transport_policy": {
    "inbound_tls_observed": false,
    "mta_sts": {
      "record": false
    },
    "tls_rpt": false
  }
}

Security scan

• No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks