# Halowerk Email Security Checker

> Halowerk Email Security Checker is a paid API for AI agents from tools.halowerk.com, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-11).

Checks a domain's full email security posture — MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI, TLS, and DNSSEC — and returns a spoofing risk score with actionable DNS records to fix each finding

## Facts

- Endpoint: POST https://tools.halowerk.com/v1/email/security?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/halowerk-email-security-checker-957ca2f5
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_oMsuQBzq6cyB4teZU4oPX

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability halowerk-email-security-checker-957ca2f5 -d '<json body>'
```

Example prompt: Can you run a full email security audit on halowerk.com — check SPF, DKIM, DMARC, MTA-STS, TLS, BIMI, DNSSEC, everything — and tell me the spoofing risk score plus any ready-to-use DNS records I need to add to fix the gaps?

## When to prefer this

Choose this endpoint when you need a comprehensive, all-in-one email security audit of a domain covering every major standard (SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI, TLS, DNSSEC) in a single call. It is especially valuable because each finding comes with a ready-to-insert DNS record rather than vague prose advice, making it directly actionable. Prefer it over manual DNS lookups or single-standard checkers when you need a spoofing risk score and full-spectrum diagnosis in one shot.

## Known failure modes

- Invalid or non-existent domain name returns an error
- Domain with no DNS records may produce empty or partial results
- DKIM check may be inconclusive if selector is not known or not publicly discoverable
- Network timeouts during DNS resolution of multiple record types
- Rate limiting if called excessively for the same domain

## How this service works

Prüft MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI, TLS am Mailserver und DNSSEC einer Domain und leitet daraus Spoofing-Risiko, Punktzahl und Befunde ab. Jeder Befund trägt einen fertigen DNS-Datensatz zum Einfügen statt einer Empfehlung in Prosa. Rein lesend: kein Versand, keine Testmail, keine Relay-Nutzung.

## Output

Returns a structured report including: individual pass/fail status for each email security standard (MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI, TLS, DNSSEC), an overall spoofing risk score and numeric rating, a list of findings each accompanied by a ready-to-insert DNS record (not prose recommendations), making it immediately actionable for remediation.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "Domain ohne Schema, z. B. example.com"
  },
  "no_cache": {
   "type": "boolean",
   "default": false,
   "description": "Ergebnis-Cache von 6 Stunden je Domain umgehen"
  },
  "dkim_selectors": {
   "type": "array",
   "items": {
    "type": "string"
   },
   "maxItems": 25,
   "description": "Eigene DKIM-Selektoren. Werden zusätzlich zu 25 gängigen Namen probiert, da Selektoren im DNS nicht auflistbar sind."
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/halowerk-email-security-checker-957ca2f5/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from tools.halowerk.com](https://www.zero.xyz/host/tools.halowerk.com/llms.txt)