# HERGERT SYNTHORA MTA-STS & TLS-RPT Audit

> HERGERT SYNTHORA MTA-STS & TLS-RPT Audit is a paid API for AI agents from api.hergertsynthora.com, paid per call via x402, $0.05/call, status unknown (last checked 2026-09-14).

Audits a domain's MTA-STS policy and TLS-RPT reporting configuration, returning a scored compliance verdict with detailed findings

## Facts

- Endpoint: POST https://api.hergertsynthora.com/v1/mtasts
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/hergert-synthora-mta-sts-tls-rpt-audit-f04c8012
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_flUxnpJqcsu8Zdz__uaHH

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability hergert-synthora-mta-sts-tls-rpt-audit-f04c8012 -d '<json body>'
```

Example prompt: Can you do a full MTA-STS and TLS-RPT audit on example.com and tell me if the policy is properly enforced, whether TLS reporting is set up, and what score it gets?

## When to prefer this

Use this endpoint when you need to programmatically audit a domain's MTA-STS and TLS-RPT configuration, especially when you want a structured score, machine-readable policy details, and a verdict — rather than manually inspecting DNS records. Prefer this over generic DNS lookup tools when you specifically need MTA-STS policy reachability checks and MX validation in a single scored call.

## Known failure modes

- Domain does not exist or is unreachable — policy_reachable: false, DNS flags set to false
- MTA-STS DNS record missing — dns_present: false with issues listed
- MX records do not match MTA-STS policy — mx_matches_dns: false
- TLS-RPT record absent — tls_rpt.present: false
- Invalid input domain format — likely 400 or ok:false response
- Policy file not reachable over HTTPS — policy_reachable: false

## How this service works

SYNTHORA mtasts: sMTP transport-security audit: MTA-STS (RFC 8461) + TLS-RPT (RFC 8460). Resolves the policy DNS records, fetches and parses the well-known policy file, cross-validates the policy mx: patterns against the domain's real MX, and returns an enforce/report verdict. Complements SPF/DKIM/DMARC auditing with the TLS transport layer. Deterministic, Ed25519-signed. SYNTHORA.

## Output

Returns a JSON object with an overall compliance score (0–100), the domain audited, a list of issues found, the full MTA-STS policy (MX hosts, enforcement mode, max_age, DNS presence, MX-to-DNS match, policy reachability), TLS-RPT presence status, and a human-readable verdict string (e.g. 'enforced+reporting').

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "op": {
   "enum": [
    "check",
    "mtasts",
    "tlsrpt"
   ],
   "type": "string",
   "description": "Audit scope (default check = full)"
  },
  "domain": {
   "type": "string",
   "description": "Domain or email address to audit"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/hergert-synthora-mta-sts-tls-rpt-audit-f04c8012/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.hergertsynthora.com](https://www.zero.xyz/host/api.hergertsynthora.com/llms.txt)