# InboxGuards Email Deliverability & Security Report > InboxGuards Email Deliverability & Security Report is a paid API for AI agents from api.inboxguardstest.com, paid per call via x402, $0.05/call, status unknown (last checked 2026-10-11). Retrieves a completed email deliverability and security audit report (SPF, DKIM, DMARC, spam, TLS, BIMI, headers) for a previously submitted test email. ## Facts - Endpoint: GET https://api.inboxguardstest.com/v1/report?utm_source=zero.xyz - Price: $0.05/call - Payment: x402 - Status: unknown - Last checked: 2026-10-11 - Activations on Zero: 0 - Tags: x402 - Canonical page: https://www.zero.xyz/c/inboxguards-email-deliverability-security-report-2c5a11e4 - Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap__RRY2-4K6iRdGTKmrVaWk Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently. ## How to call it through Zero Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`): ```sh zero fetch --capability inboxguards-email-deliverability-security-report-2c5a11e4 ``` Example prompt: Can you pull the deliverability report for my InboxGuards test — the test ID is ab3defgh2345 and the read token is my-read-token — and tell me the score, grade, and top things I need to fix? ## When to prefer this Use this endpoint when you need a comprehensive, structured audit of an actual sent email's deliverability and authentication properties — including SPF, DKIM, DMARC, SpamCop, MTA-STS, BIMI, and header analysis — in one call. Prefer this over manual DNS lookup tools when you want a scored, graded, actionable report with prioritized fixes. It is specifically suited for pre-send validation of email campaigns, troubleshooting inbox placement failures, and compliance checks (e.g. one-click unsubscribe). ## Known failure modes - Report not yet ready — test email not received yet; poll again after a delay - Invalid or expired test_id — returns 404 or error; ensure test_id matches the pattern ^[a-z2-7]{12}$ - Invalid or mismatched X-Read-Token — returns 401/403; token is issued once by POST /v1/tests and tied to the test_id - Payment not completed — x402 payment required before report is returned - test_id not found — test may have expired or never been created - Partial errors in report — some checks may be inconclusive if email was malformed or headers were stripped ## How this service works Send a real email to a one-time address and get a deliverability and security report: SPF, DKIM, DMARC, ARC, sending IP reverse DNS, SpamCop, MTA-STS/TLS-RPT, BIMI, List-Unsubscribe, header and content checks. Free to create a test; pay only to read a finished report. ## Output Returns a JSON report containing an overall deliverability score (0–100), a letter grade (A–F), authentication results (SPF, DKIM with selector/key bits/alignment, DMARC policy and result), sending connection details (IP, PTR/FCrDNS, HELO, SpamCop status), transport policy (MTA-STS, TLS-RPT, observed inbound TLS), message metadata (size, From/envelope domains, Message-ID, List-Unsubscribe), link reputation status per domain, an array of all findings with severity (pass/info/warn/fail) and fix guidance, up to 3 prioritized top_fixes, and any informational notes. ## Request schema (JSON Schema) ```json { "type": "object", "$schema": "https://json-schema.org/draft/2020-12/schema", "required": [ "input" ], "properties": { "input": { "type": "object", "required": [ "type", "method" ], "properties": { "type": { "type": "string", "const": "http" }, "method": { "enum": [ "GET" ], "type": "string" }, "headers": { "type": "object", "required": [ "X-Read-Token" ], "properties": { "X-Read-Token": { "type": "string", "description": "read_token returned once by POST /v1/tests" } }, "additionalProperties": { "type": "string" } }, "queryParams": { "type": "object", "required": [ "test_id" ], "properties": { "test_id": { "type": "string", "pattern": "^[a-z2-7]{12}$", "description": "test_id from POST /v1/tests" } } } }, "additionalProperties": false }, "output": { "type": "object", "required": [ "type" ], "properties": { "type": { "type": "string" }, "example": { "type": "object", "required": [ "schema_version", "test_id", "received_at", "score", "grade", "top_fixes", "suggestions", "message", "connection", "authentication", "transport_policy", "links", "findings", "notes" ], "properties": { "grade": { "enum": [ "A", "B", "C", "D", "F" ], "type": "string" }, "links": { "type": "object", "description": "link reputation status per domain (Google Web Risk; 'not_checked' until configured)" }, "notes": { "type": "array", "items": { "type": "string" } }, "score": { "type": "integer", "maximum": 100, "minimum": 0 }, "message": { "type": "object", "description": "size, From/envelope domains, Message-ID domain, List-Unsubscribe, content facts (no body text)" }, "test_id": { "type": "string" }, "findings": { "type": "array", "items": { "type": "object", "required": [ "id", "area", "severity", "title" ], "properties": { "id": { "type": "string" }, "fix": { "type": … (truncated) ``` ## Response schema (JSON Schema) ```json { "type": "json", "example": { "grade": "B", "links": { "reason": "link reputation not configured", "status": "not_checked", "checked": [], "unchecked_domains": [ "example.com" ] }, "notes": [ "These are deliverability signals, not a guarantee of inbox placement." ], "score": 88, "message": { "size_bytes": 5321, "from_domain": "example.com", "body_analyzed": true, "envelope_from": "bounce@example.com" }, "test_id": "abcdefgh2345", "findings": [ { "id": "spf_pass", "area": "spf", "title": "SPF pass for example.com", "severity": "pass" } ], "top_fixes": [ { "id": "list_unsubscribe_no_one_click", "fix": "Add an https unsubscribe URL plus List-Unsubscribe-Post: List-Unsubscribe=One-Click.", "title": "List-Unsubscribe present but not one-click" } ], "cloudflare": { "accepted": true, "spam_score": 2 }, "connection": { "ip": "192.0.2.10", "ptr": [ "mail.example.com" ], "helo": "mail.example.com", "fcrdns": true, "source": "cloudflare_received", "spamcop": "not_listed" }, "received_at": "2026-10-10T06:48:16.999Z", "suggestions": [], "authentication": { "spf": { "result": "pass", "evaluated": true }, "dkim": [ { "domain": "example.com", "result": "pass", "aligned": true, "key_bits": 2048, "selector": "s1" } ], "dmarc": { "policy": "quarantine", "result": "pass" } }, "partial_errors": [], "schema_version": "1.0", "transport_policy": { "mta_sts": { "record": false }, "tls_rpt": false, "inbound_tls_observed": false } } } ``` ## More - Live health (JSON, refreshed every minute): https://www.zero.xyz/c/inboxguards-email-deliverability-security-report-2c5a11e4/health.json - [Zero catalog index](https://www.zero.xyz/llms.txt) - [Other services from api.inboxguardstest.com](https://www.zero.xyz/host/api.inboxguardstest.com/llms.txt)