# MTA-STS & TLS-RPT Email Transport Security Auditor

> MTA-STS & TLS-RPT Email Transport Security Auditor is a paid API for AI agents from mtasts.hergertsynthora.com, paid per call via x402, $0.05/call, status unknown (last checked 2026-09-13).

Audits a domain's MTA-STS policy and TLS-RPT configuration by resolving DNS records, fetching the policy file, and cross-validating MX patterns to return an enforce/report verdict

## Facts

- Endpoint: POST https://mtasts.hergertsynthora.com/service
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/mta-sts-tls-rpt-email-transport-security-auditor-de827647
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_LM1KcsmMykpABhttskhD2

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability mta-sts-tls-rpt-email-transport-security-auditor-de827647 -d '<json body>'
```

Example prompt: Do a full MTA-STS and TLS-RPT audit on example.com — check whether the policy DNS records, the well-known policy file, and the MX patterns all line up and tell me if it's in enforce or report mode.

## When to prefer this

Use this endpoint when you need to specifically audit the TLS transport layer of email security (MTA-STS + TLS-RPT) for a domain, complementing SPF/DKIM/DMARC checks. Prefer this over generic email security tools when you need RFC 8461/8460 compliance verification with Ed25519-signed deterministic results, or when diagnosing why email TLS enforcement is failing between mail servers.

## Known failure modes

- Domain not found or invalid — DNS resolution failure
- No MTA-STS DNS record present — policy not configured
- Policy file unreachable at well-known URL — HTTP fetch failure
- MX records do not match any MTA-STS policy mx: patterns — cross-validation mismatch
- No TLS-RPT record found — reporting not configured
- Invalid domain format provided — input validation error
- Payment not processed — x402 payment required error

## How this service works

SMTP transport-security audit: MTA-STS (RFC 8461) + TLS-RPT (RFC 8460). Resolves the policy DNS records, fetches and parses the well-known policy file, cross-validates the policy mx: patterns against the domain's real MX, returns an enforce/report verdict. Complements SPF/DKIM/DMARC with the TLS transport layer. Deterministic, Ed25519-signed. $0.003 USDC via x402 on Base. SYNTHORA.

## Output

Returns a verdict indicating whether the domain's MTA-STS policy is in enforce or report mode, along with the resolved DNS policy records, the parsed policy file contents, MX pattern cross-validation results, and TLS-RPT configuration status. Response is Ed25519-signed for integrity assurance.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "op": {
   "enum": [
    "check",
    "mtasts",
    "tlsrpt"
   ],
   "type": "string",
   "description": "Audit scope (default check = full)"
  },
  "domain": {
   "type": "string",
   "description": "Domain or email address to audit"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "niche": "mtasts",
  "result": {
   "score": 100,
   "domain": "example.com",
   "issues": [],
   "mta_sts": {
    "mx": [
     "*.mail.example.com"
    ],
    "mode": "enforce",
    "max_age": 604800,
    "dns_present": true,
    "mx_matches_dns": true,
    "policy_reachable": true
   },
   "tls_rpt": {
    "present": true
   },
   "verdict": "enforced+reporting"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/mta-sts-tls-rpt-email-transport-security-auditor-de827647/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from mtasts.hergertsynthora.com](https://www.zero.xyz/host/mtasts.hergertsynthora.com/llms.txt)