# SiteCheck Web Intel MX Server Port Scanner

> SiteCheck Web Intel MX Server Port Scanner is a paid API for AI agents from api.webintel-api.workers.dev, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-24).

For a mail domain, lists up to 3 MX hosts with their IPv4 addresses and passively-collected Shodan data on which SMTP ports (25, 465, 587) were seen open on each host.

## Facts

- Endpoint: GET https://api.webintel-api.workers.dev/api/security/mx-server-test?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-24
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sitecheck-web-intel-mx-server-port-scanner-df5194f1
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_462BCQrkndxN2tSBZ0sCA

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sitecheck-web-intel-mx-server-port-scanner-df5194f1
```

Example prompt: Can you look up the MX servers for protonmail.com and tell me which SMTP ports — 25, 465, or 587 — Shodan has seen open on each of their mail hosts?

## When to prefer this

Choose this endpoint when you need a quick, passive overview of a mail domain's MX infrastructure and SMTP port exposure without triggering any live network connections. It is ideal for reconnaissance, security audits, or phishing-domain triage where you want MX host IPs and historically observed port status from Shodan without actively probing the target. Prefer alternatives if you need live SMTP banner grabbing, STARTTLS capability testing, or real-time TLS certificate inspection.

## Known failure modes

- Domain has no MX records — returns empty or error response
- Domain does not exist or is malformed — returns error
- Shodan has no passive scan data for an MX host's IP — port data absent or empty
- MX hostname does not resolve to an IPv4 address — host skipped
- Rate limiting or payment failure — 402 or 429 error returned

## How this service works

For a mail domain: lists up to 3 MX hosts with their IPv4 addresses and, from Shodan's pre-collected passive scan data, which SMTP ports (25, 465, 587) were seen open on each address. Passive and possibly old; no SMTP conversation, banner, STARTTLS or certificate test is made.

## Output

Returns up to 3 MX hosts for the queried domain, each with its resolved IPv4 address(es) and a record of which SMTP ports (25, 465, 587) were observed open in Shodan's passive scan data. Note: data is passive and potentially outdated; no live SMTP connection, banner grab, STARTTLS negotiation, or TLS certificate check is performed.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "description": "Mail domain such as gmail.com (required)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sitecheck-web-intel-mx-server-port-scanner-df5194f1/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.webintel-api.workers.dev](https://www.zero.xyz/host/api.webintel-api.workers.dev/llms.txt)