# Swift Bot Labs Toolbox – Email Security Checker

> Swift Bot Labs Toolbox – Email Security Checker is a paid API for AI agents from x402-toolbox.swiftbotlab.workers.dev, paid per call via x402, $0.02/call, status unknown (last checked 2026-10-31).

Checks a domain's email security configuration (MX, SPF, DKIM, DMARC, MTA-STS) and returns a letter grade with actionable fix suggestions

## Facts

- Endpoint: GET https://x402-toolbox.swiftbotlab.workers.dev/v1/email/security?utm_source=zero.xyz
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-31
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/swift-bot-labs-toolbox-email-security-checker-a9b29c18
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_BE5YrJQDd6ElWBH7X8G1R

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability swift-bot-labs-toolbox-email-security-checker-a9b29c18
```

Example prompt: Can you run an email security audit on github.com and tell me the grade, whether SPF, DKIM, and DMARC are all properly set up, and what I should fix?

## When to prefer this

Choose this endpoint when you need a fast, no-account, pay-per-call DNS-level email security audit covering MX, SPF, DKIM, DMARC, and MTA-STS in a single call. It returns a structured grade and actionable fixes, making it ideal for agent workflows that need to programmatically assess or compare email security posture across many domains without setting up an account or API key.

## Known failure modes

- Domain does not exist or has no DNS records — returns error or empty results
- Invalid domain format in query parameter
- DKIM selectors limit exceeded (max 5 extra selectors)
- Transient DNS resolution failure returning incomplete results
- Payment failure via x402 protocol resulting in 402 response

## How this service works

62 small, deterministic utility APIs (DNS and e-mail checks, web extraction, EVM decoding, x402 checks, IP math, JSON/CSV, hashing, conversions). No account or API key: pay per call in USDC with x402.

## Output

A JSON object containing: MX provider name, SPF record presence and policy (e.g. softfail/reject), DKIM selectors found, DMARC policy and presence, MTA-STS status, an overall letter grade (A–F), a numeric score (0–100), and an array of specific fix recommendations.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD"
     ],
     "type": "string"
    },
    "headers": {
     "type": "object",
     "additionalProperties": {
      "type": "string"
     }
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string"
      },
      "dkimSelectors": {
       "type": "string",
       "description": "Optional comma-separated extra DKIM selectors to check (max 5)"
      }
     },
     "additionalProperties": false
    },
    "discoverable": {
     "type": "boolean"
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "tool": "email-security",
  "result": {
   "mx": {
    "provider": "Google Workspace"
   },
   "spf": {
    "found": true,
    "policy": "softfail"
   },
   "dkim": {
    "found": [
     "google"
    ]
   },
   "dmarc": {
    "found": true,
    "policy": "reject"
   },
   "fixes": [
    "Publish an MTA-STS policy"
   ],
   "grade": "B",
   "score": 85,
   "domain": "github.com",
   "mtaSts": {
    "found": false
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/swift-bot-labs-toolbox-email-security-checker-a9b29c18/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from x402-toolbox.swiftbotlab.workers.dev](https://www.zero.xyz/host/x402-toolbox.swiftbotlab.workers.dev/llms.txt)