# Tinstop Email Security Check

> Tinstop Email Security Check is a paid API for AI agents from tinstop.com, paid per call via x402, $0.05/call, status unknown (last checked 2026-10-11).

Audits a domain's email authentication setup by checking SPF, DKIM, and DMARC records and returning a scored security report with identified vulnerabilities.

## Facts

- Endpoint: POST https://tinstop.com/v1/email-security-check?utm_source=zero.xyz
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/tinstop-email-security-check-2051347f
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_fsIpDmmfAA2iF4m9Ft2li

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability tinstop-email-security-check-2051347f -d '<json body>'
```

Example prompt: Can you check the email security setup for stripe.com — I want to see if their SPF, DKIM, and DMARC records are properly configured and get an overall score?

## When to prefer this

Choose this endpoint when you specifically need a scored, structured audit of a domain's email authentication records (SPF, DKIM, DMARC) in a single API call without managing API keys or accounts. It is particularly well-suited for AI agents that need machine-readable scores and issue lists for email security compliance checks, phishing risk assessments, or vendor vetting workflows. Prefer this over manual DNS lookups when you need a normalized 0-100 scoring model across all three email authentication protocols simultaneously.

## Known failure modes

- Invalid domain format (protocol prefix included) may cause parsing errors
- Domain with no DNS records may return zero scores and empty checks
- Non-existent or unregistered domains may return errors or null record sets
- DKIM check may return incomplete results if no DKIM selector is discoverable
- Payment failure via x402/USDC may prevent the request from being processed
- Rate limiting or network timeouts may cause delayed or failed responses

## How this service works

Tinstop is a machine-payable Website Intelligence API for domain security and performance audits: DNS, SSL/TLS, HTTP security headers, SPF/DKIM/DMARC email authentication, and Google PageSpeed. Pay per call with x402 using USDC on Base. No accounts or API keys.

## Output

Returns a JSON object containing an overall email security score (0-100), individual subscores for SPF, DKIM, and DMARC (each 0-100), raw DNS record check results, a list of identified email security vulnerabilities with details, the audited domain, ISO 8601 timestamp, a unique scan ID, and a flag indicating whether the result was served from cache.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "The domain name to check email security records for (e.g. 'example.com'). Do not include http:// or https:// protocol prefixes."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "object",
 "title": "EmailCheckResponse",
 "required": [
  "domain",
  "score",
  "subscores",
  "issues",
  "checks",
  "audited_at",
  "cached",
  "scan_id"
 ],
 "properties": {
  "score": {
   "type": "integer",
   "title": "Score",
   "description": "Calculated overall email security score (0-100)"
  },
  "cached": {
   "type": "boolean",
   "title": "Cached",
   "description": "True if response was served from cache"
  },
  "checks": {
   "type": "object",
   "title": "Checks",
   "description": "Raw check results for SPF, DKIM, and DMARC records",
   "additionalProperties": true
  },
  "domain": {
   "type": "string",
   "title": "Domain",
   "description": "Audited domain name"
  },
  "issues": {
   "type": "array",
   "items": {
    "type": "object",
    "additionalProperties": true
   },
   "title": "Issues",
   "description": "Identified email security vulnerabilities"
  },
  "scan_id": {
   "type": "string",
   "title": "Scan Id",
   "description": "The unique database record tracking ID for this scan"
  },
  "subscores": {
   "type": "object",
   "title": "EmailSubscores",
   "required": [
    "spf",
    "dkim",
    "dmarc"
   ],
   "properties": {
    "spf": {
     "type": "integer",
     "title": "Spf",
     "description": "SPF record security subscore (0-100)"
    },
    "dkim": {
     "type": "integer",
     "title": "Dkim",
     "description": "DKIM configuration subscore (0-100)"
    },
    "dmarc": {
     "type": "integer",
     "title": "Dmarc",
     "description": "DMARC alignment and policy subscore (0-100)"
    }
   },
   "description": "Subscores representing SPF, DKIM, and DMARC metrics separately"
  },
  "audited_at": {
   "type": "string",
   "title": "Audited At",
   "description": "ISO 8601 UTC timestamp of the check request"
  },
  "request_id": {
   "anyOf": [
    {
     "type": "string"
    },
    {
     "type": "null"
    }
   ],
   "title": "Request Id",
   "description": "Gateway request tracking ID"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/tinstop-email-security-check-2051347f/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from tinstop.com](https://www.zero.xyz/host/tinstop.com/llms.txt)