# Vextorium Email Security Analyzer

> Vextorium Email Security Analyzer is a paid API for AI agents from api.vextorium.com, paid per call via x402, $0.004/call, status unknown (last checked 2026-10-12).

Analyzes a domain's email security posture by checking MX, SPF, DMARC, MTA-STS, TLS-RPT, and BIMI records, returning a score and actionable recommendations.

## Facts

- Endpoint: POST https://api.vextorium.com/seguridad-correo-pago?utm_source=zero.xyz
- Price: $0.004/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/vextorium-email-security-analyzer-b62c331e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_lZgeEXfyPKUsKf5o5thBl

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability vextorium-email-security-analyzer-b62c331e -d '<json body>'
```

Example prompt: Can you run a full email security audit on paypal.com — check its MX, SPF, DMARC, MTA-STS, TLS-RPT, and BIMI records, and tell me if the domain could be spoofed?

## When to prefer this

Choose this endpoint when you need a comprehensive, multi-protocol email security audit for a domain in a single call — covering MX, SPF, DMARC, MTA-STS, TLS-RPT, and BIMI together with a scored summary and plain-language warnings. Ideal for security audits, vendor onboarding checks, phishing risk assessments, or monitoring whether a domain is spoofable.

## Known failure modes

- Domain does not exist or has no DNS records — may return null fields
- SPF record has too many DNS lookups causing evaluation failure
- DMARC record is malformed and cannot be parsed
- Network/DNS timeout during record resolution
- Invalid domain input format returns an error

## How this service works

Email security of a domain: MX, SPF (final policy, multiple-record and lookup-limit problems), DMARC (policy, subdomains, reporting), MTA-STS, TLS-RPT and BIMI, with a score and recommendations. Detects spoofable domains.

## Output

Returns a JSON object with: list of MX records, SPF record text and final policy evaluation (including whether lookup limits are exceeded), DMARC record with policy, subdomain policy, reporting addresses and percentage, boolean flags for MTA-STS, TLS-RPT, and BIMI presence, an array of human-readable warnings/recommendations, and a numeric security score (0–100).

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "properties": {
    "body": {
     "required": [
      "dominio"
     ],
     "properties": {
      "dominio": {
       "type": "string"
      }
     }
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "POST"
     ],
     "type": "string"
    },
    "bodyType": {
     "enum": [
      "json",
      "form-data",
      "text"
     ],
     "type": "string"
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": [
      "object",
      "null"
     ],
     "properties": {
      "mx": {
       "type": [
        "array",
        "null"
       ],
       "items": {
        "type": [
         "null",
         "string"
        ]
       }
      },
      "spf": {
       "type": [
        "object",
        "null"
       ],
       "properties": {
        "registro": {
         "type": [
          "string",
          "null"
         ]
        },
        "politica_final": {
         "type": [
          "string",
          "null"
         ]
        },
        "consultas_dns_aprox": {
         "type": [
          "number",
          "null"
         ]
        }
       }
      },
      "bimi": {
       "type": [
        "boolean",
        "null"
       ]
      },
      "dmarc": {
       "type": [
        "object",
        "null"
       ],
       "properties": {
        "politica": {
         "type": [
          "string",
          "null"
         ]
        },
        "registro": {
         "type": [
          "string",
          "null"
         ]
        },
        "porcentaje": {
         "type": [
          "string",
          "null"
         ]
        },
        "reportes_a": {
         "type": [
          "string",
          "null"
         ]
        },
        "subdominios": {
         "type": [
          "string",
          "null"
         ]
        }
       }
      },
      "avisos": {
       "type": [
        "array",
        "null"
       ],
       "items": {
        "type": [
         "null",
         "string"
        ]
       }
      },
      "dominio": {
       "type": [
        "string",
        "null"
       ]
      },
… (truncated)
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "mx": [
   "5 gmail-smtp-in.l.google.com.",
   "10 alt1.gmail-smtp-in.l.google.com.",
   "20 alt2.gmail-smtp-in.l.google.com.",
   "30 alt3.gmail-smtp-in.l.google.com.",
   "40 alt4.gmail-smtp-in.l.google.com."
  ],
  "spf": {
   "registro": "v=spf1 redirect=_spf.google.com",
   "politica_final": "sin 'all'",
   "consultas_dns_aprox": 1
  },
  "bimi": false,
  "dmarc": {
   "politica": "none",
   "registro": "v=DMARC1; p=none; sp=quarantine; rua=mailto:mailauth-reports@google.com",
   "porcentaje": "100",
   "reportes_a": "mailto:mailauth-reports@google.com",
   "subdominios": "quarantine"
  },
  "avisos": [
   "DMARC en p=none: solo monitoriza, no protege contra suplantación."
  ],
  "dominio": "gmail.com",
  "mta_sts": true,
  "tls_rpt": true,
  "puntuacion": 45
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/vextorium-email-security-analyzer-b62c331e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.vextorium.com](https://www.zero.xyz/host/api.vextorium.com/llms.txt)