Domain security & deliverability audit (graded)

Hand over a domain and get one graded security & email-deliverability audit: SPF, DMARC, DKIM and MX (why your mail lands in spam), the web security headers, and the TLS certificate - every finding from a live probe, with an overall letter grade, a downloadable checks appendix, and a prioritized, specific list of fixes. USDC (x402/MPP) or card (Stripe). Not cached.

TRY IN PLAYGROUND →

Input

Example output

{
  "report": "# Domain Security Audit: example.com\n\n**Overall grade: B** (82/100)\n\n## Overall grade\n...",
  "domain": "example.com",
  "grade": "B",
  "composite": 82,
  "sources": [],
  "tables": [
    {
      "name": "email-checks",
      "label": "Email authentication checks",
      "columns": [
        "Check",
        "Status",
        "Detail"
      ],
      "rows": [
        [
          "spf",
          "pass",
          "SPF record present, 1 DNS lookup, ~all qualifier"
        ]
      ]
    }
  ],
  "meta": {
    "tier": "domain-audit",
    "domain": "example.com",
    "grade": "B",
    "composite": 82,
    "email_score": 90,
    "header_score": 70,
    "tls_days_remaining": 204,
    "synthesis_model": "anthropic/claude-opus-5"
  }
}

Try it - see the 402 challenge (free)

curl -i -X POST https://agent402.tools/v1/domain-audit \
  -H "Content-Type: application/json" \
  -d '{"domain":"example.com"}'

The response is HTTP 402 Payment Required with exact payment requirements. Any x402 v2 client pays automatically and retries:

Paid call (JavaScript agent)

import { wrapFetchWithPayment } from "@x402/fetch";
import { x402Client } from "@x402/core/client";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const client = new x402Client();
registerExactEvmScheme(client, { signer: privateKeyToAccount(KEY) });
const payFetch = wrapFetchWithPayment(fetch, client);

const res = await payFetch("https://agent402.tools/v1/domain-audit", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({
    "domain": "example.com"
  }),
});

Related tools