Mail security grade
check_mail_securityGrade one domain's email authentication and list every check: SPF (single record, the 10 DNS-lookup limit across includes, the all qualifier), DMARC (policy, inheritance from the organizational domain, pct, report addresses), MTA-STS, TLS-RPT, BIMI, DANE and null MX. The level is strong, fair, weak, no_mail (domain declares it sends no mail) or none (no MX, SPF or DMARC at all).
Use it for questions about spoofing, deliverability or a DMARC rollout. lookup_target gives only the overall grade; this tool gives the status and a one-line finding for each check.
Behavior: reads public DNS only and never connects to the domain's mail servers, so it cannot test SMTP TLS, certificates or whether a mailbox exists. Usually under 2 s.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | registered domain or subdomain whose mail setup to grade, e.g. example.com; Unicode or punycode. Not an email address and not a mail server host name |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| level | Yes | strong, fair, weak, no_mail, or none when the domain has no mail setup | |
| checks | Yes | ||
| domain | Yes | ||
| details_url | No |