Email Header Analyzer
analyze_email_headersParse raw email headers to determine SPF/DKIM/DMARC authentication status, extract key fields, and trace the message hop chain with per-hop delays.
Instructions
Parse raw email headers and report the SPF/DKIM/DMARC verdicts (from Authentication-Results), key fields (From, Subject, Date, Message-ID, Return-Path) and the Received hop chain with per-hop delays and total transit time.
Args:
headers (string): the raw email headers.
response_format ('markdown' | 'json'): output format (default 'markdown').
Returns: { auth{spf,dkim,dmarc}, fields{}, hops[{index,from,by,date,delaySec}], totalSec }.
Example: paste the headers from "Show original" in Gmail to trace a message's path and authentication.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| headers | Yes | The raw email headers to analyze (RFC 5322). | |
| response_format | No | Output format: 'markdown' for a human-readable summary (default) or 'json' for the full structured payload. | markdown |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| auth | Yes | ||
| fields | Yes | ||
| hops | Yes | ||
| totalSec | Yes |