Email Authentication Audit
email_auth_auditAudits a domain's SPF, DKIM, DMARC, and MX records, then returns a 0–100 score, A–F grade, and prioritized fixes to improve email security.
Instructions
Headline tool. Audits a domain's email-authentication posture in one call — SPF, DKIM, DMARC and MX — then returns a 0–100 score, an A–F grade and a prioritised list of fixes. Use this first; reach for the per-record tools (spf_check, dmarc_check, dkim_check) only when you need the full detail of one mechanism.
Args:
domain (string): the domain to audit.
dkim_selectors (string[], optional): DKIM selectors to probe. If omitted, common provider selectors are tried (absence is then inconclusive).
response_format ('markdown' | 'json'): output format (default 'markdown').
Returns (JSON): { "domain": string, "grade": "A".."F", "score": number, // 0-100 "has_mx": boolean, "mx_hosts": string[], "spf": { found, record, all_qualifier, lookup_count, exceeds_lookup_limit, findings[] }, "dmarc":{ found, policy, tags, findings[] }, "dkim": { any_found, selectors[], findings[] }, "top_recommendations": string[] }
Examples:
"Is example.com protected against email spoofing?" -> email_auth_audit(domain="example.com")
"Audit acme.com, our DKIM selector is 'k1'" -> email_auth_audit(domain="acme.com", dkim_selectors=["k1"])
Errors: returns an error only if the domain is malformed; missing records are reported as findings, not errors.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Domain to audit, e.g. 'example.com'. | |
| dkim_selectors | No | Optional DKIM selectors to check (e.g. ['google','selector1']). If omitted, a list of common provider selectors is probed. | |
| response_format | No | Output format: 'markdown' for a human-readable summary (default) or 'json' for the full structured payload. | markdown |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | ||
| grade | Yes | ||
| score | Yes | ||
| has_mx | Yes | ||
| mx_hosts | Yes | ||
| spf | Yes | ||
| dmarc | Yes | ||
| dkim | Yes | ||
| top_recommendations | Yes |