MTA-STS Check
mta_sts_checkVerifies a domain's MTA-STS deployment by inspecting its DNS record and policy file, reporting the enforcement mode and listed MX hosts to ensure TLS is enforced for inbound email.
Instructions
Check a domain's MTA-STS deployment: the _mta-sts TXT record AND the policy file at https://mta-sts./.well-known/mta-sts.txt. Reports the enforcement mode (enforce/testing/none) and the listed MX hosts. MTA-STS forces TLS for inbound SMTP and blocks downgrade attacks.
Args:
domain (string): the domain to check.
response_format ('markdown' | 'json'): output format (default 'markdown').
Returns: { dns_record_found, policy_found, mode, policy{}, findings[] }.
Example: "Does gmail.com enforce MTA-STS?" -> mta_sts_check(domain="gmail.com").
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Domain to check, e.g. 'example.com'. | |
| response_format | No | Output format: 'markdown' for a human-readable summary (default) or 'json' for the full structured payload. | markdown |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | ||
| dns_record_found | Yes | ||
| policy_found | Yes | ||
| mode | No | ||
| policy | No | ||
| findings | Yes |