check_mta_sts
Verify MTA-STS enforcement for inbound mail by checking DNS TXT record and HTTPS policy file, returning parsed policy, TLS certificate validity, and consistency warnings.
Instructions
Read-only check of MTA-STS: TXT record at _mta-sts. plus the HTTPS policy file at mta-sts./.well-known/mta-sts.txt. Returns parsed policy (mode: enforce/testing/none, mx allowlist, max_age), TLS certificate validity for the policy host, and consistency warnings between DNS and HTTPS. Use to verify enforced TLS for inbound mail; pair with check_smtp_tls for live STARTTLS validation. No auth, DNS + HTTPS GET only.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Domain name only, e.g. example.com (no URL, path, or port) |