check_mta_sts

The check_mta_sts tool is provided by BlackVeil DNS & Email Security Scanner. Install that server in your AI client and the assistant can call it directly.

Servers exposing check_mta_sts

• BlackVeil DNS & Email Security ScannerB · 79HTTP

  From the publisher:Check whether a domain enforces SMTP TLS for inbound mail via MTA-STS, protecting against downgrade attacks. Queries _mta-sts.<domain> and fetches the policy file, reports mode (enforce/testing/none) and MX coverage. Use to verify whether inbound SMTP is protected against TLS downgrade or MITM — distinct from check_dane which uses TLSA pinning. Part of the scan_domain audit.

  Parameter	Type	Description
  domain*	string	Domain to check (e.g., example.com)
  force_refresh	boolean	Bypass cache and run a fresh check. Useful after DNS changes.
  format	string	Output verbosity. Auto-detected if omitted.

  Install BlackVeil DNS & Email Security Scanner →

Tool lists are read from the live servers (or, for packaged servers, from their documentation) each morning, so this reflects what they exposed at the last refresh. Search all tools.