Checks & policy modes

Extraits de code

curl "https://api.oanor.com/mtasts-api/v1/meta" \
  -H "x-oanor-key: oanor_test_..."

await fetch("https://api.oanor.com/mtasts-api/v1/meta", {
  headers: { "x-oanor-key": "oanor_test_..." }
});

$ch = curl_init("https://api.oanor.com/mtasts-api/v1/meta");
curl_setopt($ch, CURLOPT_HTTPHEADER, ["x-oanor-key: oanor_test_..."]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$out = curl_exec($ch);

import requests
requests.get(
    "https://api.oanor.com/mtasts-api/v1/meta",
    headers={"x-oanor-key": "oanor_test_..."}
)

Exemple de réponse

Une réponse réelle de ce endpoint, capturée lors du dernier contrôle de santé.

{
    "data": {
        "note": "Inspect a domain's SMTP transport-security posture — whether mail servers are required to deliver inbound mail over authenticated TLS. /v1/check?domain=google.com fetches the MTA-STS policy file from mta-sts.<domain>/.well-known/mta-sts.txt (version, mode, the permitted MX hosts and max_age), the _mta-sts DNS TXT record (its policy id) and the _smtp._tls TLS-RPT record (the rua reporting address), then reports whether MTA-STS is actually enforced and a prioritised list of issues (no policy, no DNS record, mode only 'testing', missing TLS-RPT). /v1/policy returns just the parsed policy file. The request is made server-side and private/internal targets are refused (SSRF-guarded). Ideal for email-deliverability and anti-downgrade-attack audits, vendor assessment and compliance. An MTA-STS / TLS-RPT checker — the SMTP transport-security counterpart to the email-authentication analyzer (emailsec, which covers SPF/DKIM/DMARC), and distinct from raw DNS lookup (dns). No key, no cache.",
        "modes": [
            "enforce",
            "testing",
            "none"
        ],
        "checks": [
            "MTA-STS policy file (mta-sts.<domain>/.well-known/mta-sts.txt)",
            "_mta-sts DNS TXT",
            "_smtp._tls TLS-RPT DNS TXT"
        ],
        "endpoints": [
            "/v1/check",
            "/v1/policy",
            "/v1/meta"
        ]
    },
    "meta": {
        "timestamp": "2026-06-01T23:40:44.772Z",
        "request_id": "a526b2e9-af40-4927-816b-4f04c8b6b030"
    },
    "status": "ok",
    "message": "Meta retrieved",
    "success": true
}