24 tools · production · spec
AdminToolkit is a suite of tools that lets an agent validate email configurations, analyze headers, and check domain security settings.
Tools24 total
admintoolkit_analyze_email_headers
readimperative/headersstring—Full email headers to analyze, e.g. 'Authentication-Results: ...'.
trusted_authserv_idsarray—Optional authserv-id values explicitly trusted by the caller; without them, Authentication-Results remain unverified recorded claims.
admintoolkit_analyze_http_headers
readimperative/urlstring—Public URL to fetch for HTTP header analysis, e.g. 'https://example.com/'.
headersstring—Pasted HTTP response headers, e.g. 'Strict-Transport-Security: max-age=31536000'.
admintoolkit_calculate_cidr_subnet
readimperative/cidrstringrequiredCIDR block to calculate, e.g. '192.0.2.0/24'.
familystring—Address family: 'auto', 'ipv4', or 'ipv6', e.g. 'ipv4'.
targetstring—Split target prefix length, e.g. '26' for /26 subnets.
admintoolkit_check_ai_crawler_access
readimperative/urlstring—Robots.txt URL or bare domain to fetch, e.g. 'https://example.com/robots.txt'.
pathstring—Path to evaluate against robots.txt rules, e.g. '/' or '/tools/'.
contentstring—Pasted robots.txt content to validate locally, e.g. 'User-agent: GPTBot'.
crawlersarray—Crawler tokens to evaluate as an array, e.g. ['GPTBot','Google-Extended'].
admintoolkit_check_bimi_record
readimperative/dmarcstring—Pasted DMARC TXT record for BIMI policy review, e.g. 'v=DMARC1; p=reject'.
domainstringrequiredBIMI domain to check, e.g. 'example.com'.
recordstring—Pasted BIMI TXT record, e.g. 'v=BIMI1; l=https://example.com/logo.svg'.
logo_urlstring—BIMI SVG logo URL to inspect, e.g. 'https://example.com/logo.svg'.
selectorstring—BIMI selector to query, e.g. 'default'.
evidence_urlstring—BIMI VMC or evidence URL to inspect, e.g. 'https://example.com/vmc.pem'.
admintoolkit_check_caa_records
readimperative/castring—CA domain for generated CAA records, e.g. 'letsencrypt.org'.
iodefstring—CAA iodef report destination, e.g. 'mailto:security@example.com'.
domainstringrequiredCAA domain to check, e.g. 'example.com' (no scheme).
methodsstring—CAA validationmethods value, e.g. 'dns-01'.
recordsstring—CAA records to inspect, one per line, e.g. '0 issue letsencrypt.org'.
issuemailstring—CAA issuemail issuer-domain value from RFC 9495, optionally followed by issuer parameters, e.g. 'letsencrypt.org; validationmethods=dns-01'.
admintoolkit_check_email_auth_records
readimperative/domainstringrequiredMail domain to check, e.g. 'example.com'.
policystring—Expected DMARC policy value, e.g. 'reject'.
selectorstring—DKIM selector to query, e.g. 's1' or 'default'.
spf_recordstring—Pasted SPF TXT record, e.g. 'v=spf1 redirect=spf.example.com'.
dkim_recordstring—Pasted DKIM TXT value, e.g. 'v=DKIM1; k=rsa; p=...'.
dmarc_recordstring—Pasted DMARC TXT record, e.g. 'v=DMARC1; p=reject'.
selector_modestring—DKIM selector mode: 'auto', 'manual', or 'none', e.g. 'auto'.
admintoolkit_check_mta_sts_policy
readimperative/modestring—Generated MTA-STS policy mode: 'testing', 'enforce', or 'none', e.g. 'testing'.
domainstringrequiredMail domain for MTA-STS checks, e.g. 'example.com'.
policystring—Pasted MTA-STS policy text, e.g. 'version: STSv1'.
dns_txtstring—Pasted _mta-sts TXT value, e.g. 'v=STSv1; id=20260713'.
tls_rptstring—Pasted TLS-RPT TXT value, e.g. 'v=TLSRPTv1; rua=mailto:tls@example.com'.
mx_hostsstring—Known MX hostnames, one per line, e.g. 'mail.example.com'.
admintoolkit_check_mx_records
readimperative/domainstringrequiredMail domain to check via DNS MX lookup, e.g. 'example.com'.
admintoolkit_check_redirect_indexability
readimperative/urlstringrequiredPublic URL to check for redirects and indexability, e.g. 'https://example.com/'.
admintoolkit_check_smtp_tls_readiness
readimperative/domainstringrequiredMail domain for SMTP TLS readiness checks, e.g. 'example.com'.
check_daneboolean—Include DANE/TLSA checks; pass true or false, e.g. true.
check_fcrdnsboolean—Include forward-confirmed reverse DNS checks; pass true or false, e.g. true.
check_mta_stsboolean—Include MTA-STS checks; pass true or false, e.g. true.
check_tls_rptboolean—Include TLS-RPT checks; pass true or false, e.g. true.
admintoolkit_check_tls_configuration
readimperative/hoststringrequiredPublic TLS DNS host or IP literal to check, e.g. 'example.com' or '1.1.1.1' (no scheme; private/reserved targets are rejected).
hstsstring—Optional pasted HSTS header, e.g. 'max-age=31536000; includeSubDomains'.
portstring—TLS port number to check, e.g. '443'.
admintoolkit_check_tls_rpt_policy
readimperative/ruastring—Generated TLS-RPT rua destination, e.g. 'mailto:tls@example.com'.
domainstringrequiredMail domain for TLS-RPT checks, e.g. 'example.com'.
dns_txtstring—Pasted _smtp._tls TXT value, e.g. 'v=TLSRPTv1; rua=mailto:tls@example.com'.
admintoolkit_decode_edid_data
readimperative/filestring—EDID file contents as text or hex, e.g. a 128-byte EDID block.
edid_hexstring—Pasted EDID hex string, e.g. '00ffffffffffff00...'.
admintoolkit_decode_ssl_certificate
readimperative/pemstring—Certificate PEM text to decode, e.g. '-----BEGIN CERTIFICATE-----'.
hoststring—TLS certificate host to connect to, e.g. 'example.com'.
portstring—TLS certificate port number, e.g. '443'.
protocolstring—Certificate protocol value, currently 'TLS', e.g. 'TLS'.
admintoolkit_generate_tlsa_record
readimperative/pemstring—Certificate PEM, DER base64, or hex input, e.g. '-----BEGIN CERTIFICATE-----'.
filestring—Certificate file content to parse, e.g. PEM text from a .crt file.
hoststringrequiredTLS service host for TLSA generation, e.g. 'mail.example.com'.
portstring—TLS service port number, e.g. '25' or '443'.
usagestring—TLSA certificate usage: 0=PKIX-TA, 1=PKIX-EE, 2=DANE-TA, 3=DANE-EE.
matchingstring—TLSA matching type: 0=full, 1=SHA-256, 2=SHA-512.
protocolstring—TLSA transport protocol: 'tcp' or 'udp', e.g. 'tcp'.
selectorstring—TLSA selector: 0=full certificate or 1=SPKI, e.g. '1'.
admintoolkit_show_public_ip_context
readimperative/no parameters
admintoolkit_validate_a2a_agent_card
readimperative/urlstring—Agent Card URL or bare domain to fetch, e.g. 'https://example.com/.well-known/agent-card.json'.
jsonstring—Pasted Agent Card JSON to validate locally, e.g. '{"name":"Agent"}'.
admintoolkit_validate_arc_chain
readimperative/headersstring—Message headers containing ARC fields, e.g. 'ARC-Seal: i=1; ...'.
admintoolkit_validate_dane_records
readimperative/hoststringrequiredDANE service host to validate, e.g. 'mail.example.com'.
modestring—DANE validation mode: 'smtp' or 'tls', e.g. 'smtp'.
portstring—DANE service port number, e.g. '25' or '443'.
dnssecstring—DNSSEC validation status: '', 'secure', or 'bogus', e.g. 'secure'.
protocolstring—DANE transport protocol: 'tcp' or 'udp', e.g. 'tcp'.
tlsa_recordsstring—TLSA records to validate, one per line, e.g. '3 1 1 <sha256>'.
admintoolkit_validate_dnssec_records
readimperative/domainstringrequiredDNSSEC domain to validate, e.g. 'example.com'.
statusstring—Resolver validation status: '', 'secure', or 'bogus', e.g. 'secure'.
ds_recordsstring—DS records for the domain, one per line, e.g. '12345 13 2 <digest>'.
rrsig_recordsstring—RRSIG records for validation context, one per line, e.g. 'example.com. RRSIG ...'.
dnskey_recordsstring—DNSKEY records for the zone, one per line, e.g. '257 3 13 <key>'.
admintoolkit_validate_llms_txt
readimperative/urlstring—llms.txt URL or bare domain to fetch, e.g. 'https://example.com/llms.txt'.
contentstring—Pasted llms.txt Markdown content to validate locally, e.g. '# Example'.
admintoolkit_validate_security_txt
readimperative/urlstring—Public security.txt URL or bare domain, e.g. 'https://example.com/.well-known/security.txt'.
policystring—Generated Policy URL value, e.g. 'https://example.com/security-policy'.
contactstring—Generated Contact field value, e.g. 'mailto:security@example.com'.
contentstring—Pasted security.txt content, e.g. 'Contact: mailto:security@example.com'.
pgp_keystring—Generated PGP key identifier, e.g. 'openpgp4fpr:ABCD...'.
encryptionstring—Generated Encryption URL value, e.g. 'https://example.com/pgp.txt'.
admintoolkit_validate_webmcp_tool
readimperative/urlstring—Public page URL to fetch for WebMCP validation, e.g. 'https://example.com/'.
sourcestring—Pasted HTML or JavaScript source to validate locally, e.g. 'data-tool-name=demo'.