# Mail Domain Check CLI

> A dependency-free Node.js 20+ command for public MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, PTR, and CAA diagnostics. No account is required.

## Run

Download the version-pinned public release:

```sh
curl -fsSL https://github.com/zac343/mail-domain-check-cli/releases/download/v0.1.0/mail-domain-check.mjs -o mail-domain-check.mjs
node mail-domain-check.mjs example.com
```

GitHub publishes a SHA-256 digest for the asset on the v0.1.0 release page.
Verify the downloaded file against that digest before using it in an automated
or privileged environment.

The same source file is also served from the product site:

```sh
curl -fsSLO https://mailcheck.agentcartai.com/cli/mail-domain-check.mjs
node mail-domain-check.mjs example.com
```

Supply real sending details when available:

```sh
node mail-domain-check.mjs example.com \
  --selector google \
  --sending-ip 8.8.8.8
```

## Options

- `--selector <name>` checks one explicit DKIM selector instead of guessing provider-specific names.
- `--sending-ip <address>` accepts an actual public IPv4 or IPv6 outbound address for PTR and A/AAAA forward confirmation.
- `--json` prints the public scan response as machine-readable JSON.
- `--lang zh` prints human-readable titles, summaries, and labels in Chinese.
- `--help` and `--version` do not call the network.

## Privacy and limits

The command sends the supplied domain, selector, and optional sending IP over HTTPS to the public scan API. Free analytics retain irreversible hashes and aggregate metrics, not raw domains or sending IPs. The public endpoint is rate-limited and intended for interactive diagnostics, not bulk enumeration.

The free response intentionally omits raw evidence, key material, report destinations, and prescriptive remediation. The command ends with a prefilled browser-scanner URL where a user can rerun the same public check interactively.

## Related files

- GitHub release: `https://github.com/zac343/mail-domain-check-cli/releases/tag/v0.1.0`
- GitHub repository: `https://github.com/zac343/mail-domain-check-cli`
- CLI source: `https://mailcheck.agentcartai.com/cli/mail-domain-check.mjs`
- API documentation: `https://mailcheck.agentcartai.com/developers/api/`
- OpenAPI: `https://mailcheck.agentcartai.com/openapi.json`

Results describe public configuration at scan time. They do not guarantee inbox placement and do not replace a complete security or compliance audit.