{"id":154692,"recorded_at":"2026-10-26T14:41:13.084542Z","observed_at":"2026-10-26T14:41:13.084493Z","subject_kind":"endpoint","subject":"5113c676-c46c-4e4b-936e-9756987aa574","kind":"mcp.tools","method":"probe.mcp/1","body":{"count":21,"tools":[{"description":"Inspect the public DMARC record at _dmarc.<domain>. The domain does not need to belong to your organization. Returns parsed policy and rua/ruf addresses.","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"domain":{"description":"Domain to inspect — does not need to belong to your organization.","type":"string"}},"required":["domain"],"type":"object"},"name":"check_dmarc"},{"description":"Add a new domain to the organization. Response includes the reporting_email and dmarc_record values to publish in DNS. May return 402 if the plan domain limit has been reached.","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"name":{"description":"Domain name to monitor (e.g. \"example.com\"). Stored lowercased.","type":"string"}},"required":["name"],"type":"object"},"name":"create_domain"},{"description":"Create a new webhook endpoint. URL must start with https://. Returns 422 if the organization has reached its webhook limit.","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"name":{"description":"Human-readable label","type":"string"},"url":{"description":"HTTPS URL events will be POSTed to","type":"string"}},"required":["url","name"],"type":"object"},"name":"create_webhook"},{"description":"Remove a domain from monitoring. Soft-deletes; historical reports remain accessible.","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"domain_id":{"description":"Domain UUID","type":"string"}},"required":["domain_id"],"type":"object"},"name":"delete_domain"},{"description":"Delete a webhook endpoint permanently.","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"webhook_id":{"description":"Webhook UUID","type":"string"}},"required":["webhook_id"],"type":"object"},"name":"delete_webhook"},{"description":"Dismiss a specific alert","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"alert_id":{"type":"string"}},"required":["alert_id"],"type":"object"},"name":"dismiss_alert"},{"description":"Export a DMARC report as CSV","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"report_id":{"type":"string"}},"required":["report_id"],"type":"object"},"name":"export_report_csv"},{"description":"Get details of a specific domain","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"domain_id":{"description":"Domain UUID","type":"string"}},"required":["domain_id"],"type":"object"},"name":"get_domain"},{"description":"Get the full detail of a forensic (RUF) report by UUID, including the raw failed message envelope.","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"report_id":{"description":"Forensic report UUID","type":"string"}},"required":["report_id"],"type":"object"},"name":"get_forensic_report"},{"description":"Aggregated forensic-report counters grouped by auth failure type, delivery result, source IP (with geolocation) and reported domain.","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","properties":{},"type":"object"},"name":"get_forensic_reports_statistics"},{"description":"Summary of forensic activity in the last 7 days — useful for daily digest views.","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","properties":{},"type":"object"},"name":"get_forensic_reports_summary"},{"description":"Get details of a specific DMARC report","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"report_id":{"type":"string"}},"required":["report_id"],"type":"object"},"name":"get_report"},{"description":"Get statistics for a specific DMARC report","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"report_id":{"type":"string"}},"required":["report_id"],"type":"object"},"name":"get_report_statistics"},{"description":"List alerts for your organization","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"page":{"type":"number"},"per_page":{"type":"number"},"status":{"type":"string"}},"type":"object"},"name":"list_alerts"},{"description":"List all monitored domains in your organization","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"page":{"type":"number"},"per_page":{"type":"number"}},"type":"object"},"name":"list_domains"},{"description":"List DMARC RUF (forensic) reports with optional filtering and pagination. Returns 403 if the plan does not include forensic reports (Pro plan and above).","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"date_from":{"description":"Inclusive lower bound on arrival_date (ISO 8601 / \"YYYY-MM-DD HH:MM:SS\")","type":"string"},"date_to":{"description":"Inclusive upper bound on arrival_date","type":"string"},"domain_id":{"description":"Filter by domain UUID","type":"string"},"page":{"type":"number"},"per_page":{"type":"number"}},"type":"object"},"name":"list_forensic_reports"},{"description":"List DMARC reports for your organization","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"date_from":{"type":"string"},"date_to":{"type":"string"},"domain":{"type":"string"},"page":{"type":"number"},"per_page":{"type":"number"}},"type":"object"},"name":"list_reports"},{"description":"List webhook endpoints configured for the organization. Returns 403 if the plan does not include advanced alerting (Pro and above).","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","properties":{},"type":"object"},"name":"list_webhooks"},{"description":"Send a synchronous webhook.test event to verify connectivity. Returns the delivery status. Test events do NOT update last_triggered_at, last_status or failure_count.","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"webhook_id":{"description":"Webhook UUID","type":"string"}},"required":["webhook_id"],"type":"object"},"name":"test_webhook"},{"description":"Update a webhook. Any combination of url, name and is_active may be provided; URL must remain HTTPS.","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"is_active":{"description":"Enable/disable delivery without losing config","type":"boolean"},"name":{"description":"New label","type":"string"},"url":{"description":"New HTTPS URL","type":"string"},"webhook_id":{"description":"Webhook UUID","type":"string"}},"required":["webhook_id"],"type":"object"},"name":"update_webhook"},{"description":"Re-check a domain's DNS to confirm the DMARC record contains the organization's reporting email. Updates status to verified on success.","inputSchema":{"$schema":"http://json-schema.org/draft-07/schema#","additionalProperties":false,"properties":{"domain_id":{"description":"Domain UUID","type":"string"}},"required":["domain_id"],"type":"object"},"name":"verify_domain"}]},"body_sha256":"73f1f11a1767e045c9950a64e2261a3f54417d16283f474c254e19ae2165701e","prev_id":null,"leaf":"0x217d29750d970c37fd474fae0f10cad1c17638231a9be0a4acd113f07713d31e","leaf_text":"{\"body\":\"73f1f11a1767e045c9950a64e2261a3f54417d16283f474c254e19ae2165701e\",\"id\":154692,\"kind\":\"mcp.tools\",\"method\":\"probe.mcp/1\",\"observed_us\":1793025673084493,\"prev\":null,\"subject\":\"5113c676-c46c-4e4b-936e-9756987aa574\",\"subject_kind\":\"endpoint\"}","day":{"day":"2026-10-26","leaves":296695,"root":"0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8","chained":"0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a","anchor_chain":"eip155:5042002","anchor_tx":"0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae","anchor_block":69251483},"proof":["0x217d0a2038b98412d65001ac8d1e191bd85c554206e542fa183ca50426d6dc25","0xeb336cedf0eb67fe437b9488f6777a39774893e6b2f7b56e351937d447715e56","0xc9bf76a3b6b14d458f52ad4cf005c6b2db9bd4861a31e4ae1aa8c1b8502be891","0x704654889c93b3db9304772b04222ec1bebd2db3d5a09a0971ca7d3d381e1ebf","0x5f2e1bdf3b61f01ccf8bd2fd3956669b8da03af14747db5fc6b8a317ca2cf645","0x4a38eaf710aaa24ae28dcd4d0a0e7a08f4fa29af50308c8627227e1e64d8161b","0xa897c0d3be49fe761ed1c3081b1e3655e4bcbeb1c3280b2b4070bf8daa354c07","0x79a7b7c27d04a990e83d3172fd194fd58a49c89eb00527ffafc36f40559bc2f3","0xc8d8ba70110d460f988fd2b057e677cbc713f91a024845889e76201c8f934e3a","0x52a03554eda198dc4680d30e566c1eda71c25f02648bb3a67df331bf196cafc1","0x71f472bb5c514dca2395c7842916e5cae63a9c622d8bc8f84b07a986c5ba91a1","0xfde157310fc8513767b162378ca9ceefb2937c374b7381a8887f7ccba8ab5a80","0x9d75d4d3ab6219edefa04be60b32fdd56be7a7672f370a5115f02f7b098ecd27","0x9dfd312f3d4937f7cb144cee3987e8516f222932b4ea286605236d73cfa1ed16","0xc3a6a3ae44ec0da1848b16d40c45d7aac97a67352eea8df18e0f26edabea8a2f","0x06d71bfa7d8b41d62c8836efc2c601e1cc3772d9453596b2ae4950887f3310ca","0x8c756542e482157df0c36464d75c937b845e4423dbbcfad08f0cf8d5a16b9a13","0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d","0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a"]}