madaburns/Blackveil DNS Security Scanner
Scan your domain's DNS & email security configuration and enforce minimum grade in CI
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| domain | Domain to scan (e.g. example.com) | yes | — |
| minimum-grade | Minimum passing grade (A+, A, B+, B, C+, C, D+, D, F) | no | C |
| profile | Scoring profile: auto, mail_enabled, enterprise_mail, non_mail, web_only, minimal | no | auto |
| api-key | Blackveil DNS API key for authenticated access (bypasses rate limits) | no | — |
| endpoint | MCP endpoint URL | no | https://dns-mcp.blackveilsecurity.com/mcp |
Outputs
| name | description |
|---|---|
| score | Numeric score (0-100) |
| grade | Letter grade (A+ through F) |
| maturity | Email security maturity stage name |
| passed | 'true' if grade meets minimum-grade threshold, 'false' otherwise |
| scoring-profile | Scoring profile used (detected or explicit) |
| finding-counts | JSON object with finding counts by severity (critical, high, medium, low) |
| interaction-effects | JSON array of scoring interaction penalties (ruleId, penalty, narrative) |
| percentile-rank | Percentile rank within the scoring profile population (0-100). Empty when insufficient data. |
| spoofability-score | Composite email spoofability score (0-100, higher = more spoofable). Empty when not computed. |