{
  "info": {
    "name": "IntoDNS.AI API",
    "description": "Complete collection of IntoDNS.AI API endpoints for DNS security and email deliverability analysis. No API key required for public diagnostic endpoints; generous abuse protection may return HTTP 429 with Retry-After for bursts and costly routes.",
    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json",
    "_postman_id": "intodns-api-v2",
    "version": "2.0.0"
  },
  "auth": {
    "type": "noauth"
  },
  "variable": [
    {
      "key": "base_url",
      "value": "https://intodns.ai/api",
      "type": "string"
    },
    {
      "key": "test_domain",
      "value": "example.com",
      "type": "string"
    }
  ],
  "item": [
    {
      "name": "Domain Scanning",
      "item": [
        {
          "name": "Quick Scan",
          "request": {
            "method": "GET",
            "header": [],
            "url": {
              "raw": "{{base_url}}/scan/quick?domain={{test_domain}}",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "scan",
                "quick"
              ],
              "query": [
                {
                  "key": "domain",
                  "value": "{{test_domain}}",
                  "description": "Domain name to scan"
                }
              ]
            },
            "description": "Perform a fast security overview of a domain covering DNS, email, and basic security checks. Returns a score from 0-100 with category breakdowns."
          },
          "response": []
        },
        {
          "name": "Everything Report (JSON)",
          "request": {
            "method": "GET",
            "header": [],
            "url": {
              "raw": "{{base_url}}/report/everything?domain={{test_domain}}",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "report",
                "everything"
              ],
              "query": [
                {
                  "key": "domain",
                  "value": "{{test_domain}}",
                  "description": "Domain name to report on"
                }
              ]
            },
            "description": "Live full DNS and email security report. Includes quick score, DNS records, DNSSEC, SPF graph, DKIM, DMARC, BIMI logo/certificate checks, MTA-STS, SMTP STARTTLS, FCrDNS, blacklists, sender requirements, and web security."
          },
          "response": []
        },
        {
          "name": "Everything Report (Markdown)",
          "request": {
            "method": "GET",
            "header": [],
            "url": {
              "raw": "{{base_url}}/report/everything?domain={{test_domain}}&format=markdown",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "report",
                "everything"
              ],
              "query": [
                {
                  "key": "domain",
                  "value": "{{test_domain}}"
                },
                {
                  "key": "format",
                  "value": "markdown",
                  "description": "Use markdown for tickets, LLM context, and bookmarked technical reports"
                }
              ]
            },
            "description": "LLM-friendly Markdown version of the full Everything Report."
          },
          "response": []
        },
        {
          "name": "Everything Report Snapshot (JSON)",
          "request": {
            "method": "GET",
            "header": [],
            "url": {
              "raw": "{{base_url}}/report/snapshot?domain={{test_domain}}",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "report",
                "snapshot"
              ],
              "query": [
                {
                  "key": "domain",
                  "value": "{{test_domain}}",
                  "description": "Domain name to snapshot"
                }
              ]
            },
            "description": "Create a free fixed Everything Report evidence snapshot with timestamp, content hash, and stable JSON/Markdown retrieval URLs. No signup or API key is required; generous abuse protection may return HTTP 429 with Retry-After."
          },
          "response": []
        },
        {
          "name": "Everything Report Snapshot (Markdown)",
          "request": {
            "method": "GET",
            "header": [],
            "url": {
              "raw": "{{base_url}}/report/snapshot?domain={{test_domain}}&format=markdown",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "report",
                "snapshot"
              ],
              "query": [
                {
                  "key": "domain",
                  "value": "{{test_domain}}"
                },
                {
                  "key": "format",
                  "value": "markdown",
                  "description": "Use markdown for tickets, LLM context, and fixed audit evidence"
                }
              ]
            },
            "description": "Create a free fixed Markdown evidence snapshot for support tickets, audits, and LLM citations. No signup or API key is required; generous abuse protection may return HTTP 429 with Retry-After."
          },
          "response": []
        },
        {
          "name": "Deep Scan",
          "request": {
            "method": "POST",
            "header": [
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "body": {
              "mode": "raw",
              "raw": "{\n  \"domain\": \"{{test_domain}}\",\n  \"type\": \"web\"\n}"
            },
            "url": {
              "raw": "{{base_url}}/scan/deep",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "scan",
                "deep"
              ]
            },
            "description": "Comprehensive security analysis using Internet.nl infrastructure. This is an asynchronous operation that returns a scan_id for status polling."
          },
          "response": []
        }
      ],
      "description": "Domain scanning operations providing quick and comprehensive security analysis"
    },
    {
      "name": "DNS Operations",
      "item": [
        {
          "name": "DNS Lookup (All Records)",
          "request": {
            "method": "GET",
            "header": [],
            "url": {
              "raw": "{{base_url}}/dns/lookup?domain={{test_domain}}",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "dns",
                "lookup"
              ],
              "query": [
                {
                  "key": "domain",
                  "value": "{{test_domain}}"
                }
              ]
            },
            "description": "Query all DNS record types for a domain (A, AAAA, MX, TXT, NS, SOA, CAA, CNAME)"
          },
          "response": []
        },
        {
          "name": "DNS Lookup (Specific Type)",
          "request": {
            "method": "GET",
            "header": [],
            "url": {
              "raw": "{{base_url}}/dns/lookup?domain={{test_domain}}&type=A",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "dns",
                "lookup"
              ],
              "query": [
                {
                  "key": "domain",
                  "value": "{{test_domain}}"
                },
                {
                  "key": "type",
                  "value": "A",
                  "description": "Record type: A, AAAA, MX, TXT, NS, SOA, CAA, CNAME, PTR"
                }
              ]
            },
            "description": "Query a specific DNS record type"
          },
          "response": []
        },
        {
          "name": "DNSSEC Validation",
          "request": {
            "method": "GET",
            "header": [],
            "url": {
              "raw": "{{base_url}}/dns/dnssec?domain={{test_domain}}",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "dns",
                "dnssec"
              ],
              "query": [
                {
                  "key": "domain",
                  "value": "{{test_domain}}"
                }
              ]
            },
            "description": "Validate DNSSEC chain of trust for a domain, including DS records, DNSKEY validation, and signature verification"
          },
          "response": []
        },
        {
          "name": "DNS Propagation Check",
          "request": {
            "method": "GET",
            "header": [],
            "url": {
              "raw": "{{base_url}}/dns/propagation?domain={{test_domain}}&type=A",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "dns",
                "propagation"
              ],
              "query": [
                {
                  "key": "domain",
                  "value": "{{test_domain}}"
                },
                {
                  "key": "type",
                  "value": "A",
                  "description": "Record type to check propagation for"
                }
              ]
            },
            "description": "Check DNS propagation across global nameservers (Google, Cloudflare, Quad9, etc.)"
          },
          "response": []
        }
      ],
      "description": "DNS lookup, validation, and propagation checking operations"
    },
    {
      "name": "Email Security",
      "item": [
        {
          "name": "Complete Email Check",
          "request": {
            "method": "GET",
            "header": [],
            "url": {
              "raw": "{{base_url}}/email/check?domain={{test_domain}}",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "email",
                "check"
              ],
              "query": [
                {
                  "key": "domain",
                  "value": "{{test_domain}}"
                }
              ]
            },
            "description": "Comprehensive email security analysis including SPF, DKIM, DMARC, and MX records with scoring"
          },
          "response": []
        },
        {
          "name": "SPF Check",
          "request": {
            "method": "GET",
            "header": [],
            "url": {
              "raw": "{{base_url}}/email/spf?domain={{test_domain}}",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "email",
                "spf"
              ],
              "query": [
                {
                  "key": "domain",
                  "value": "{{test_domain}}"
                }
              ]
            },
            "description": "Analyze SPF (Sender Policy Framework) record, check for syntax errors, DNS lookup count, and policy strength"
          },
          "response": []
        },
        {
          "name": "DKIM Discovery",
          "request": {
            "method": "GET",
            "header": [],
            "url": {
              "raw": "{{base_url}}/email/dkim?domain={{test_domain}}",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "email",
                "dkim"
              ],
              "query": [
                {
                  "key": "domain",
                  "value": "{{test_domain}}"
                }
              ]
            },
            "description": "Discover and validate DKIM keys using common selectors (default, google, k1, s1, s2, selector1, selector2)"
          },
          "response": []
        },
        {
          "name": "DMARC Check",
          "request": {
            "method": "GET",
            "header": [],
            "url": {
              "raw": "{{base_url}}/email/dmarc?domain={{test_domain}}",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "email",
                "dmarc"
              ],
              "query": [
                {
                  "key": "domain",
                  "value": "{{test_domain}}"
                }
              ]
            },
            "description": "Analyze DMARC policy including p= setting, percentage, reporting addresses (rua/ruf)"
          },
          "response": []
        },
        {
          "name": "BIMI Logo and VMC/CMC Check",
          "request": {
            "method": "GET",
            "header": [],
            "url": {
              "raw": "{{base_url}}/email/bimi?domain={{test_domain}}",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "email",
                "bimi"
              ],
              "query": [
                {
                  "key": "domain",
                  "value": "{{test_domain}}"
                }
              ]
            },
            "description": "Analyze BIMI record syntax, hosted SVG logo reachability, and optional VMC/CMC mark-certificate URL."
          },
          "response": []
        },
        {
          "name": "MTA-STS Check",
          "request": {
            "method": "GET",
            "header": [],
            "url": {
              "raw": "{{base_url}}/email/mta-sts?domain={{test_domain}}",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "email",
                "mta-sts"
              ],
              "query": [
                {
                  "key": "domain",
                  "value": "{{test_domain}}"
                }
              ]
            },
            "description": "Check _mta-sts TXT record and fetch the HTTPS MTA-STS policy file."
          },
          "response": []
        },
        {
          "name": "SMTP STARTTLS Certificate Check",
          "request": {
            "method": "GET",
            "header": [],
            "url": {
              "raw": "{{base_url}}/email/smtp-tls?domain={{test_domain}}",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "email",
                "smtp-tls"
              ],
              "query": [
                {
                  "key": "domain",
                  "value": "{{test_domain}}"
                }
              ]
            },
            "description": "Live MX handshake check for STARTTLS support, TLS certificate trust, hostname match, expiry, and FCrDNS."
          },
          "response": []
        },
        {
          "name": "FCrDNS / PTR Check",
          "request": {
            "method": "GET",
            "header": [],
            "url": {
              "raw": "{{base_url}}/email/fcrdns?domain={{test_domain}}",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "email",
                "fcrdns"
              ],
              "query": [
                {
                  "key": "domain",
                  "value": "{{test_domain}}"
                }
              ]
            },
            "description": "Dedicated PTR and forward-confirmed reverse DNS check for mail-server IPs. Useful for clustered mail gateways and SpamExperts-style setups."
          },
          "response": []
        },
        {
          "name": "Sender Requirements Check",
          "request": {
            "method": "GET",
            "header": [],
            "url": {
              "raw": "{{base_url}}/email/sender-requirements?domain={{test_domain}}",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "email",
                "sender-requirements"
              ],
              "query": [
                {
                  "key": "domain",
                  "value": "{{test_domain}}"
                }
              ]
            },
            "description": "Check Google/Yahoo sender requirements and related authentication/infrastructure posture."
          },
          "response": []
        }
      ],
      "description": "Email authentication and deliverability checking"
    },
    {
      "name": "AI Services",
      "item": [
        {
          "name": "AI Explain Issue",
          "request": {
            "method": "POST",
            "header": [
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "body": {
              "mode": "raw",
              "raw": "{\n  \"issue_type\": \"spf_too_many_lookups\",\n  \"context\": {\n    \"domain\": \"{{test_domain}}\",\n    \"current_lookups\": 12,\n    \"limit\": 10\n  }\n}"
            },
            "url": {
              "raw": "{{base_url}}/ai/explain",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "ai",
                "explain"
              ]
            },
            "description": "Get AI-assisted explanation for DNS or email security issues with severity assessment and impact analysis"
          },
          "response": []
        },
        {
          "name": "AI Fix Suggestion",
          "request": {
            "method": "POST",
            "header": [
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "body": {
              "mode": "raw",
              "raw": "{\n  \"issue\": \"missing_dmarc\",\n  \"domain\": \"{{test_domain}}\",\n  \"current_config\": {}\n}"
            },
            "url": {
              "raw": "{{base_url}}/ai/fix",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "ai",
                "fix"
              ]
            },
            "description": "Get model-generated fix recommendations with ready-to-use DNS record configurations and step-by-step implementation guides"
          },
          "response": []
        },
        {
          "name": "AI Explain - No DKIM",
          "request": {
            "method": "POST",
            "header": [
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "body": {
              "mode": "raw",
              "raw": "{\n  \"issue_type\": \"missing_dkim\",\n  \"context\": {\n    \"domain\": \"{{test_domain}}\"\n  }\n}"
            },
            "url": {
              "raw": "{{base_url}}/ai/explain",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "ai",
                "explain"
              ]
            },
            "description": "Example: Get explanation for missing DKIM configuration"
          },
          "response": []
        },
        {
          "name": "AI Fix - Weak SPF Policy",
          "request": {
            "method": "POST",
            "header": [
              {
                "key": "Content-Type",
                "value": "application/json"
              }
            ],
            "body": {
              "mode": "raw",
              "raw": "{\n  \"issue\": \"spf_weak_policy\",\n  \"domain\": \"{{test_domain}}\",\n  \"current_config\": {\n    \"spf_record\": \"v=spf1 include:_spf.example.com ~all\"\n  }\n}"
            },
            "url": {
              "raw": "{{base_url}}/ai/fix",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "ai",
                "fix"
              ]
            },
            "description": "Example: Get fix suggestion for upgrading SPF from softfail (~all) to hardfail (-all)"
          },
          "response": []
        }
      ],
      "description": "AI-assisted explanations and fix suggestions using Claude API"
    },
    {
      "name": "System",
      "item": [
        {
          "name": "Health Check",
          "request": {
            "method": "GET",
            "header": [],
            "url": {
              "raw": "{{base_url}}/health",
              "host": [
                "{{base_url}}"
              ],
              "path": [
                "health"
              ]
            },
            "description": "Check API health status and uptime"
          },
          "response": []
        }
      ],
      "description": "System health and status endpoints"
    }
  ],
  "event": [
    {
      "listen": "prerequest",
      "script": {
        "type": "text/javascript",
        "exec": [
          "// Set test domain if not configured",
          "if (!pm.collectionVariables.get('test_domain')) {",
          "  pm.collectionVariables.set('test_domain', 'example.com');",
          "}",
          "",
          "// Add timestamp to request",
          "pm.collectionVariables.set('timestamp', new Date().toISOString());"
        ]
      }
    },
    {
      "listen": "test",
      "script": {
        "type": "text/javascript",
        "exec": [
          "pm.test('Status code is 200 or 201', function () {",
          "  pm.expect([200, 201]).to.include(pm.response.code);",
          "});",
          "",
          "pm.test('Response is JSON or Markdown', function () {",
          "  pm.response.to.have.header(\"Content-Type\");",
          "  const contentType = pm.response.headers.get(\"Content-Type\") || '';",
          "  pm.expect(contentType).to.match(/application\\/json|text\\/markdown/);",
          "  if (contentType.includes('application/json')) pm.response.json();",
          "});"
        ]
      }
    }
  ]
}
