# MailLock API
> Programmatic Email Deliverability, RFC 7208 / 7489 Compliance, and Subdomain Takeover Sentry.

MailLock is an ultra-fast, sub-100ms deliverability and external attack surface engine built by AgentLabs. Running on Cloudflare Workers edge and RFC 8427 DNS-over-HTTPS, it audits recursive SPF 10-lookup depth, DMARC 2.0 enforcement, 2048-bit DKIM keys, and dangling CNAME subdomain takeovers.

## Core Endpoints
- [Execute Deliverability Audit](https://maillock.agentlabs.workers.dev/v1/audit?domain=example.com): Full 6-vector audit with 0-100 score and diagnosis.
- [Interactive API Documentation](https://maillock.agentlabs.workers.dev/docs): Interactive Swagger API documentation console.
- [OpenAPI 3.0 Specification](https://maillock.agentlabs.workers.dev/v1/openapi.json): Standard machine-readable OpenAPI schema for agents and developers.
- [Sister Tool: GEOScope AI Search Audit](https://geoscope.agentlabs.workers.dev): Audit website AI bot visibility and /llms.txt optimization.
- [Sister Tool: StackScope Tech Intelligence](https://stackscope.agentlabs.workers.dev): Sub-50ms website tech stack and framework detection.

## Authentication
Tier 1 Diagnostic endpoints (/v1/audit, /v1/audit/spf, /v1/audit/dmarc, /v1/audit/dkim, /v1/audit/dangling-dns) are free.
Tier 2 (Pro Remediation: SPF Flattener, Registrar Fixes) and Tier 3 (Agency Scorecard & Executive Report) require an API key passed via 'X-API-Key' or '?api_key='.
Evaluation key: 'maillock_eval_2026'.