ドメイン番人

Runs a comprehensive health check on a public domain: SPF / DKIM / DMARC for the headline score, plus optional details on email-auth adjacent records (MX, BIMI, MTA-STS, TLS-RPT, DKIM key length), DNS infrastructure (NS, DNSSEC, CAA, AAAA, SOA, TXT), web security (HTTPS, certificate, HSTS, HTTP/2-3, CT log), domain registration (RDAP expiry, registrar lock, DS chain), and brand protection (typosquatting, TLD parity). Returns a structured report with per-category scores, individual diagnostic items, and a `critical_issues` cross-cut summary. No authentication required.

{'type': 'object', 'required': ['domain'], 'properties': {'domain': {'type': 'string', 'description': 'Domain to diagnose, e.g. `example.co.jp`. A URL, an email address, a trailing dot, a port, or an internationalised name are all accepted and resolved to the registrable host — `https://日本語.jp/path`, `info@example.co.jp` and `xn--wgv71a119e.jp` reach the same diagnosis. Names with no public suffix (`localhost`, an IP literal) are rejected.'}}}