Return a read-only CAA certificate-authority policy report for a domain. Accepts a domain plus optional CAA records and issuer details. Includes issue, issuewild, iodef, ACME parameters, policy gaps and record-generation guidance.
Admintoolkit source site24 tools on this site
What this tool does
Return a read-only CAA certificate-authority policy report for a domain. Accepts a domain plus optional CAA records and issuer details. Includes issue, issuewild, iodef, ACME parameters, policy gaps and record-generation guidance. Use it on Admintoolkit with an agent. It runs in the browser on the website and needs no package install.
How to install
Open the admintoolkit.io website and ask your browser agent to use admintoolkit_check_caa_records
Run with an agent
Use the admintoolkit_check_caa_records tool on admintoolkit.io with ca: <string>, domain: <string>, iodef: <string>, issuemail: <string>, methods: <string>, records: <string>. Return the structured result and cite the source page.
Input contract
castringCA domain for generated CAA records, e.g. 'letsencrypt.org'.
domainstringCAA domain to check, e.g. 'example.com' (no scheme).
iodefstringCAA iodef report destination, e.g. 'mailto:security@example.com'.
issuemailstringCAA issuemail issuer-domain value from RFC 9495, optionally followed by issuer parameters, e.g. 'letsencrypt.org; validationmethods=dns-01'.
methodsstringCAA validationmethods value, e.g. 'dns-01'.
recordsstringCAA records to inspect, one per line, e.g. '0 issue letsencrypt.org'.
Verify the live listing at the source before a production call. Fields marked as a starter contract may differ from what the site expects.