<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Performing Email Migration Security

## TLS Verification

```bash
openssl s_client -connect mail.example.com:587 -starttls smtp
nmap -p 143,993,587,465 mail.example.com --script ssl-enum-ciphers
```

## DNS Record Backup

```bash
dig MX example.com +short
dig TXT example.com +short | grep "v=spf1"
dig TXT _dmarc.example.com +short
dig TXT selector1._domainkey.example.com +short
```

## Agent Script

```bash
node agent.js check-tls --host mail.example.com --port 587
node agent.js pre-audit --domain example.com
node agent.js cutover-plan --domain example.com
```
