{"uid":"cap_GUtmelrd5_dz3CiqfpxIx","slug":"orioncmd-dns-security-email-record-lookup-97ce758d","name":"OrionCmd DNS Security & Email Record Lookup","description":"Passive-first monitoring for uptime, SSL/TLS, DNS, email security, internet exposure, WordPress core advisories, and breach exposure — with reachability probes, optional authorized scans, plain-English alerts, and client-ready reports.","url":"https://api.orioncmd.com/v1/dns?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Hostname or URL, e.g. example.com"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"dnssec":"signed and validated (AD bit set)","domain":"example.com","records":{"MX":["0 ."],"NS":["a.iana-servers.net."],"SPF":["v=spf1 -all"],"DMARC":["v=DMARC1;p=reject"]},"findings":[]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_WnnRgH-imMzU1egQjKfu9","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves and analyzes DNS records (NS, MX, SPF, DMARC) and DNSSEC status for a given domain, surfacing email security posture and DNS misconfigurations.","exampleAgentPrompt":"Can you check the DNS records for stripe.com — specifically whether they have SPF, DMARC, and DNSSEC set up correctly?","exampleUseCases":[{"title":"Email deliverability pre-send audit","prompt":"Before we send our next campaign from acmecorp.com, check whether our SPF and DMARC records are properly configured so our emails don't end up in spam."},{"title":"Vendor security due diligence","prompt":"We're onboarding a new vendor at payments-partner.io — can you pull their DNS records and tell me if they have DNSSEC and DMARC in place?"},{"title":"Client website security report","prompt":"Run a DNS check on myclientsite.com and tell me if their nameservers, email security records, and DNSSEC are all properly set up — I need to include it in their monthly security report."}],"resultDescription":"Returns a JSON object with the domain's DNS records (NS, MX, SPF, DMARC and others), DNSSEC validation status (e.g. 'signed and validated'), and a findings array listing any detected misconfigurations or security gaps. Example output includes structured record values and an empty findings array when everything is healthy.","failureModes":["Domain does not exist or is not resolvable — likely returns empty records or error","Invalid hostname format in query parameter — returns validation error","DNS lookup timeout for slow or unresponsive nameservers","Domain has no SPF/DMARC records — findings array may flag missing configurations","DNSSEC not configured — reported as unsigned in the dnssec field"],"whenToPreferThis":"Use this endpoint when you need a passive, read-only DNS and email security record check for any domain — particularly to audit SPF, DMARC, MX, NS, and DNSSEC configuration without triggering intrusive scans. Ideal for vendor assessments, client reporting, pre-send email deliverability checks, or automated security monitoring pipelines. Prefer this over generic DNS tools when you want findings surfaced in plain English alongside raw records.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-11T12:41:11.788Z","isFirstParty":false,"canonicalSlug":"orioncmd-dns-security-email-record-lookup-97ce758d"}