{"uid":"cap_JjnYfJeSmNfyrBHFy8IpY","slug":"domainref-domain-and-email-security-check-5db3e89d","name":"DomainRef - Domain and Email Security Check","description":"Use when mail lands in spam, before an email campaign, for vendor due diligence or to confirm a Microsoft 365 tenant: graded SPF, DKIM, DMARC, MX, MTA-STS, DNSSEC, CAA, TLS and domain age, plus BIMI and blocklist info, each with the exact fix record. Non-intrusive. $0.01 per domain.","url":"https://domainref.dev/v1/domain/check?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","queryParams"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","maxLength":253,"minLength":1,"description":"Required. The domain to check, sent as ?domain=example.com."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"score":100,"checks":[{"fix":null,"check":"dmarc","grade":"pass","finding":"DMARC enforces p=reject on 100% of mail."}],"domain":"example.com","letter":"A"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_a9LPycCkrpQo7aRuJDPW6","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns a graded security report for a domain covering SPF, DKIM, DMARC, MX, MTA-STS, DNSSEC, CAA, TLS, domain age, BIMI, and blocklist status with exact fix records.","exampleAgentPrompt":"Can you run a full email security check on acmecorp.com and tell me what grade it gets, whether SPF, DKIM, and DMARC are configured correctly, and what I need to fix?","exampleUseCases":[{"title":"Pre-campaign email deliverability audit","prompt":"Before I send out our newsletter campaign tomorrow, can you check email security on ourdomain.com — I need to know if SPF, DKIM, and DMARC are all set up properly and whether we're on any blocklists?"},{"title":"Vendor due diligence security review","prompt":"I'm about to onboard a new supplier at supplierco.com — can you check their domain's email security grade and flag any missing or misconfigured records like DMARC, DNSSEC, or MTA-STS?"},{"title":"Diagnosing email landing in spam","prompt":"Our emails from techstartup.io keep landing in recipients' spam folders — can you audit our domain's email security and show me exactly what DNS records need to be fixed?"}],"resultDescription":"A JSON object containing a numeric score (0–100), a letter grade (A–F), and an array of individual security checks. Each check includes the check name (e.g. 'dmarc'), a pass/fail/warn grade, a human-readable finding, and an exact fix record where remediation is needed.","failureModes":["Invalid or non-existent domain returns an error or empty result","DNS timeout may cause incomplete check results","Newly registered domains may have incomplete DNS propagation affecting results","Punycode or internationalized domain names may not be handled correctly","Rate limiting or payment failure returns a 402 or 429 error"],"whenToPreferThis":"Choose this endpoint when you need a comprehensive, graded, non-intrusive audit of a domain's email authentication and DNS security posture in a single call. It is especially useful pre-campaign, for spam troubleshooting, vendor due diligence, or Microsoft 365 tenant validation — where you need actionable fix records rather than raw DNS lookups. Prefer it over manual DNS lookup tools or generic WHOIS services when you want a structured score and remediation guidance.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-30T06:32:20.255Z","isFirstParty":false,"canonicalSlug":"domainref-domain-and-email-security-check-5db3e89d"}