{"uid":"cap_KL8O_5QnoKykran2HPf4U","slug":"lookproof-dmarc-lookup-6e9cbfab","name":"Lookproof DMARC Lookup","description":"Check SPF, DMARC, DKIM, MTA-STS, DNSSEC and more, with results that explain what was found and why. Free browser checks and a pay-per-request API with x402.","url":"https://api.lookproof.dev/v1/mail/dmarc?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","title":"DomainInput","required":["domain"],"properties":{"domain":{"type":"string","title":"Domain","examples":["example.com"],"maxLength":1024,"minLength":1}},"additionalProperties":false}},"additionalProperties":false}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_9lbPT3H4flwe9kpoYxfyy","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up and explains the DMARC record of a domain (or its organisational domain), returning policy, subdomain policy, alignment modes, reporting addresses, and coded findings about spoofing protection.","exampleAgentPrompt":"Can you check whether acme.com has a proper DMARC record — I need to know what policy it enforces, whether subdomains are covered, and where reports are being sent?","exampleUseCases":[{"title":"Verify domain spoofing protection","prompt":"Is payments.stripe.com protected against email spoofing? Look up its DMARC record and tell me what policy is in place and whether it would actually block spoofed messages."},{"title":"Diagnose missing DMARC reports","prompt":"We set up DMARC reporting for mybusiness.com a week ago but we're not getting any reports — can you check the DMARC record and tell me if the reporting addresses (rua/ruf) are configured correctly?"},{"title":"Audit third-party domain security","prompt":"I'm about to integrate with a vendor at vendorco.io — can you pull their DMARC record and tell me if they're enforcing a strict policy or if their domain is at risk of being spoofed?"}],"resultDescription":"Returns the resolved DMARC record (raw and parsed), the effective organisational domain used for lookup, the policy value (none/quarantine/reject), subdomain policy, alignment modes for DKIM and SPF (strict/relaxed), aggregate and forensic reporting addresses (rua/ruf), percentage tag (pct), and a set of coded findings flagging issues such as missing records, weak policies, or misconfigured reporting.","failureModes":["Domain has no DMARC record — returns finding indicating absence of protection","DMARC record is syntactically malformed — parse errors returned in findings","Domain does not exist (NXDOMAIN) — error or empty result returned","Organisational domain also lacks DMARC — fallback noted in findings","Rate limiting or resolver errors — HTTP 4xx/5xx returned"],"whenToPreferThis":"Use this endpoint when you need a structured, annotated explanation of a domain's DMARC posture rather than just a raw DNS TXT lookup. It is ideal when you need coded findings (not just raw text), want subdomain and organisational domain logic handled automatically, or need to diagnose why DMARC reports are not arriving. Prefer this over generic DNS lookup endpoints when the user needs interpretation of DMARC semantics.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-31T18:40:50.294Z","isFirstParty":false,"canonicalSlug":"lookproof-dmarc-lookup-6e9cbfab"}