{"uid":"cap_QDyrxs3XobrSIP2tcE9iU","slug":"agentkit-x402-email-authentication-audit-5ceaa706","name":"AgentKit x402 - Email Authentication Audit","description":"Email checks, DNS and email-authentication audits, website contact extraction, SEO audits, URL to Markdown and Swedish validators, paid per call in USDC with x402.","url":"https://agentkit-x402.erikssonanton2001.workers.dev/v1/email-auth?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Domain name without scheme."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"mx":[{"host":"mail.example.com","priority":10}],"spf":{"found":true,"record":"v=spf1 include:_spf.example.net -all","mechanisms":["include:_spf.example.net","-all"],"all_qualifier":"-","dns_lookups_top_level":1},"bimi":{"found":false,"record":null},"dkim":{"found":[{"found":true,"revoked":false,"key_type":"rsa","selector":"google","approx_rsa_bits":2048}],"probed_selectors":["google","selector1","selector2","default","k1","s1","mail","dkim"]},"dmarc":{"pct":100,"rua":"mailto:dmarc@example.com","ruf":null,"found":true,"policy":"none","record":"v=DMARC1; p=none; rua=mailto:dmarc@example.com","spf_alignment":"relaxed","dkim_alignment":"relaxed","subdomain_policy":null},"score":75,"domain":"example.com","mta_sts":{"found":false,"record":null},"tls_rpt":{"found":false,"record":null},"findings":[{"fix":"After reviewing reports, move to p=quarantine and then p=reject.","code":"dmarc_monitoring_only","message":"DMARC policy is p=none (monitoring only); spoofed mail is not blocked.","severity":"medium"}]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_QA9Wny8BDsJ3xXsPshbqV","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits a domain's email authentication configuration including SPF, DKIM, DMARC, MX, BIMI, MTA-STS, and TLS-RPT records, returning a scored report with actionable findings.","exampleAgentPrompt":"Can you run a full email authentication audit on example.com — check the SPF, DKIM, DMARC, MX records, and give me a security score with any issues I should fix?","exampleUseCases":[{"title":"Pre-send deliverability check","prompt":"Before we start our email campaign, can you audit the email authentication setup for ourcompany.com — specifically check SPF, DKIM, DMARC, and MX records and tell me if anything will hurt deliverability?"},{"title":"Security posture review for client domain","prompt":"I'm doing a security review for a client whose domain is acmecorp.io — can you check their email authentication records including DMARC policy, SPF, and DKIM, and give me a prioritized list of issues to fix?"},{"title":"Detect spoofing vulnerability on competitor domain","prompt":"Can you check whether newsletter.bigbrand.com has a DMARC reject policy in place, or if it's still on monitoring-only mode that leaves it open to spoofing?"}],"resultDescription":"A JSON object containing: parsed MX records with priorities, SPF record text and mechanisms, DKIM probe results across common selectors with key type and bit size, DMARC policy details including alignment settings and reporting addresses, BIMI/MTA-STS/TLS-RPT presence flags, an overall integer security score (0–100), and an array of findings each with a severity level, human-readable message, and a specific recommended fix.","failureModes":["Domain does not exist or has no DNS records — returns empty or null fields","Invalid domain format (scheme included) — input must be bare domain without https://","DKIM probing limited to a fixed set of common selectors; custom selectors will be missed","Rate limiting or DNS timeout may cause partial results","Payment failure via x402 returns 402 before any DNS lookup is performed"],"whenToPreferThis":"Choose this endpoint when you need a comprehensive, multi-record email authentication audit in a single call — covering SPF, DKIM (with selector probing), DMARC, MX, BIMI, MTA-STS, and TLS-RPT — with a scored summary and actionable findings. It is ideal for agents that need to assess email deliverability or anti-spoofing posture without assembling individual DNS lookups. The pay-per-call x402 model makes it practical for on-demand use without subscription overhead.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-17T12:38:25.869Z","isFirstParty":false,"canonicalSlug":"agentkit-x402-email-authentication-audit-5ceaa706"}