{"uid":"cap_RVLH77hD_YDDA4wTfc19F","slug":"commsharbor-email-security-audit-37ba0e6a","name":"CommsHarbor Email Security Audit","description":"CommsHarbor: email security audit of a domain (SPF, DKIM, DMARC, MX and a score), paid per call","url":"https://commsharbor.com/api/x402/email-check?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","queryParams"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Public domain to check, such as example.com. A subdomain or URL is reduced to its registrable domain."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"mx":{"type":"array","items":{"type":"string"},"description":"MX records as `priority host`."},"spf":{"type":"object","properties":{"ending":{"type":"string"},"record":{"type":"string"},"multiple":{"type":"boolean"}},"description":"`{record, ending, multiple}`: the first SPF record, its `all` ending and whether there are two."},"bimi":{"type":"boolean","description":"A BIMI record exists at the default selector."},"dkim":{"type":"object","properties":{"found":{"type":"array"},"checked":{"type":"array","items":{"type":"string"}}},"description":"`{found, checked}`: selectors with a published key and the selectors looked up."},"dmarc":{"type":"object","properties":{"policy":{"type":"string"},"record":{"type":"string"},"reports":{"type":"boolean"}},"description":"`{record, policy, reports}`: policy reject, quarantine, none or null; reports when `rua` is set."},"score":{"type":"number","description":"0 to 100: DMARC up to 40, SPF 20, DKIM 20, MX 10, MTA-STS 5 and BIMI 5."},"domain":{"type":"string","description":"Registrable domain that was checked."},"rating":{"type":"string","description":"protected (90+), good (70+), at_risk (40+) or exposed."},"unread":{"type":"array","description":"Parts whose DNS query failed (spf, dmarc, dkim, mx, mta_sts, bimi). They have no findings and no points."},"mta_sts":{"type":"boolean","description":"An MTA-STS policy record exists."},"cobranca":{"type":"object","properties":{"via":{"type":"string","description":"`x402`, `credito` or the marketplace that already charged the call."},"repetido":{"type":"boolean","description":"`true` when the credit had already paid this request (the same `Idempotency-Key`): nothing was charged again."},"preco_usd":{"type":"string","description":"The price of the call in US dollars, such as `0.01`."}},"description":"How this call was paid."},"findings":{"type":"array","items":{"type":"object","properties":{"code":{"type":"string"},"severity":{"type":"string"}}},"description":"`{code, severity}`, most severe first. Codes: dmarc_missing, dmarc_none, spf_plus_all, spf_missing, spf_multiple, dmarc_quarantine, dkim_not_found, spf_neutral, spf_softfail, dmarc_no_reports, mx_missing, mta_sts_missing, bimi_missing."},"badge_url":{"type":"string","description":"SVG badge with the score."},"share_url":{"type":"string","description":"Public page with this result."},"checked_at":{"type":"string","description":"ISO time of the DNS reading."},"incomplete":{"type":"boolean","description":"At least one DNS query failed."}},"description":"The email security audit of one domain, paid per call: the fields of `GET /api/email-check`."}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_WoMDtIodjwD6tCA1U3a0G","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs a comprehensive email security audit of a domain, checking SPF, DKIM, DMARC, and MX records and returning an overall security score","exampleAgentPrompt":"Can you run a full email security audit on stripe.com — I want to see its SPF, DKIM, DMARC, and MX records along with an overall security score?","exampleUseCases":[{"title":"Pre-campaign deliverability check","prompt":"Before I send out my email newsletter, can you audit the email security setup for morningbloom.co — I want to make sure SPF, DKIM, and DMARC are all properly configured so my emails don't land in spam?"},{"title":"Vendor security due diligence","prompt":"I'm vetting a new vendor and I want to know how seriously they take email security — can you check the email authentication records for acmecorp.io and give me a score?"},{"title":"Diagnosing email spoofing risk","prompt":"Someone told me our domain techstartup.ai might be vulnerable to email spoofing — can you audit the SPF, DKIM, and DMARC records and tell me where we stand?"}],"resultDescription":"Returns the results of SPF, DKIM, DMARC, and MX record checks for the requested domain along with an aggregated email security score, indicating which email authentication standards are properly configured, missing, or misconfigured.","failureModes":["Invalid or non-existent domain returns an error or empty results","Subdomain input is automatically reduced to the registrable domain, which may differ from user expectation","DNS lookup failures for domains with propagation issues may return incomplete results","Payment not processed results in HTTP 402 rejection before the check runs"],"whenToPreferThis":"Choose this endpoint when you need a quick, pay-per-call email security posture check covering all four major email authentication standards (SPF, DKIM, DMARC, MX) with an aggregated score, especially in agentic workflows where you want to avoid subscription overhead and just pay $0.01 per domain checked.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-30T06:32:20.256Z","isFirstParty":false,"canonicalSlug":"commsharbor-email-security-audit-37ba0e6a"}