{"uid":"cap_UiXz6qr2aapoCuX9nws6A","slug":"scrapemole-email-security-audit-60dccafb","name":"ScrapeMole Email Security Audit","description":"Pay-per-call domain intelligence for agents: live DNS records (DoH), WHOIS/RDAP registration data (registrar, dates, status, nameservers; no personal data), bulk domain availability (10 names per call) an email security audit (SPF, DKIM, DMARC, MTA-STS, BIMI) with a grade, a live SSL/TLS certificate check and subdomains from Certificate Transparency logs (crt.sh). USDC via x402; failed calls are never charged.\n\nPayments: x402 v2, scheme \"exact\", USDC on Base (eip155:8453). The payment is verified before the work and settled only when the response is 200. Terms: https://domains.scrapemole.workers.dev/terms","url":"https://domains.scrapemole.workers.dev/v1/email-security?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","examples":["github.com"],"description":"Domain that sends/receives email, e.g. example.com."}},"additionalProperties":false}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"mx":[{"host":"aspmx.l.google.com","preference":1}],"spf":{"policy":"softfail","record":"v=spf1 ip4:192.30.252.0/22 include:_netblocks.google.com … ~all","allQualifier":"~","multipleRecords":false,"dnsLookupsTopLevel":8},"bimi":null,"dkim":{"selectorsFound":["google"],"selectorsChecked":["google","selector1"]},"dmarc":{"pct":100,"policy":"reject","record":"v=DMARC1; p=reject; pct=100; rua=mailto:dmarc@github.com","alignmentSpf":"r","alignmentDkim":"r","forensicReports":[],"aggregateReports":["mailto:dmarc@github.com"]},"grade":"A","score":7,"domain":"github.com","issues":[],"mtaSts":null,"tlsRpt":null,"maxScore":8,"provider":"Google Workspace"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_s6up3lMpu75VrA3SLlKsV","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits a domain's email security configuration including SPF, DKIM, DMARC, MTA-STS, BIMI, and MX records, returning a letter grade and scored report","exampleAgentPrompt":"Can you run a full email security audit on github.com and tell me if their SPF, DKIM, and DMARC are properly configured, along with the overall grade?","exampleUseCases":[{"title":"Pre-send deliverability check","prompt":"Before I start this email campaign, check the email security setup for acme.com — I need to know if their SPF is valid, DMARC is enforced, and what grade they get overall."},{"title":"Spoofing vulnerability assessment","prompt":"Is contoso.com vulnerable to email spoofing? Check their DMARC and SPF policies and tell me if they have a reject or quarantine policy in place."},{"title":"Email setup audit for own domain","prompt":"Audit the email security configuration for mystartup.io — I want to see our SPF record, whether DKIM is set up, our DMARC policy, and if there are any issues we need to fix."}],"resultDescription":"Returns a JSON object with MX records, SPF policy details (record text, all-qualifier, lookup count), DKIM selectors found and checked, DMARC policy (alignment, pct, reporting addresses), BIMI and MTA-STS status, a letter grade (e.g. 'A'), a numeric score out of max score, detected email provider (e.g. 'Google Workspace'), and a list of any issues found.","failureModes":["Invalid or non-existent domain returns an error","Domain with no DNS records may return empty fields","Payment failure (insufficient USDC balance) results in 402 and no charge","Rate limiting or upstream DNS resolution failures may cause timeouts","Malformed domain parameter returns validation error"],"whenToPreferThis":"Choose this endpoint when you need a comprehensive, graded email security audit for any domain in a single API call. It combines SPF, DKIM, DMARC, BIMI, MTA-STS, and MX checks in one request with a clear letter grade and issue list — ideal for agents performing security due diligence, deliverability checks, or domain health monitoring. Pay-per-call at $0.003 USDC means no subscription needed for occasional lookups.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T12:39:33.602Z","isFirstParty":false,"canonicalSlug":"scrapemole-email-security-audit-60dccafb"}