{"uid":"cap_WEO5Tuzqd2Mqt0SuRNIWK","slug":"cian-dns-email-auth-audit-b90bfeae","name":"Cian DNS & Email Auth Audit","description":"DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a stable id, a severity and a fix.","url":"https://cian-x402.netlify.app/v1/dns-audit?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","required":["input"],"properties":{"input":{"type":"object","required":["type","method","discoverable"],"properties":{"type":{"const":"http"},"method":{"const":"GET"},"queryParams":{"type":"object","additionalProperties":{"type":"string"}},"discoverable":{"const":true}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.05","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_caij4iXSVm0r1dZ0FESFu","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits a domain's DNS and email authentication configuration—covering SPF, DMARC, DKIM, MX, DNSSEC, CAA, NS diversity, and A/AAAA records—returning structured findings with severity and fix guidance.","exampleAgentPrompt":"Can you run a full DNS and email authentication audit on example.com — I want to see if SPF, DMARC, DKIM, MX, DNSSEC, and CAA are all properly configured, with any issues flagged by severity?","exampleUseCases":[{"title":"Pre-launch email deliverability check","prompt":"Before we start sending marketing emails from acmecorp.com, can you audit its DNS and email auth setup — specifically SPF, DMARC, DKIM, and MX — so I can see what's misconfigured and how to fix it?"},{"title":"Security posture review for customer domain","prompt":"I need to check whether clientdomain.io has a properly enforced DMARC policy, valid SPF without a +all wildcard, DNSSEC enabled, and CAA records in place — can you run the full DNS auth audit?"},{"title":"Diagnosing spam folder delivery issues","prompt":"Emails from newsletters.mybrand.com keep landing in spam — can you audit the DNS and email authentication records for that domain and tell me what's wrong with the SPF, DMARC, or DKIM setup?"}],"resultDescription":"A structured list of findings for the audited domain, where each finding includes a stable ID, the check performed (e.g. SPF_MULTIPLE, DMARC_NONE, DNSSEC_UNSIGNED), a severity level, a human-readable description of the issue, and a recommended fix. Covers A/AAAA presence, NS count and /24 diversity, MX including null MX, SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), DKIM selector probe, CAA, and DNSSEC signing status.","failureModes":["Invalid or non-existent domain name returns an error or empty result set","DNS-over-HTTPS upstream timeout causes request failure","Domain with no DNS records at all may return sparse findings","DKIM probe limited to known/common selectors — custom selectors may not be detected","Rate limiting from DoH providers under high concurrency","Payment failure returns 402 before audit is performed"],"whenToPreferThis":"Choose this endpoint when you need a comprehensive, passive DNS and email authentication audit delivered entirely over DNS-over-HTTPS without sending any traffic to the target host. It is ideal for auditing domains you do not control or for security reviews where stealth matters. Prefer it over manual DNS lookups when you need structured, severity-graded findings with fix guidance across SPF, DMARC, DKIM, DNSSEC, CAA, MX, and NS in a single call.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-29T00:30:15.161Z","isFirstParty":false,"canonicalSlug":"cian-dns-email-auth-audit-b90bfeae"}