{"uid":"cap_Y3tT6Mf4OH8mB-FwXfC7U","slug":"x402-deployer-x402-deployer-workers-dev-6d6f650c","name":"DMARC + SPF + DKIM Email Authentication Checker","description":"DMARC + SPF + DKIM email-authentication checker / mail-auth posture audit / spoofing-resistance grader / phishing-readiness scanner / domain email security score / dmarcian-style report / pre-send deliverability check. Reads the domain's DNS TXT records, parses each protocol's record (SPF mechanisms + qualifiers, DMARC tags p/sp/rua/ruf/pct/aspf/adkim, DKIM selectors with key bits and algorithm), and returns a 0-100 score, A-F grade, and per-finding human-readable reasons explaining the score.","url":"https://x402-deployer.x402-deployer.workers.dev/dmarc-check","method":"POST","headers":{},"bodySchema":null,"responseSchema":null,"example":{"request":{"domain":"example.com"},"response":{"spf":{"record":"v=spf1 -all","version":"v=spf1","mechanisms":["v=spf1","-all"],"has_includes":false,"has_redirect":false,"all_qualifier":"-all"},"dkim":{"selectors_found":[{"record":"v=DKIM1; p=","selector":"default"},{"record":"v=DKIM1; p=","selector":"google"},{"record":"v=DKIM1; p=","selector":"k1"},{"record":"v=DKIM1; p=","selector":"k2"},{"record":"v=DKIM1; p=","selector":"selector1"},{"record":"v=DKIM1; p=","selector":"selector2"},{"record":"v=DKIM1; p=","selector":"s1"},{"record":"v=DKIM1; p=","selector":"s2"},{"record":"v=DKIM1; p=","selector":"mail"},{"record":"v=DKIM1; p=","selector":"mta"},{"record":"v=DKIM1; p=","selector":"smtp"},{"record":"v=DKIM1; p=","selector":"key1"},{"record":"v=DKIM1; p=","selector":"key2"},{"record":"v=DKIM1; p=","selector":"fm1"},{"record":"v=DKIM1; p=","selector":"fm2"}],"selectors_checked":["default","google","k1","k2","selector1","selector2","s1","s2","mail","mta","smtp","key1","key2","fm1","fm2"]},"dmarc":{"pct":100,"rua":null,"ruf":null,"aspf":"s","adkim":"s","policy":"reject","record":"v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s","version":"DMARC1","subdomain_policy":"reject"},"grade":"A","score":100,"domain":"example.com","source":"Cloudflare DNS-over-HTTPS (1.1.1.1)","reasons":["SPF -all hard fail (strict)","DMARC p=reject (strict)","DKIM record found (15 selectors)"]}},"exampleRequest":{"domain":"example.com"},"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_BDMrUxCMNmd20S-H6mWcu","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Audits a domain's email authentication posture by reading its DNS TXT records for SPF, DMARC, and DKIM, then returns a 0-100 score, A-F grade, and human-readable findings explaining spoofing resistance and deliverability readiness.","exampleAgentPrompt":"Can you do a full DMARC, SPF, and DKIM audit on acme.com and tell me the overall score, grade, and any issues with my email authentication setup that could let spoofed emails through?","exampleUseCases":null,"resultDescription":"Returns a 0-100 numeric score, an A-F letter grade, parsed SPF mechanisms and qualifiers, all DMARC tag values (p, sp, rua, ruf, pct, aspf, adkim), DKIM selector details including key size in bits and algorithm, plus a list of human-readable findings explaining exactly what is configured correctly or incorrectly and why points were deducted.","failureModes":["Domain has no SPF or DMARC record — returned with zero score and findings noting missing records","Invalid or malformed SPF/DMARC syntax — parser returns error details for the offending record","Domain does not exist or DNS lookup fails — returns DNS resolution error","DKIM selectors not discoverable — DKIM portion of report may be incomplete or skipped","Rate limiting or upstream DNS timeouts — request may fail with a 429 or 5xx response"],"whenToPreferThis":"Use this endpoint when you need a structured, scored audit of a domain's complete email authentication posture (SPF + DMARC + DKIM together) with per-finding explanations and a normalized grade — rather than a raw DNS lookup tool that just returns record text without parsing or scoring.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-14T00:57:05.913Z","isFirstParty":false}