{"uid":"cap_ZTFX6J3miR6YI5z5D-aUI","slug":"sitecheck-web-intel-dmarc-spf-dkim-email-authentication-dns-lookup-9e2b6426","name":"SiteCheck Web Intel — DMARC / SPF / DKIM Email Authentication DNS Lookup","description":"Email authentication DNS records for a domain: DMARC policy (p, sp, pct, rua), SPF record and its all-mechanism, and DKIM public keys for a selector you give or for 8 common selectors (revoked keys and CNAME-delegated keys are reported). Reads the published DNS records only; it does not check alignment against a real message.","url":"https://api.webintel-api.workers.dev/api/security/dmarc-spf-dkim?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Domain name such as google.com (required)"},"selector":{"type":"string","description":"DKIM selector such as google, selector1 or k1 (optional; common selectors are tried when empty)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Ao5hJ0RG-c9_N-e8mN1ks","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Retrieves and parses a domain's email authentication DNS records: DMARC policy, SPF mechanisms, and DKIM public keys (auto-probing 8 common selectors or a user-specified one)","exampleAgentPrompt":"Can you check the DMARC, SPF, and DKIM email authentication DNS records for stripe.com? Also try the 'stripe1' DKIM selector specifically.","exampleUseCases":[{"title":"Audit new vendor domain email security","prompt":"I'm onboarding a new vendor and want to make sure they have proper email authentication set up — can you pull the DMARC policy, SPF record, and DKIM keys for acmecorp.com?"},{"title":"Debug email deliverability for own domain","prompt":"Our emails keep landing in spam — can you check what DMARC and SPF records are published for mailchimp.com and whether there's a valid DKIM key for the 'k1' selector?"},{"title":"Security audit for phishing risk assessment","prompt":"I need to assess phishing risk for paypal.com — look up their DMARC policy (especially whether it's reject or quarantine) and check what DKIM selectors are active."}],"resultDescription":"Returns the parsed DMARC TXT record with its policy fields (p, sp, pct, rua), the raw SPF TXT record and its 'all' mechanism (+/-/~/?all), and DKIM public key entries for the specified selector or up to 8 probed common selectors — including flags for revoked keys and CNAME-delegated keys.","failureModes":["Domain does not exist or has no DNS records — empty or error response","Domain has no DMARC record published — DMARC section absent or null","Domain has no SPF record — SPF section absent","Specified DKIM selector has no TXT record — key not found for that selector","All 8 common selectors probed return no DKIM records — empty DKIM section","Transient DNS resolution failures from upstream AdGuard resolver","Invalid domain format in query parameter — likely a 400 or error body"],"whenToPreferThis":"Choose this endpoint when you need a fast, consolidated read of all three email authentication DNS standards (DMARC, SPF, DKIM) for a domain in a single call, especially when you want DKIM auto-probing across common selectors without specifying one. Prefer it over generic DNS lookup endpoints when you need parsed, semantically labeled DMARC fields (policy, subpolicy, pct, rua) rather than raw TXT strings.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-24T12:45:29.704Z","isFirstParty":false,"canonicalSlug":"sitecheck-web-intel-dmarc-spf-dkim-email-authentication-dns-lookup-9e2b6426"}