{"uid":"cap_aAgrcyCE3-f5j5ZwzEz3R","slug":"email-auth-check-spf-dmarc-dkim-mx-8cbe1d7c","name":"Email Auth Check (SPF, DMARC, DKIM, MX)","description":"Pay-per-call data and tools for AI agents, $0.002-0.01 per call in USDC via x402 (Base, Polygon or Solana), no account or API key; MAX tiers ($0.05-0.25) run deeper jobs. Agent toolkit: web search, search + read top pages, any page as clean markdown with a prompt-injection check, which-x402-API-to-call recommender, seller check. Data: Google Maps places with contacts, YouTube video data and transcripts, job listings (Indeed, LinkedIn, 13 boards), Google Ads Transparency, TikTok comments, Pinterest, Airbnb, Redfin, AliExpress, app stores, live sports, website and SEO checks, Shopify store tech stacks, and onchain token / address risk checks.","url":"https://agent-data.centorprat.workers.dev/tools/email-auth-dmarc-spf-check?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"domains":{"type":"array","items":{"type":"string"},"maxItems":3,"description":"Domains to check, e.g. [\"example.com\", \"your-brand.org\"]. One posture report per domain."},"onlyProblems":{"type":"boolean","description":"On: return only domains that aren't fully protected (ideal for scheduled alerting)."},"dkimSelectors":{"type":"array","items":{"type":"string"},"maxItems":5,"description":"Which DKIM selectors to check at <selector>._domainkey.<domain>. Defaults to a set of common selectors (google, default, selector1/2, s1/2, k1, ...). Add your own if you use a custom selector."}}},"responseSchema":{"type":"json","example":{"items":[{"spf":{"issues":[],"record":"v=spf1 ip4:198.2.180.60/32 ip4:13.111.2.227/32 include:spf1.stripe.com include:greenhouse-outbound-mail.stripe.com include:_spf.qualtrics.com ~all","present":true,"lookupCount":3,"allQualifier":"~all"},"dkim":{"present":true,"selectorsFound":["google","s1","s2","mandrill"],"selectorsChecked":15},"note":"Read-only DNS lookups over DoH; never contacts the domain's mail servers. DKIM is checked against common selectors only - absence here isn't proof DKIM is unused. Signals for review, not a verdict.","dmarc":{"pct":"100","rua":"mailto:dmarc-reports@stripe.com","issues":[],"policy":"reject","record":"v=DMARC1; p=reject; pct=100; fo=1; rua=mailto:dmarc-reports@stripe.com; ruf=mailto:dmarc-forensics@stripe.com;","present":true,"subdomainPolicy":null},"domain":"stripe.com","signal":"protected","findings":[],"checkedAt":"2026-10-23T11:31:48+00:00","mxPresent":true}]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_VBkOHJgswQYHd1NWa5Lia","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks SPF, DMARC, DKIM, and MX DNS records for given domains via DNS-over-HTTPS and returns an anti-spoofing posture signal per domain.","exampleAgentPrompt":"Can you check the email authentication posture for hubspot.com and mailchimp.com — specifically their SPF, DMARC, DKIM, and MX records — and tell me if either domain is spoofable?","exampleUseCases":[{"title":"Pre-send domain security audit","prompt":"Before we launch our email campaign, can you check SPF, DMARC, DKIM, and MX for our sending domain acmecorp.com and tell me if it's fully protected or if there are any gaps we need to fix?"},{"title":"Competitor phishing risk assessment","prompt":"I want to know if any of these competitor domains — rivalco.com, bigbrand.io, trustedshop.org — could be impersonated via email spoofing. Check their email auth posture and flag any that are spoofable."},{"title":"Scheduled brand protection monitoring","prompt":"Run a check on our brand domains acmecorp.com and acme-store.com and only show me the ones that aren't fully protected — I want to catch any regressions in our email auth config."}],"resultDescription":"Returns one posture report per domain containing: the posture signal (protected / mostly-protected / monitoring-only / spoofable / no-email-configured), detailed findings for each of SPF, DMARC, DKIM (per checked selector), and MX records, including parsed record values and any identified weaknesses or misconfigurations.","failureModes":["DNS lookup failure for a record type — returns partial results without charging for the failed lookup","Invalid or non-existent domain — returns no-email-configured or error finding","Exceeding maxItems (3 domains per call) — input rejected by schema validation","DKIM selector not found — selector-specific lookup returns not-found finding; add custom selectors if using non-standard ones","Transient DNS-over-HTTPS connectivity issue — call fails or returns incomplete results"],"whenToPreferThis":"Choose this endpoint when you need a fast, keyless, read-only audit of email authentication records (SPF, DMARC, DKIM, MX) without managing DNS resolver credentials. Ideal for agents that need to assess anti-spoofing posture programmatically, run scheduled domain health checks, or flag spoofable domains in a brand protection workflow. Prefer over manual DNS lookups when you want a structured posture signal rather than raw record strings.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-29T00:34:09.214Z","isFirstParty":false,"canonicalSlug":"email-auth-check-spf-dmarc-dkim-mx-8cbe1d7c"}