{"uid":"cap_bU2S3VEZbz8uDiFV5BEcj","slug":"email-authentication-audit-spf-dmarc-dkim-mx-via-x402-b63cdd43","name":"Email Authentication Audit (SPF/DMARC/DKIM/MX) via x402","description":"Pay-per-call API for AI agents with no signup or API key. Email validation, SPF/DMARC audits, DNS lookup, site contacts, URL to Markdown, IBAN and Swedish personnummer/orgnr validation. From $0.001 in USDC on Base via x402.","url":"https://agentkit-x402.zenith-ops.workers.dev/v1/email-auth?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Domain name without scheme."}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"mx":[{"host":"mail.example.com","priority":10}],"spf":{"found":true,"record":"v=spf1 include:_spf.example.net -all","mechanisms":["include:_spf.example.net","-all"],"all_qualifier":"-","dns_lookups_top_level":1},"bimi":{"found":false,"record":null},"dkim":{"found":[{"found":true,"revoked":false,"key_type":"rsa","selector":"google","approx_rsa_bits":2048}],"probed_selectors":["google","selector1","selector2","default","k1","s1","mail","dkim"]},"dmarc":{"pct":100,"rua":"mailto:dmarc@example.com","ruf":null,"found":true,"policy":"none","record":"v=DMARC1; p=none; rua=mailto:dmarc@example.com","spf_alignment":"relaxed","dkim_alignment":"relaxed","subdomain_policy":null},"score":75,"domain":"example.com","mta_sts":{"found":false,"record":null},"tls_rpt":{"found":false,"record":null},"findings":[{"fix":"After reviewing reports, move to p=quarantine and then p=reject.","code":"dmarc_monitoring_only","message":"DMARC policy is p=none (monitoring only); spoofed mail is not blocked.","severity":"medium"}]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_YxDxBaO5WETK60XDN3DO5","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs a comprehensive email authentication audit for a domain, checking MX, SPF, DMARC, DKIM, BIMI, MTA-STS, and TLS-RPT records, and returns a security score with actionable findings.","exampleAgentPrompt":"Can you audit the email authentication setup for stripe.com — I want to see whether their SPF, DKIM, DMARC, and MX records are properly configured and get an overall security score?","exampleUseCases":[{"title":"Pre-send deliverability check for cold outreach","prompt":"Before I start my email campaign from acmecorp.com, can you check whether our SPF, DKIM, and DMARC records are all set up correctly and tell me if there's anything that could cause our emails to land in spam?"},{"title":"Security posture review for acquired domain","prompt":"We just acquired widgets-inc.com — can you pull a full email authentication audit on it so I know if their DMARC policy is actually enforcing, what DKIM selectors they're using, and whether there are any spoofing risks?"},{"title":"Compliance check for DMARC enforcement upgrade","prompt":"I'm trying to move our domain example.org from DMARC p=none to p=reject — can you check the current DMARC, SPF, and DKIM configuration and flag any issues I need to fix before I tighten the policy?"}],"resultDescription":"Returns a JSON object containing: MX host list with priorities, full SPF record with mechanisms parsed, DMARC record with policy, alignment settings, and RUA/RUF addresses, probed DKIM selectors with key type and bit-length, BIMI/MTA-STS/TLS-RPT presence, an overall integer security score (0–100), and a findings array with severity levels (e.g. medium) and specific fix recommendations.","failureModes":["Domain not found or non-existent — empty or null records returned for all checks","DNS timeout — individual record checks may return null/not-found","Invalid domain format (e.g. includes scheme like https://) — query param validation error","Payment failure via x402 — 402 response if USDC balance is insufficient","Rate limits on underlying DNS resolvers causing partial results"],"whenToPreferThis":"Choose this endpoint when you need a comprehensive, multi-record email authentication audit in a single call — covering MX, SPF, DKIM, DMARC, BIMI, MTA-STS, and TLS-RPT together with a scored summary. It requires no API key or signup and charges $0.01 USDC per call via x402 on Base, making it ideal for AI agents with on-chain wallets that need ad-hoc domain audits without managing credentials. Prefer alternatives if you only need a simple DNS lookup (no scoring needed) or if you require email address-level validation rather than domain-level authentication checks.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-28T12:35:34.866Z","isFirstParty":false,"canonicalSlug":"email-authentication-audit-spf-dmarc-dkim-mx-via-x402-b63cdd43"}