{"uid":"cap_sEDAG1yvF3U7X5Vgcely-","slug":"email-authentication-check-spf-dmarc-c53cbc6b","name":"Email Authentication Check (SPF & DMARC)","description":"Grade a domain's email authentication: SPF and DMARC records parsed, policy strength, and spoofing exposure.","url":"https://domain-dns.x402tookit.com/email-auth-check?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","description":"Domain that sends mail, e.g. example.com"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"spf":{"type":["null","object"],"properties":{"policy":{"type":["null","string"]},"record":{"type":["null","string"]},"present":{"type":["boolean","null"]},"usesPtr":{"type":["boolean","null"]},"includes":{"type":["array","null"],"items":{"type":"string"}},"multiple":{"type":["boolean","null"]},"allQualifier":{"type":["null","string"]},"directLookups":{"type":["null","number"]}}},"asOf":{"type":["null","string"]},"dmarc":{"type":["null","object"],"properties":{"pct":{"type":["null","number"]},"rua":{"type":["null","string"]},"ruf":{},"aspf":{"type":["null","string"]},"adkim":{"type":["null","string"]},"policy":{"type":["null","string"]},"record":{"type":["null","string"]},"present":{"type":["boolean","null"]},"multiple":{"type":["boolean","null"]},"subdomainPolicy":{}}},"domain":{"type":["null","string"]},"issues":{"type":["array","null"]},"source":{"type":["null","string"]},"reasons":{"type":["array","null"],"items":{"type":"string"}},"summary":{"type":["null","string"]},"verdict":{"type":["null","string"]},"degraded":{"type":["boolean","null"]},"sourceUrl":{"type":["null","string"]},"disclaimer":{"type":["null","string"]},"notChecked":{"type":["array","null"],"items":{"type":"string"}}}}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.03","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.03/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.03","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_AO7koaM0TgcTBffK4ht0w","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.03","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Parses and grades a domain's SPF and DMARC DNS records, assessing policy strength, configuration issues, and spoofing exposure.","exampleAgentPrompt":"Can you check the email authentication setup for stripe.com — I want to know if their SPF and DMARC records are configured properly and whether the domain could be spoofed?","exampleUseCases":[{"title":"Pre-send domain security audit","prompt":"Before we start our email campaign from newsletter.acme.com, can you check whether SPF and DMARC are properly set up and tell me if there are any spoofing risks or misconfigurations I should fix?"},{"title":"Vendor phishing risk assessment","prompt":"I'm worried about phishing from impersonated vendor emails — can you check the email authentication records for payments.bigvendor.com and tell me if their domain could be spoofed?"},{"title":"Competitor email security benchmarking","prompt":"Can you pull the SPF and DMARC grades for competitor.com and let me know how strict their email authentication policy is compared to a best-practice setup?"}],"resultDescription":"Returns a structured object with the raw SPF record (including all-qualifier, includes, and direct lookups), SPF policy strength, DMARC record (including policy, subdomain policy, pct, alignment modes, and reporting URIs), whether multiple conflicting records exist, a list of issues found, a human-readable summary, an overall spoofing verdict, and a timestamp of when the check was performed.","failureModes":["Domain does not exist — returns null records with an issue indicating the domain is unresolvable","No SPF record found — SPF present field is false, record is null","No DMARC record found — DMARC present field is false","Multiple SPF or DMARC records detected — flagged as a misconfiguration issue","DNS lookup timeout or resolver failure — degraded flag set to true","Invalid domain format supplied — input validation error"],"whenToPreferThis":"Choose this endpoint when you specifically need to assess a domain's email authentication posture — SPF and DMARC records, policy strength, and spoofing risk — rather than general DNS lookups. It is more focused than a full DNS record dump and provides interpreted verdicts and issue lists rather than raw records only. Prefer it over a generic TXT record lookup when you need structured analysis, policy grading, and actionable issue detection for email security audits.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-26T04:23:25.073Z","isFirstParty":false,"canonicalSlug":"email-authentication-check-spf-dmarc-c53cbc6b"}