{"uid":"cap_x2HzxIh5ZP1Zha1BqhXEb","slug":"lookproof-domain-email-dns-security-health-check-2165fbad","name":"Lookproof Domain Email & DNS Security Health Check","description":"Check SPF, DMARC, DKIM, MTA-STS, DNSSEC and more, with results that explain what was found and why. Free browser checks and a pay-per-request API with x402.","url":"https://api.lookproof.dev/v1/domain/health?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","title":"DomainInput","required":["domain"],"properties":{"domain":{"type":"string","title":"Domain","examples":["example.com"],"maxLength":1024,"minLength":1}},"additionalProperties":false}},"additionalProperties":false}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.08","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.08/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.08","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.08","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_r7xceW-quaXCKvRM7kTE5","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.08","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns a comprehensive single-call audit of a domain's email and DNS security posture, covering MX, SPF, DMARC, DKIM, MTA-STS, TLS-RPT, DNSSEC, reverse DNS, BIMI, and CAA records with coded findings per section.","exampleAgentPrompt":"Can you run a full email and DNS security audit on example.com — I want to see MX, SPF, DMARC, DKIM, MTA-STS, DNSSEC, reverse DNS, BIMI, and CAA all in one go?","exampleUseCases":[{"title":"Pre-send deliverability audit","prompt":"Before we send our marketing campaign, can you audit outbound.acmecorp.com for email security — check SPF, DMARC, DKIM, MTA-STS and the rest so I can fix any issues first?"},{"title":"Client domain health report","prompt":"I need a full email and DNS security health report for clientdomain.io — MX, SPF, DMARC, DKIM, MTA-STS, DNSSEC, BIMI, CAA, everything — so I can show them what needs fixing."},{"title":"Security posture monitoring check","prompt":"Run a complete mail and DNS security check on newvendor.com — I want to see whether they have DMARC, DNSSEC, and MTA-STS properly configured before we start exchanging sensitive emails with them."}],"resultDescription":"A structured report divided into labelled sections — one per check (MX, SPF, DMARC, DKIM common selectors, MTA-STS, TLS-RPT, DNSSEC, reverse DNS of mail servers, BIMI, CAA) — each containing coded findings (pass/warn/fail style indicators) and the raw DNS evidence. No aggregate score is computed; each section stands independently.","failureModes":["Invalid or non-existent domain returns an error or empty sections","DNS resolution timeouts may cause partial results for some sections","Domains with no mail configuration (no MX) will return empty findings for email-dependent sections","Rate limiting or payment failure returns 402 or 429 response","Malformed domain input (e.g. with protocol prefix) may be rejected"],"whenToPreferThis":"Use this endpoint when you need a complete email and DNS security picture for a domain in a single API call. It is more efficient and cheaper than calling individual checks (SPF-only, DMARC-only, DKIM-only, etc.) separately. Prefer it for building domain health dashboards, onboarding audits, vendor assessments, or deliverability pre-flight checks where all nine signal types are relevant. If you only need one specific check (e.g. BIMI alone), a dedicated sibling endpoint may be more targeted.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-31T18:37:52.659Z","isFirstParty":false,"canonicalSlug":"lookproof-domain-email-dns-security-health-check-2165fbad"}