{"uid":"cap_xfiMyzn-5DbH8Fg4lQVfW","slug":"sdn-screen-email-authentication-check-x402-44738c12","name":"SDN Screen Email Authentication Check (x402)","description":"Six keyless pay-per-call tools for AI agents: OFAC SDN crypto-wallet screen, live DNS records lookup, SPF/DMARC/DKIM email-auth check, domain age/registrar (RDAP), email address MX verify and URL unshorten/redirect check. $0.01 per call: USDC on Base over x402, or USDC on Tempo over MPP. Also a remote MCP server at /mcp (x402).","url":"https://sdn-screen-x402.sdnscreen.workers.dev/v1/email-auth?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["domain"],"properties":{"domain":{"type":"string","examples":["example.com"],"maxLength":253,"minLength":3,"description":"Email domain, e.g. example.com. A URL or email address is reduced to its domain."},"selector":{"type":"string","pattern":"^[A-Za-z0-9._-]+$","maxLength":63,"description":"Optional DKIM selector to check authoritatively (in addition to the common list: google, selector1, selector2, default, k1, k2, s1, s2, dkim, mail, mandrill, pm, zoho, protonmail, fm1)."}},"additionalProperties":false}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","required":["domain","grade","score","mx","spf","dmarc","dkim","issues","checkedAt"],"properties":{"mx":{"type":"object","required":["records","nullMx"],"properties":{"nullMx":{"type":"boolean","description":"RFC 7505 null MX (domain accepts no mail)"},"records":{"type":"array","items":{"type":"object","required":["priority","host"],"properties":{"host":{"type":"string"},"priority":{"type":"integer"}}}}}},"spf":{"type":"object","required":["present","record","allQualifier","dnsLookups"],"properties":{"record":{"type":["string","null"]},"present":{"type":"boolean"},"dnsLookups":{"type":["integer","null"],"description":"Lookup-causing terms counted recursively; RFC 7208 limit is 10"},"allQualifier":{"enum":["-all","~all","?all","+all",null],"type":["string","null"]}}},"dkim":{"type":"object","required":["selectorsChecked","found"],"properties":{"found":{"type":"array","items":{"type":"object","required":["selector","keyType","revoked"],"properties":{"keyType":{"type":"string"},"revoked":{"type":"boolean"},"selector":{"type":"string"}}}},"selectorsChecked":{"type":"array","items":{"type":"string"}}}},"note":{"type":"string"},"dmarc":{"type":"object","required":["present","record","policy"],"properties":{"pct":{"type":["integer","null"]},"rua":{"type":["string","null"]},"policy":{"type":["string","null"],"description":"p= tag: none, quarantine or reject"},"record":{"type":["string","null"]},"present":{"type":"boolean"},"subdomainPolicy":{"type":["string","null"]}}},"grade":{"enum":["A","B","C","D","F"],"type":"string"},"score":{"type":"integer","maximum":100,"minimum":0},"domain":{"type":"string"},"issues":{"type":"array","items":{"type":"object","required":["severity","code","message"],"properties":{"code":{"type":"string"},"message":{"type":"string"},"severity":{"enum":["high","medium","low"],"type":"string"}}}},"resolver":{"type":"string"},"checkedAt":{"type":"string","format":"date-time"},"fixReport":{"type":["object","null"],"properties":{"url":{"type":"string"},"note":{"type":"string"},"price":{"type":"string"}},"description":"Optional link for the domain owner to a paid ($19) fix-it report; null when no medium/high issues"}}}}}}},"responseSchema":{"type":"json","example":{"mx":{"nullMx":false,"records":[{"host":"smtp.google.com","priority":10}]},"spf":{"record":"v=spf1 include:_spf.google.com ~all","present":true,"dnsLookups":1,"allQualifier":"~all"},"dkim":{"found":[],"selectorsChecked":["google","selector1","selector2","default","k1","k2","s1","s2","dkim","mail","mandrill","pm","zoho","protonmail","fm1"]},"note":"Reads public DNS only; sends no mail. DKIM is checked at the given selector plus common selectors.","dmarc":{"pct":100,"rua":"mailto:mailauth-reports@google.com","policy":"reject","record":"v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com","present":true,"subdomainPolicy":null},"grade":"A","score":97,"domain":"google.com","issues":[{"code":"dkim_not_found","message":"No DKIM key found at the checked selectors (pass selector= if you know it).","severity":"low"}],"resolver":"Cloudflare 1.1.1.1 (DNS over HTTPS)","checkedAt":"2026-10-11T23:55:37.407Z"}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Ja_ODrxUwNGpV1r9ODw0e","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Checks SPF, DMARC, and DKIM email authentication records for a given domain, returning a grade and scored issue report, paid per-call via x402 at $0.01 USDC.","exampleAgentPrompt":"Can you check the email authentication setup for payroll-vendor.com — I want to know if their SPF, DMARC, and DKIM are properly configured and what grade they get?","exampleUseCases":[{"title":"Vendor email security audit","prompt":"Before we start wiring payments to this new supplier, can you check whether their domain invoices-fastpay.com has proper SPF, DMARC, and DKIM set up, and flag any issues?"},{"title":"Phishing risk assessment for counterparty","prompt":"I got an email from someone at partnercorp-global.net — can you look up their email authentication records and tell me if their domain is protected against spoofing?"},{"title":"Pre-send domain health check","prompt":"We're about to launch an email campaign from our new domain brightleaf-marketing.com — can you check our SPF, DMARC, and DKIM configuration and give us a score so we know if anything needs fixing first?"}],"resultDescription":"Returns a JSON object with SPF presence and DNS lookup count and all-qualifier, DKIM found selectors and key types, DMARC policy and presence, an overall letter grade (e.g. 'B'), a numeric score (0-100), the queried domain, and a list of issues each with a code, human-readable message, and severity level.","failureModes":["Missing required 'domain' query parameter returns an error","Non-existent or unreachable domain may return empty or partial DNS results","Payment not received or x402 handshake fails — call is rejected before processing","Malformed domain string may cause DNS lookup failure","Temporary DNS resolution errors may yield incomplete DKIM/SPF data"],"whenToPreferThis":"Choose this endpoint when you need a live, per-call email authentication audit (SPF, DMARC, DKIM) for any domain without requiring API key signup, and you want a scored, graded result with actionable issue codes. It is ideal for AI agents running automated vendor due diligence, phishing-risk checks, or email deliverability audits on-demand. Prefer it over full email security platforms when you need lightweight, pay-as-you-go access with no subscription overhead.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-11T12:37:53.274Z","isFirstParty":false,"canonicalSlug":"sdn-screen-email-authentication-check-x402-44738c12"}