# agent402.tools DMARC Policy Checker

> agent402.tools DMARC Policy Checker is a paid API for AI agents from agent402.tools, paid per call via x402, $0.001/call, status unknown (last checked 2026-09-14).

Fetches and validates a domain's DMARC DNS record, surfacing enforcement policy, reporting addresses, alignment modes, and common misconfigurations.

## Facts

- Endpoint: POST https://agent402.tools/api/dmarc-check
- Price: $0.001/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agent402-tools-dmarc-policy-checker-37f56a1c
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_H5iYYWdxBiNedhh2ZCOfN

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agent402-tools-dmarc-policy-checker-37f56a1c -d '<json body>'
```

Example prompt: Check the DMARC policy for stripe.com — tell me if it's set to reject, whether there are reporting addresses configured, and flag any common misconfigurations like p=none with no rua.

## When to prefer this

Use this endpoint when you need to programmatically audit or verify DMARC DNS records for any domain, especially to detect common enforcement gaps (p=none, missing rua, low percent) as part of an email security audit, onboarding check, or compliance workflow.

## Known failure modes

- Domain has no _dmarc TXT record — returns not found or misconfiguration error
- Invalid or unparseable domain input — returns validation error
- DNS lookup timeout or failure — returns a connectivity/timeout error
- Malformed DMARC record syntax — surfaces parse error with details

## How this service works

Fetch and validate a domain's DMARC policy at _dmarc.<domain> (RFC 7489). Surfaces the enforcement policy (none/quarantine/reject), reporting addresses, alignment modes, and common misconfigs (no rua, p=none stuck for months, percent <100). Pair with SPF and DKIM for full Feb-2024 sender-rule compliance.

## Output

Returns the DMARC enforcement policy (none/quarantine/reject), RUA/RUF reporting addresses, DKIM and SPF alignment modes, percent tag value, and flags for common misconfigurations such as missing rua, policy stuck at p=none, or percent below 100.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "Domain name (also accepts email/url/host)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "raw": "v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com",
  "valid": true,
  "domain": "google.com",
  "policy": "reject",
  "percent": 100,
  "warnings": [],
  "alignment": {
   "spf": "r",
   "dkim": "r"
  },
  "hasRecord": true,
  "reportingUris": {
   "failure": [],
   "aggregate": [
    "mailto:mailauth-reports@google.com"
   ]
  },
  "subdomainPolicy": "reject"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agent402-tools-dmarc-policy-checker-37f56a1c/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agent402.tools](https://www.zero.xyz/host/agent402.tools/llms.txt)