# AgentKit x402 - Email Authentication Audit

> AgentKit x402 - Email Authentication Audit is a paid API for AI agents from agentkit-x402.erikssonanton2001.workers.dev, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-17).

Audits a domain's email authentication configuration including SPF, DKIM, DMARC, MX, BIMI, MTA-STS, and TLS-RPT records, returning a scored report with actionable findings.

## Facts

- Endpoint: GET https://agentkit-x402.erikssonanton2001.workers.dev/v1/email-auth?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-17
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agentkit-x402-email-authentication-audit-5ceaa706
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_QDyrxs3XobrSIP2tcE9iU

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agentkit-x402-email-authentication-audit-5ceaa706
```

Example prompt: Can you run a full email authentication audit on example.com — check the SPF, DKIM, DMARC, MX records, and give me a security score with any issues I should fix?

## When to prefer this

Choose this endpoint when you need a comprehensive, multi-record email authentication audit in a single call — covering SPF, DKIM (with selector probing), DMARC, MX, BIMI, MTA-STS, and TLS-RPT — with a scored summary and actionable findings. It is ideal for agents that need to assess email deliverability or anti-spoofing posture without assembling individual DNS lookups. The pay-per-call x402 model makes it practical for on-demand use without subscription overhead.

## Known failure modes

- Domain does not exist or has no DNS records — returns empty or null fields
- Invalid domain format (scheme included) — input must be bare domain without https://
- DKIM probing limited to a fixed set of common selectors; custom selectors will be missed
- Rate limiting or DNS timeout may cause partial results
- Payment failure via x402 returns 402 before any DNS lookup is performed

## How this service works

Email checks, DNS and email-authentication audits, website contact extraction, SEO audits, URL to Markdown and Swedish validators, paid per call in USDC with x402.

## Output

A JSON object containing: parsed MX records with priorities, SPF record text and mechanisms, DKIM probe results across common selectors with key type and bit size, DMARC policy details including alignment settings and reporting addresses, BIMI/MTA-STS/TLS-RPT presence flags, an overall integer security score (0–100), and an array of findings each with a severity level, human-readable message, and a specific recommended fix.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "description": "Domain name without scheme."
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "mx": [
   {
    "host": "mail.example.com",
    "priority": 10
   }
  ],
  "spf": {
   "found": true,
   "record": "v=spf1 include:_spf.example.net -all",
   "mechanisms": [
    "include:_spf.example.net",
    "-all"
   ],
   "all_qualifier": "-",
   "dns_lookups_top_level": 1
  },
  "bimi": {
   "found": false,
   "record": null
  },
  "dkim": {
   "found": [
    {
     "found": true,
     "revoked": false,
     "key_type": "rsa",
     "selector": "google",
     "approx_rsa_bits": 2048
    }
   ],
   "probed_selectors": [
    "google",
    "selector1",
    "selector2",
    "default",
    "k1",
    "s1",
    "mail",
    "dkim"
   ]
  },
  "dmarc": {
   "pct": 100,
   "rua": "mailto:dmarc@example.com",
   "ruf": null,
   "found": true,
   "policy": "none",
   "record": "v=DMARC1; p=none; rua=mailto:dmarc@example.com",
   "spf_alignment": "relaxed",
   "dkim_alignment": "relaxed",
   "subdomain_policy": null
  },
  "score": 75,
  "domain": "example.com",
  "mta_sts": {
   "found": false,
   "record": null
  },
  "tls_rpt": {
   "found": false,
   "record": null
  },
  "findings": [
   {
    "fix": "After reviewing reports, move to p=quarantine and then p=reject.",
    "code": "dmarc_monitoring_only",
    "message": "DMARC policy is p=none (monitoring only); spoofed mail is not blocked.",
    "severity": "medium"
   }
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agentkit-x402-email-authentication-audit-5ceaa706/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agentkit-x402.erikssonanton2001.workers.dev](https://www.zero.xyz/host/agentkit-x402.erikssonanton2001.workers.dev/llms.txt)