# Email Security Posture Checker (SPF/DKIM/DMARC)

> Email Security Posture Checker (SPF/DKIM/DMARC) is a paid API for AI agents from api.x402node.dev, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-13).

Checks a domain's email authentication configuration by detecting and parsing SPF, DKIM, and DMARC records to identify missing or misconfigured policies.

## Facts

- Endpoint: GET https://api.x402node.dev/domain/email-security
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/api-x402node-dev-e512c2f3
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_N3dGrZcSwfEccLp81RKtB

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability api-x402node-dev-e512c2f3
```

Example prompt: Check the email security posture of example.com — I want to know if SPF, DKIM, and DMARC records are present and properly configured, and flag anything that could expose it to phishing or deliverability problems.

## When to prefer this

Use this endpoint when you need a quick, structured assessment of a domain's email authentication health — specifically SPF, DKIM, and DMARC — without doing raw DNS lookups yourself. Ideal for security audits, email deliverability pipelines, phishing risk assessments, or onboarding checks where you need parsed policy details rather than raw DNS strings.

## Known failure modes

- Domain does not exist or has no DNS records — returns not-found or empty result
- Invalid domain format passed via query parameter — may return validation error
- Domain has no email authentication records — returns presence flags as false
- Temporary DNS lookup failure — may return timeout or transient error
- Payment not fulfilled — returns 402 Payment Required

## How this service works

Email security posture: SPF/DKIM/DMARC presence and parsed policy. Detects missing or misconfigured email authentication. Use ?domain=example.com. Built for email deliverability and phishing prevention. Accepts payment on Base or Solana — either network works.

## Output

Returns the presence and parsed content of SPF, DKIM, and DMARC DNS records for the given domain, along with an assessment of whether each is correctly configured or missing, and any detected misconfigurations that could enable phishing or cause email delivery failures.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {
      "domain": {
       "type": "string",
       "description": "Domain name (optional)"
      }
     }
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/api-x402node-dev-e512c2f3/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.x402node.dev](https://www.zero.xyz/host/api.x402node.dev/llms.txt)