# apiacre.com Email Authentication Posture Check

> apiacre.com Email Authentication Posture Check is a paid API for AI agents from apiacre.com, paid per call via x402, $0.005/call, status unknown (last checked 2026-09-14).

Checks a public domain's email authentication and anti-spoofing configuration by inspecting MX, SPF, DMARC, DKIM, MTA-STS, TLS-RPT, and BIMI DNS records.

## Facts

- Endpoint: POST https://apiacre.com/v1/web/email-auth
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/apiacre-com-email-authentication-posture-check-489b208c
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_q-Z36aWX8hdaW6uj_58gk

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability apiacre-com-email-authentication-posture-check-489b208c -d '<json body>'
```

Example prompt: Can you check the email authentication posture of example.com — I want to see its SPF, DMARC, DKIM (selector 'google'), MTA-STS, TLS-RPT, and BIMI DNS records to find out if it's protected against spoofing?

## When to prefer this

Choose this endpoint when you need a comprehensive, multi-record email authentication audit in a single call covering SPF, DMARC, DKIM, MTA-STS, TLS-RPT, and BIMI together. Prefer it over manual dig/nslookup lookups or single-record checkers when you need structured, normalized JSON output suitable for automated agent workflows or compliance reporting.

## Known failure modes

- Domain does not exist or has no DNS records — empty or error result per record type
- Invalid DKIM selector provided — DKIM check returns not-found or NXDOMAIN
- Domain is private or behind split-horizon DNS — records may be inaccessible
- Rate limiting or DNS resolver timeouts — transient failure with error response
- Malformed domain input — validation error returned

## How this service works

Check a public domain's email authentication and anti-spoofing posture using MX, SPF, DMARC, caller-selected DKIM, MTA-STS, TLS-RPT, and BIMI DNS evidence.

## Output

Returns structured DNS evidence for the queried domain covering MX, SPF, DMARC (including policy enforcement level), caller-specified DKIM selector record, MTA-STS policy, TLS-RPT reporting address, and BIMI record — giving a complete picture of the domain's email authentication and anti-spoofing posture.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string"
  },
  "dkim_selectors": {
   "type": "array",
   "items": {
    "type": "string"
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "data": {
   "spf": {
    "records": [
     "v=spf1 include:_spf.protonmail.ch ~all"
    ],
    "configured": true,
    "recordCount": 1,
    "allQualifier": "softfail",
    "multipleRecords": false
   },
   "dkim": {
    "reason": null,
    "checked": true,
    "selectors": [
     {
      "revoked": false,
      "selector": "protonmail",
      "configured": true,
      "recordCount": 1,
      "multipleRecords": false
     }
    ],
    "checkedSelectors": [
     "protonmail"
    ]
   },
   "dmarc": {
    "policy": "quarantine",
    "records": [
     "v=DMARC1; p=quarantine"
    ],
    "configured": true,
    "recordCount": 1,
    "multipleRecords": false
   },
   "domain": "apiacre.com",
   "posture": {
    "basis": "published DNS records only",
    "status": "enforcing"
   },
   "findings": [],
   "checkedAt": "2026-08-12T18:03:16+00:00",
   "provenance": {
    "source": "recursive DNS",
    "queries": [
     "apiacre.com A",
     "apiacre.com AAAA",
     "apiacre.com MX",
     "apiacre.com TXT",
     "_dmarc.apiacre.com TXT",
     "protonmail._domainkey.apiacre.com TXT",
     "_mta-sts.apiacre.com TXT",
     "_smtp._tls.apiacre.com TXT",
     "default._bimi.apiacre.com TXT"
    ],
    "queryCount": 9
   },
   "limitations": [
    "DNS answers are a time-specific recursive-resolver snapshot and may be cached.",
    "DKIM is checked only for selectors explicitly supplied by the caller.",
    "Published records do not prove delivery, domain ownership, sender identity, o..."
   ],
   "mailRouting": {
    "mode": "explicit_mx",
    "nullMx": false,
    "mxRecords": [
     "10 mail.protonmail.ch.",
     "20 mailsec.protonmail.ch."
    ],
    "addressFallbackObserved": true
   },
   "collectionMs": 19,
   "optionalPolicies": {
    "bimi": {
     "records": [],
     "configured": false,
     "recordCount": 0
    },
    "mtaSts": {
     "records": [],
     "configured": false,
     "recordCount": 0
    },
    "tlsReporting": {
     "records": [],
     "configured": false,
     "recordCount": 0
    }
   }
  },
  "meta": {
   "cached": false,
   "sources": [],
   "warnings": [],
   "duration_ms": 42,
   "next_actions": []
  },
  "service": "web.email-auth",
  "version": "1",
  "request_id": "018f1f54-7f38-7ba2-8dc3-5f90272d9f1a"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/apiacre-com-email-authentication-posture-check-489b208c/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from apiacre.com](https://www.zero.xyz/host/apiacre.com/llms.txt)