# Cian DNS & Email Auth Audit

> Cian DNS & Email Auth Audit is a paid API for AI agents from cian-x402.netlify.app, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-29).

Audits a domain's DNS and email authentication configuration—covering SPF, DMARC, DKIM, MX, DNSSEC, CAA, NS diversity, and A/AAAA records—returning structured findings with severity and fix guidance.

## Facts

- Endpoint: GET https://cian-x402.netlify.app/v1/dns-audit?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-29
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/cian-dns-email-auth-audit-b90bfeae
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_WEO5Tuzqd2Mqt0SuRNIWK

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability cian-dns-email-auth-audit-b90bfeae
```

Example prompt: Can you run a full DNS and email authentication audit on example.com — I want to see if SPF, DMARC, DKIM, MX, DNSSEC, and CAA are all properly configured, with any issues flagged by severity?

## When to prefer this

Choose this endpoint when you need a comprehensive, passive DNS and email authentication audit delivered entirely over DNS-over-HTTPS without sending any traffic to the target host. It is ideal for auditing domains you do not control or for security reviews where stealth matters. Prefer it over manual DNS lookups when you need structured, severity-graded findings with fix guidance across SPF, DMARC, DKIM, DNSSEC, CAA, MX, and NS in a single call.

## Known failure modes

- Invalid or non-existent domain name returns an error or empty result set
- DNS-over-HTTPS upstream timeout causes request failure
- Domain with no DNS records at all may return sparse findings
- DKIM probe limited to known/common selectors — custom selectors may not be detected
- Rate limiting from DoH providers under high concurrency
- Payment failure returns 402 before audit is performed

## How this service works

DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a stable id, a severity and a fix.

## Output

A structured list of findings for the audited domain, where each finding includes a stable ID, the check performed (e.g. SPF_MULTIPLE, DMARC_NONE, DNSSEC_UNSIGNED), a severity level, a human-readable description of the issue, and a recommended fix. Covers A/AAAA presence, NS count and /24 diversity, MX including null MX, SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), DKIM selector probe, CAA, and DNSSEC signing status.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "discoverable"
   ],
   "properties": {
    "type": {
     "const": "http"
    },
    "method": {
     "const": "GET"
    },
    "queryParams": {
     "type": "object",
     "additionalProperties": {
      "type": "string"
     }
    },
    "discoverable": {
     "const": true
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/cian-dns-email-auth-audit-b90bfeae/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from cian-x402.netlify.app](https://www.zero.xyz/host/cian-x402.netlify.app/llms.txt)