# Domain Email Auth Audit

> Domain Email Auth Audit is a paid API for AI agents from gogeta2-u35175.vm.elestio.app, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-29).

Audits a domain's full email authentication stack (MX, SPF, DMARC, DKIM, MTA-STS, TLS-RPT, BIMI) and returns an A-F grade with actionable fixes.

## Facts

- Endpoint: GET https://gogeta2-u35175.vm.elestio.app/agents/v1/email/domain-health?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-29
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/domain-email-auth-audit-88f23715
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_yGhu7vH8rs0D6IRBZHd_w

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability domain-email-auth-audit-88f23715
```

Example prompt: Can you run a full email authentication audit on acme.com — I want to know if SPF, DMARC, DKIM, MTA-STS, and BIMI are all set up correctly, and get a letter grade with specific things to fix?

## When to prefer this

Choose this endpoint when you need a comprehensive, single-call email authentication audit covering the full stack (MX, SPF, DMARC, DKIM, MTA-STS, TLS-RPT, BIMI) with a graded summary and fix recommendations. Prefer it over generic DNS lookup tools when you want an interpreted security posture rather than raw DNS records, and when you need DKIM discovery across multiple selectors automatically.

## Known failure modes

- Domain does not exist or has no DNS records — returns error or empty results
- Domain is a bare IP or malformed input — validation error
- DKIM selectors may not be discoverable if non-standard or unpublished — partial DKIM results
- Rate limiting or DNS timeout on upstream resolvers — delayed or incomplete response
- Private/internal domains not resolvable from public DNS — no results returned

## How this service works

Audit a domain's email authentication: MX, SPF, DMARC, DKIM (20 selectors), MTA-STS, TLS-RPT, BIMI and domain age. Returns an A-F grade with concrete fixes.

## Output

Returns an A-F overall email authentication grade for the domain, plus individual findings for MX, SPF, DMARC, DKIM (up to 20 selectors checked), MTA-STS, TLS-RPT, and BIMI. Also includes domain age and concrete, prioritized remediation steps for each failed or misconfigured check.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "description": "Domain, e.g. example.com (URL accepted)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/domain-email-auth-audit-88f23715/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from gogeta2-u35175.vm.elestio.app](https://www.zero.xyz/host/gogeta2-u35175.vm.elestio.app/llms.txt)