# Foundry DNS & Email Posture Evidence

> Foundry DNS & Email Posture Evidence is a paid API for AI agents from foundry-par007-machine-revenue-mainnet.inference-chip-index.workers.dev, paid per call via x402, $0.005/call, status unknown (last checked 2026-09-16).

Fetches and returns DNS records, SPF, DKIM, and DMARC configuration evidence for a given domain, with source provenance and observability metadata.

## Facts

- Endpoint: POST https://foundry-par007-machine-revenue-mainnet.inference-chip-index.workers.dev/v2/domain/dns-email-posture
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-16
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/foundry-dns-email-posture-evidence-402bdd49
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_HW35DEi7rFuejsYtYxXVK

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability foundry-dns-email-posture-evidence-402bdd49 -d '<json body>'
```

Example prompt: Can you pull the full DNS email posture for example.com — including MX, SPF, DMARC, and DKIM using the selector 'google'? I need the raw records and source attribution.

## When to prefer this

Choose this endpoint when you need structured, sourced evidence of a domain's email authentication posture (SPF, DKIM, DMARC, MX) with explicit provenance and attribution — particularly for compliance documentation, vendor risk assessments, or email deliverability diagnostics. It is pay-per-request with no subscription, making it suitable for on-demand spot checks. Prefer this over generic DNS tools when you need machine-readable JSON with source URLs and observedAt timestamps for audit trails.

## Known failure modes

- Invalid domain format returns a validation error
- Domain does not exist or has no records — fields return ABSENT or NO_DATA status
- DKIM selectors not provided — dkimDiscovery returns UNKNOWN_NO_SELECTOR
- Upstream DNS resolver (Cloudflare) unreachable — may return timeout or partial data
- DNSSEC status may be UNKNOWN if resolver cannot verify
- Payment not settled — x402 payment required error before data is returned

## How this service works

Pay-per-request evidence and data tools: CSV validation and reconciliation, DNS/email configuration evidence, and bounded official weather, earthquake, vehicle, company and study records. Exact USDC prices, explicit JSON contracts and source provenance. No mailbox, ownership, medical or safety guarantees.

## Output

A JSON object containing: a dns array with MX record details (name, type, rcode, DNSSEC status, source URL, observation time, attribution); an spf object with parsed tags, status (PRESENT/ABSENT), raw records and limitations; a dkim array per tested selector; a dmarc object with tags, status, raw records and limitations; the queried domain name; an observedAt timestamp; overall limitations; and a dkimDiscovery status string.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "pattern": "^[a-zA-Z0-9.-]+$",
   "maxLength": 253,
   "minLength": 3
  },
  "dkim_selectors": {
   "type": "array",
   "items": {
    "type": "string",
    "pattern": "^[a-zA-Z0-9_-]{1,63}$"
   },
   "default": [],
   "maxItems": 2
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "route": "dns-email-posture",
  "result": {
   "dns": [
    {
     "name": "example.com",
     "type": "MX",
     "rcode": 0,
     "dnssec": "UNKNOWN",
     "source": "https://cloudflare-dns.com/dns-query?name=example.com&type=MX",
     "status": "NO_DATA",
     "records": [],
     "observedAt": "2026-09-06T00:00:00Z",
     "attribution": "Cloudflare 1.1.1.1 public resolver; authoritative DNS records; no endorsement"
    }
   ],
   "spf": {
    "tags": {},
    "status": "ABSENT",
    "records": [],
    "limitations": [
     "Synthetic example only."
    ]
   },
   "dkim": [],
   "dmarc": {
    "tags": {},
    "status": "ABSENT",
    "records": [],
    "limitations": [
     "Synthetic example only."
    ]
   },
   "domain": "example.com",
   "observedAt": "2026-09-06T00:00:00Z",
   "limitations": [
    "Synthetic example only."
   ],
   "dkimDiscovery": "UNKNOWN_NO_SELECTOR"
  },
  "observed_at": "2026-09-06T00:00:00Z"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/foundry-dns-email-posture-evidence-402bdd49/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from foundry-par007-machine-revenue-mainnet.inference-chip-index.workers.dev](https://www.zero.xyz/host/foundry-par007-machine-revenue-mainnet.inference-chip-index.workers.dev/llms.txt)