# NetIntel Email Authentication Check

> NetIntel Email Authentication Check is a paid API for AI agents from netintel.dev, paid per call via x402, $0.002/call, status unknown (last checked 2026-09-14).

Analyzes SPF, DKIM, and DMARC records for a domain and returns a scored email authentication report with issues and grades

## Facts

- Endpoint: POST https://netintel.dev/email-auth
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/netintel-email-authentication-check-c4cfb26a
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_eOYcr7zjP5HuGekA7mN8Z

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability netintel-email-authentication-check-c4cfb26a -d '<json body>'
```

Example prompt: Can you check the email authentication setup for example.com — I want to see the SPF, DKIM, and DMARC records and get an overall grade so I know if the domain is properly protected against spoofing?

## When to prefer this

Use this endpoint when you need a comprehensive, scored audit of all three email authentication layers (SPF, DKIM, DMARC) in a single call with actionable issue detection and grading. Prefer this over manual DNS lookups when you want structured output with issues flagged and a composite score rather than raw record text.

## Known failure modes

- Domain does not exist or has no DNS records — returns not-found indicators for each check
- Invalid domain format provided — may return a validation error
- Timeout on DNS lookups for complex SPF chains — may return partial results or error
- DKIM selectors not found — only common selectors like 'default' and 'google' are checked, custom selectors may be missed
- Rate limit or payment failure — 402 response if micropayment is not properly handled

## How this service works

Email deliverability & domain security check — validates SPF, DKIM (multi-selector), and DMARC, detects spoofing and misconfigurations, and returns an A–F email security grade with transparent deductions. Anti-spam / anti-phishing readiness for any sending domain.

## Output

Returns a JSON object with SPF record details (mechanisms, all-qualifier, DNS lookup count, issues), DKIM records per selector (key type, key length, issues), DMARC policy (policy, subdomain policy, reporting addresses, percentage, issues), an overall letter grade (e.g. A), a numeric score out of 100, the domain queried, and a list of any deductions.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method",
    "bodyType",
    "body"
   ],
   "properties": {
    "body": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "description": "Domain to validate email authentication for (e.g. example.com)"
      },
      "dkim_selectors": {
       "type": "array",
       "items": {
        "type": "string"
       },
       "description": "Optional list of DKIM selectors to probe (defaults to common selectors)"
      }
     }
    },
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "POST"
     ],
     "type": "string"
    },
    "bodyType": {
     "enum": [
      "json",
      "form-data",
      "text"
     ],
     "type": "string"
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object",
     "properties": {
      "spf": {
       "type": "object"
      },
      "dkim": {
       "type": "object"
      },
      "dmarc": {
       "type": "object"
      },
      "grade": {
       "type": "string"
      },
      "score": {
       "type": "number"
      },
      "domain": {
       "type": "string"
      },
      "resolves": {
       "type": "boolean",
       "description": "Whether the domain has mail infrastructure (MX/A) — false adds a -100 no-mail-infrastructure deduction"
      },
      "deductions": {
       "type": "array"
      }
     }
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "spf": {
   "found": true,
   "issues": [],
   "record": "v=spf1 include:_spf.google.com -all",
   "mechanisms": [
    "include:_spf.google.com"
   ],
   "all_qualifier": "-all",
   "dns_lookup_count": 1
  },
  "dkim": {
   "found": true,
   "issues": [],
   "records": [
    {
     "issues": [],
     "record": "v=DKIM1; k=rsa; p=MIIBIjAN...",
     "key_type": "rsa",
     "selector": "google",
     "key_length_bits": 2048
    }
   ],
   "selectors_checked": [
    "default",
    "google"
   ]
  },
  "dmarc": {
   "pct": 100,
   "rua": [
    "mailto:dmarc@example.com"
   ],
   "ruf": [
    "mailto:forensic@example.com"
   ],
   "found": true,
   "issues": [],
   "policy": "reject",
   "record": "v=DMARC1; p=reject; rua=mailto:dmarc@example.com; ruf=mailto:forensic@example.com",
   "subdomain_policy": null
  },
  "grade": "A",
  "score": 100,
  "domain": "example.com",
  "resolves": true,
  "deductions": []
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/netintel-email-authentication-check-c4cfb26a/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from netintel.dev](https://www.zero.xyz/host/netintel.dev/llms.txt)