# ScrapeMole Email Security Audit

> ScrapeMole Email Security Audit is a paid API for AI agents from domains.scrapemole.workers.dev, paid per call via x402, $0.003/call, status unknown (last checked 2026-10-12).

Audits a domain's email security configuration including SPF, DKIM, DMARC, MTA-STS, BIMI, and MX records, returning a letter grade and scored report

## Facts

- Endpoint: GET https://domains.scrapemole.workers.dev/v1/email-security?utm_source=zero.xyz
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/scrapemole-email-security-audit-60dccafb
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_UiXz6qr2aapoCuX9nws6A

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability scrapemole-email-security-audit-60dccafb
```

Example prompt: Can you run a full email security audit on github.com and tell me if their SPF, DKIM, and DMARC are properly configured, along with the overall grade?

## When to prefer this

Choose this endpoint when you need a comprehensive, graded email security audit for any domain in a single API call. It combines SPF, DKIM, DMARC, BIMI, MTA-STS, and MX checks in one request with a clear letter grade and issue list — ideal for agents performing security due diligence, deliverability checks, or domain health monitoring. Pay-per-call at $0.003 USDC means no subscription needed for occasional lookups.

## Known failure modes

- Invalid or non-existent domain returns an error
- Domain with no DNS records may return empty fields
- Payment failure (insufficient USDC balance) results in 402 and no charge
- Rate limiting or upstream DNS resolution failures may cause timeouts
- Malformed domain parameter returns validation error

## How this service works

Pay-per-call domain intelligence for agents: live DNS records (DoH), WHOIS/RDAP registration data (registrar, dates, status, nameservers; no personal data), bulk domain availability (10 names per call) an email security audit (SPF, DKIM, DMARC, MTA-STS, BIMI) with a grade, a live SSL/TLS certificate check and subdomains from Certificate Transparency logs (crt.sh). USDC via x402; failed calls are never charged.

Payments: x402 v2, scheme "exact", USDC on Base (eip155:8453). The payment is verified before the work and settled only when the response is 200. Terms: https://domains.scrapemole.workers.dev/terms

## Output

Returns a JSON object with MX records, SPF policy details (record text, all-qualifier, lookup count), DKIM selectors found and checked, DMARC policy (alignment, pct, reporting addresses), BIMI and MTA-STS status, a letter grade (e.g. 'A'), a numeric score out of max score, detected email provider (e.g. 'Google Workspace'), and a list of any issues found.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "examples": [
        "github.com"
       ],
       "description": "Domain that sends/receives email, e.g. example.com."
      }
     },
     "additionalProperties": false
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "mx": [
   {
    "host": "aspmx.l.google.com",
    "preference": 1
   }
  ],
  "spf": {
   "policy": "softfail",
   "record": "v=spf1 ip4:192.30.252.0/22 include:_netblocks.google.com … ~all",
   "allQualifier": "~",
   "multipleRecords": false,
   "dnsLookupsTopLevel": 8
  },
  "bimi": null,
  "dkim": {
   "selectorsFound": [
    "google"
   ],
   "selectorsChecked": [
    "google",
    "selector1"
   ]
  },
  "dmarc": {
   "pct": 100,
   "policy": "reject",
   "record": "v=DMARC1; p=reject; pct=100; rua=mailto:dmarc@github.com",
   "alignmentSpf": "r",
   "alignmentDkim": "r",
   "forensicReports": [],
   "aggregateReports": [
    "mailto:dmarc@github.com"
   ]
  },
  "grade": "A",
  "score": 7,
  "domain": "github.com",
  "issues": [],
  "mtaSts": null,
  "tlsRpt": null,
  "maxScore": 8,
  "provider": "Google Workspace"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/scrapemole-email-security-audit-60dccafb/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from domains.scrapemole.workers.dev](https://www.zero.xyz/host/domains.scrapemole.workers.dev/llms.txt)