# Sift DMARC Inspect

> Sift DMARC Inspect is a paid API for AI agents from sift.srv1996466.hstgr.cloud, paid per call via x402, $0.005/call, status unknown (last checked 2026-10-19).

Fetches and parses a DMARC aggregate report XML file from a URL, returning structured alignment and delivery statistics per record

## Facts

- Endpoint: GET https://sift.srv1996466.hstgr.cloud/v1/dmarc/inspect?utm_source=zero.xyz
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-19
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sift-dmarc-inspect-1c969a94
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_IuUh8ojFUKaGy67J_VPnq

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sift-dmarc-inspect-1c969a94
```

Example prompt: Can you inspect this DMARC aggregate report for me and tell me how many messages passed alignment and which senders sent them? The report is at https://example.com/reports/google-dmarc-2024-05.xml

## When to prefer this

Use this endpoint when you have a direct URL to a DMARC aggregate report (XML, possibly compressed) and need structured alignment data without manually downloading and parsing the XML. Ideal for agents automating email security audits, monitoring DMARC compliance across senders, or triaging deliverability issues from rua report inboxes.

## Known failure modes

- Invalid or inaccessible report URL returns an error
- URL points to a non-DMARC or non-XML file causing parse failure
- Report file is compressed (e.g. gzip/zip) and not handled transparently
- Network timeout if the report host is slow
- HTTP 402 payment required if x402 payment header is missing or insufficient

## How this service works

DMARC report summary: reporter, date range, policy, record count. Lists what a DMARC aggregate report contains (reporter, report id, dates, published policy, records, messages) without evaluating it.

## Output

A JSON object containing a list of report records with per-record message counts and org names, plus a total report count. Each record includes fields like records, messages, and org_name, enabling analysis of which senders passed or failed DMARC alignment.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET",
      "HEAD",
      "DELETE"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "url"
     ],
     "properties": {
      "url": {
       "type": "string",
       "description": "Report URL"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "reports": [
   {
    "records": 3,
    "messages": 12,
    "org_name": "google.com"
   }
  ],
  "report_count": 1
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sift-dmarc-inspect-1c969a94/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from sift.srv1996466.hstgr.cloud](https://www.zero.xyz/host/sift.srv1996466.hstgr.cloud/llms.txt)