# SiteCheck Web Intel — DMARC / SPF / DKIM Email Authentication DNS Lookup

> SiteCheck Web Intel — DMARC / SPF / DKIM Email Authentication DNS Lookup is a paid API for AI agents from api.webintel-api.workers.dev, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-24).

Retrieves and parses a domain's email authentication DNS records: DMARC policy, SPF mechanisms, and DKIM public keys (auto-probing 8 common selectors or a user-specified one)

## Facts

- Endpoint: GET https://api.webintel-api.workers.dev/api/security/dmarc-spf-dkim?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-24
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sitecheck-web-intel-dmarc-spf-dkim-email-authentication-dns-lookup-9e2b6426
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ZTFX6J3miR6YI5z5D-aUI

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sitecheck-web-intel-dmarc-spf-dkim-email-authentication-dns-lookup-9e2b6426
```

Example prompt: Can you check the DMARC, SPF, and DKIM email authentication DNS records for stripe.com? Also try the 'stripe1' DKIM selector specifically.

## When to prefer this

Choose this endpoint when you need a fast, consolidated read of all three email authentication DNS standards (DMARC, SPF, DKIM) for a domain in a single call, especially when you want DKIM auto-probing across common selectors without specifying one. Prefer it over generic DNS lookup endpoints when you need parsed, semantically labeled DMARC fields (policy, subpolicy, pct, rua) rather than raw TXT strings.

## Known failure modes

- Domain does not exist or has no DNS records — empty or error response
- Domain has no DMARC record published — DMARC section absent or null
- Domain has no SPF record — SPF section absent
- Specified DKIM selector has no TXT record — key not found for that selector
- All 8 common selectors probed return no DKIM records — empty DKIM section
- Transient DNS resolution failures from upstream AdGuard resolver
- Invalid domain format in query parameter — likely a 400 or error body

## How this service works

Email authentication DNS records for a domain: DMARC policy (p, sp, pct, rua), SPF record and its all-mechanism, and DKIM public keys for a selector you give or for 8 common selectors (revoked keys and CNAME-delegated keys are reported). Reads the published DNS records only; it does not check alignment against a real message.

## Output

Returns the parsed DMARC TXT record with its policy fields (p, sp, pct, rua), the raw SPF TXT record and its 'all' mechanism (+/-/~/?all), and DKIM public key entries for the specified selector or up to 8 probed common selectors — including flags for revoked keys and CNAME-delegated keys.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "domain"
     ],
     "properties": {
      "domain": {
       "type": "string",
       "description": "Domain name such as google.com (required)"
      },
      "selector": {
       "type": "string",
       "description": "DKIM selector such as google, selector1 or k1 (optional; common selectors are tried when empty)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sitecheck-web-intel-dmarc-spf-dkim-email-authentication-dns-lookup-9e2b6426/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.webintel-api.workers.dev](https://www.zero.xyz/host/api.webintel-api.workers.dev/llms.txt)