# SPF Authorizes Amazon SES Checker

> SPF Authorizes Amazon SES Checker is a paid API for AI agents from email.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-12).

Checks whether a domain's SPF record explicitly authorizes Amazon SES to send email on its behalf, returning a yes/no result, the matching SPF mechanism, and the full SPF TXT record.

## Facts

- Endpoint: GET https://email.intel.rallylive.ca/email/spf-authorizes/amazon-ses?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/spf-authorizes-amazon-ses-checker-01521e45
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_CBawZ23CEn4LzmVGc4yrN

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability spf-authorizes-amazon-ses-checker-01521e45
```

Example prompt: Can you check whether the SPF record for acme.com authorizes Amazon SES to send email on its behalf, and show me the matching mechanism and the full SPF record?

## When to prefer this

Use this endpoint when you need a fast, single-domain check specifically for Amazon SES SPF authorization — ideal for confirming vendor email integrations are correctly wired for deliverability, or for auditing whether an unexpected sender is legitimately authorized. Prefer this over generic SPF parsers when the specific question is Amazon SES authorization, as it provides a direct yes/no answer with the matched mechanism rather than requiring manual interpretation of raw SPF records.

## Known failure modes

- Domain has no SPF TXT record — returns no authorization and an empty record field
- DNS lookup failure via Cloudflare DoH — may return an error or timeout
- Domain does not exist — lookup fails with DNS NXDOMAIN
- Malformed SPF record — partial parse result with best-effort mechanism extraction
- Rate limiting or payment failure — returns HTTP 402 if USDC payment is not provided

## How this service works

Does the domain's SPF record authorise amazon ses to send its mail? Reads the SPF TXT record (Cloudflare DoH) and checks for amazon-ses's include/ip mechanisms, returning yes/no, the matching mechanism and the full record. Confirms a vendor integration is wired for deliverability, or spots an unexpected sender. $0.01 per lookup.

## Output

Returns a yes/no boolean indicating whether Amazon SES is authorized, the specific SPF mechanism that matched (e.g. an 'include:amazonses.com' directive or an IP range), and the complete SPF TXT record retrieved via Cloudflare DNS-over-HTTPS for the queried domain.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/spf-authorizes-amazon-ses-checker-01521e45/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from email.intel.rallylive.ca](https://www.zero.xyz/host/email.intel.rallylive.ca/llms.txt)