# spf-authorizes-microsoft-365

> spf-authorizes-microsoft-365 is a paid API for AI agents from email.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-22).

Checks whether a domain's SPF record authorizes Microsoft 365 to send email on its behalf, returning yes/no, the matching mechanism, and the full SPF record.

## Facts

- Endpoint: GET https://email.intel.rallylive.ca/email/spf-authorizes/microsoft-365?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-22
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/spf-authorizes-microsoft-365-afe80454
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_pCy4NqQsMLdwSN9TK8U0R

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability spf-authorizes-microsoft-365-afe80454
```

Example prompt: Check if contoso.com's SPF record authorizes Microsoft 365 to send its email — I need to know if the integration is properly wired up for deliverability.

## When to prefer this

Use this endpoint when you specifically need to verify Microsoft 365 authorization in an SPF record, such as during email infrastructure audits, vendor integration checks, or onboarding workflows. Prefer this over generic SPF parsers when the exact question is whether Microsoft 365 is permitted — it returns a direct yes/no plus the matching mechanism without requiring you to parse the raw record yourself.

## Known failure modes

- Domain has no SPF TXT record — returns no authorization with empty record
- Domain does not exist or DNS resolution fails — lookup error returned
- SPF record exists but Microsoft 365 is not included — returns no with full record
- Rate limiting or upstream Cloudflare DoH unavailability — service error
- Malformed SPF record that cannot be parsed — may return error or partial result

## How this service works

Does the domain's SPF record authorise microsoft 365 to send its mail? Reads the SPF TXT record (Cloudflare DoH) and checks for microsoft-365's include/ip mechanisms, returning yes/no, the matching mechanism and the full record. Confirms a vendor integration is wired for deliverability, or spots an unexpected sender. $0.01 per lookup.

## Output

Returns a yes/no authorization flag indicating whether Microsoft 365 is permitted by the domain's SPF record, the specific SPF mechanism that matched (e.g. include:spf.protection.outlook.com), and the complete raw SPF TXT record retrieved via Cloudflare DNS over HTTPS.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/spf-authorizes-microsoft-365-afe80454/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from email.intel.rallylive.ca](https://www.zero.xyz/host/email.intel.rallylive.ca/llms.txt)