# SPF Authorizes Microsoft 365 Change Watch

> SPF Authorizes Microsoft 365 Change Watch is a paid API for AI agents from email.intel.rallylive.ca, paid per call via x402, $0.02/call, status unknown (last checked 2026-09-15).

Monitors whether a domain's SPF record authorizes Microsoft 365 mail servers, returning current status and diff vs. previous check (stored 90 days).

## Facts

- Endpoint: GET https://email.intel.rallylive.ca/watch/email/spf-authorizes/microsoft-365
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/spf-authorizes-microsoft-365-change-watch-cf6dd206
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_ZOejZf5PflDWVr2pinJV3

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability spf-authorizes-microsoft-365-change-watch-cf6dd206
```

Example prompt: Watch contoso.com and alert me if its SPF record changes in a way that adds or removes Microsoft 365 authorization — I want to know the before and after values whenever something shifts.

## When to prefer this

Choose this endpoint when you need change-detection semantics for Microsoft 365 SPF authorization specifically — it handles state comparison server-side (90-day memory) so you don't have to store previous results yourself. Prefer it over a raw SPF lookup when you want diff output (before/after field values) and want to schedule polling-based alerts without managing your own baseline.

## Known failure modes

- Domain has no SPF record — returns not authorized with no diff data
- No prior check exists within 90 days — changed field may be null or false by default
- DNS lookup failure — may return error or stale result
- Rate limiting or payment failure ($0.02 USDC required per call) — returns 402 Payment Required

## How this service works

Change watch for spf authorizes microsoft 365: runs the check, compares it with the result from your previous call for the same domain (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

## Output

Returns the current SPF-authorizes-Microsoft-365 answer (true/false), a 'changed' boolean indicating whether the result differs from the previous call (retained up to 90 days), the specific fields that changed with their before and after values, and the timestamp of when the configuration was last observed.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/spf-authorizes-microsoft-365-change-watch-cf6dd206/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from email.intel.rallylive.ca](https://www.zero.xyz/host/email.intel.rallylive.ca/llms.txt)