# spf-authorizes-salesforce

> spf-authorizes-salesforce is a paid API for AI agents from email.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-24).

Checks whether a domain's SPF record explicitly authorizes Salesforce to send email on its behalf, returning a yes/no result with the matching mechanism and full SPF record.

## Facts

- Endpoint: GET https://email.intel.rallylive.ca/email/spf-authorizes/salesforce?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-24
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/spf-authorizes-salesforce-c00afd20
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_fRGzqWcizS8WO4DaP32CR

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability spf-authorizes-salesforce-c00afd20
```

Example prompt: Can you check whether the SPF record for acme.com authorizes Salesforce to send email on its behalf — I need to confirm our Salesforce CRM integration is properly configured for deliverability.

## When to prefer this

Choose this endpoint when you need to specifically verify Salesforce's presence in a domain's SPF record — for confirming CRM email deliverability setup, auditing authorized senders, or detecting unauthorized Salesforce inclusion. Prefer this over generic SPF parsers when the check is specifically scoped to Salesforce. Use sibling endpoints for other vendors (ActiveCampaign, Zapier, Google Workspace, etc.).

## Known failure modes

- Domain has no SPF TXT record — returns no authorization with an empty record
- Domain does not exist or DNS lookup fails — DNS resolution error returned
- SPF record is malformed or exceeds DNS lookup limit — parse error or inconclusive result
- Network timeout reaching Cloudflare DoH — request fails with timeout error
- Domain input missing or malformed — request returns validation error

## How this service works

Does the domain's SPF record authorise salesforce to send its mail? Reads the SPF TXT record (Cloudflare DoH) and checks for salesforce's include/ip mechanisms, returning yes/no, the matching mechanism and the full record. Confirms a vendor integration is wired for deliverability, or spots an unexpected sender. $0.01 per lookup.

## Output

Returns a yes/no indicating whether Salesforce is authorized in the domain's SPF record, the specific SPF mechanism that matched (e.g. include:_spf.salesforce.com or an IP block), and the full raw SPF TXT record retrieved via Cloudflare DNS-over-HTTPS.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/spf-authorizes-salesforce-c00afd20/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from email.intel.rallylive.ca](https://www.zero.xyz/host/email.intel.rallylive.ca/llms.txt)