# SPF Authorizes Workday Checker

> SPF Authorizes Workday Checker is a paid API for AI agents from email.intel.rallylive.ca, paid per call via x402, $0.01/call, status unknown (last checked 2026-10-24).

Checks whether a domain's SPF record authorizes Workday to send email on its behalf, returning a yes/no result, the matching mechanism, and the full SPF record.

## Facts

- Endpoint: GET https://email.intel.rallylive.ca/email/spf-authorizes/workday?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-24
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/spf-authorizes-workday-checker-7ab5cd1d
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_mLxh2croE59DtQXuRFx_u

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability spf-authorizes-workday-checker-7ab5cd1d
```

Example prompt: Can you check if our SPF record for acmecorp.com actually authorizes Workday to send emails on our behalf — I want to know if the Workday include mechanism is present and what the full SPF record looks like.

## When to prefer this

Use this endpoint when you need to confirm specifically whether Workday is authorized as an email sender for a given domain, such as during Workday HR/payroll onboarding, deliverability troubleshooting, or security audits of authorized senders. It is more targeted than a generic SPF parser because it handles the Workday-specific include/ip mechanism detection logic directly. Prefer this over generic DNS tools when the question is specifically 'is Workday wired up correctly as a sender?'

## Known failure modes

- Domain has no SPF TXT record — returns no authorization and empty record
- Domain does not exist or DNS lookup fails — may return an error or empty result
- SPF record is malformed or exceeds DNS lookup limits — parsing may be incomplete
- Workday is not present in the SPF record — returns no with null matching mechanism
- Cloudflare DoH service is temporarily unavailable — lookup fails with network error

## How this service works

Does the domain's SPF record authorise workday to send its mail? Reads the SPF TXT record (Cloudflare DoH) and checks for workday's include/ip mechanisms, returning yes/no, the matching mechanism and the full record. Confirms a vendor integration is wired for deliverability, or spots an unexpected sender. $0.01 per lookup.

## Output

Returns a yes/no authorization result indicating whether Workday is authorized in the domain's SPF record, the specific SPF mechanism that matched (e.g. an include or ip directive referencing Workday), and the complete raw SPF TXT record retrieved via Cloudflare DNS-over-HTTPS.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "properties": {}
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/spf-authorizes-workday-checker-7ab5cd1d/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from email.intel.rallylive.ca](https://www.zero.xyz/host/email.intel.rallylive.ca/llms.txt)