agentutility(7)$ man dmarc-check
/dmarc-check
PRICE / CALL
$0.02
USDC · base mainnet · scheme: exact
METHOD
POST
CLUSTER
webprobeCATEGORY
utilities
STATUS
● live
NAME
dmarc-check — audits a domain's email authentication posture: dmarc, spf, and dkim in one check
SYNOPSIS
POST https://x402.agentutility.ai/dmarc-check
Content-Type: application/json
X-PAYMENT: <signed-transferWithAuthorization>
{ ... }↳ first call →
402 Payment Required. Sign USDCtransferWithAuthorization, retry with theX-PAYMENT header.DESCRIPTION
Audits a domain's email authentication posture: DMARC, SPF, and DKIM in one check. Reads the domain's DNS TXT records, parses each protocol's record (SPF mechanisms + qualifiers, DMARC tags p/sp/rua/ruf/pct/aspf/adkim, DKIM selectors with key bits and algorithm), and returns a 0-100 score, A-F grade, and per-finding human-readable reasons explaining the score. Use it as a mail-auth posture audit, spoofing-resistance grader, phishing-readiness scanner, domain email security score, dmarcian-style report, or pre-send deliverability check.
INPUT — request schema
| property | type | description | req? |
|---|---|---|---|
| domain | string | Apex domain to audit (e.g. 'google.com'). Resolves SPF/DMARC TXT at the domain and at _dmarc.<domain>. | required |
| dkim_selectors | array | Optional list of DKIM selectors to probe (e.g. ['google', 'selector1', 's1']). Defaults to a common-selector probe set. | optional |
OUTPUT — response shape
| field | type | description |
|---|---|---|
| domain | string | Domain that was audited, echoed back from the request. |
| score | number | Numeric email-auth health score from 0 to 100 based on SPF, DKIM, and DMARC posture. |
| grade | string | Letter grade A through F mapped from the numeric score. |
| reasons | array | Array of strings explaining what hurt or helped the score (missing DMARC, weak policy, no DKIM, etc.). |
| spf | object | Parsed SPF record: presence, raw TXT, mechanisms (include/ip4/all), and qualifier on the all directive. |
| dmarc | object | Parsed DMARC record: presence, policy (none/quarantine/reject), pct, subdomain policy, and rua/ruf tags. |
| dkim | object | DKIM lookup result: selectors probed, which returned valid public keys, and key algorithm/length where found. |
| source | string | Resolver or upstream used to fetch the TXT records (e.g. cloudflare-dns, google-dns). |
EXAMPLES — two ways to call
EXAMPLE 1 · curl
curl -X POST https://x402.agentutility.ai/dmarc-check \
-H 'Content-Type: application/json' \
-d '{ }'first response =
402 Payment Required with payment requirements; sign + retry with X-PAYMENT.EXAMPLE 2 · mcp
# Install the MCP package for this endpoint's cluster npx -y @agentutility/mcp-<cluster> # Required: EVM private key with USDC on Base export X402_PRIVATE_KEY=0x... # Then call the dmarc-check tool from your MCP-aware agent.
MCP server handles payment automatically — your coding agent just calls the tool by name.
METADATA
- tags
- dmarcspfdkimemail-authdeliverabilitysecurity
- methods
- POST
- cluster
- webprobe
- price
- $0.02 USDC per call
ADJACENT — other endpoints in webprobe
| endpoint | description | price |
|---|---|---|
| archive-snapshot | Finds the closest archived snapshot of a public URL, like a Wayback Machine API. | $0.02 |
| archive-snapshot-api | Finds archived snapshots of public web pages, returning the closest Wayback Machine captures with timestamps, status codes, and replay URLs. | $0.02 |
| archive-url | Looks up the archived copy of a public URL closest to a given timestamp and can fetch cleaned archived page text. | $0.02 |
| brand-domain-check | Checks whether a brand or company domain is established, expiring, registrar-locked, or newly registered, on the same RDAP backend as who… | $0.02 |
| brand-watch-domain-risk | Checks new or suspicious brand-adjacent domains for age, registrar, expiry, DNSSEC, and transfer/lock statuses. | $0.02 |
| creator-domain-check | Checks creator, newsletter, podcast, and community domains for age, expiry, registrar, DNSSEC, and suspicious new-registration flags. | $0.02 |
| dns-lookup | Full DNS lookup over Cloudflare 1.1.1.1 DNS-over-HTTPS. | $0.02 |
| domain-age-check | Checks a domain's age and registration date, with registrar metadata, for fraud, phishing, brand-protection, and lead-enrichment workflows. | $0.02 |
SEE ALSO