Mail Security Tools

Grade a domain's email security: SPF, DMARC, DKIM and MX score. $0.01 USDC on Base per call. Returns a 0-100 score and A-F grade (SPF 30, DMARC 40, DKIM 25, MX 5) from live DNS, with findings and the top 3 fixes. Bad input 400, unknown domain 404, not charged. Don't use this for the exact records to publish; use /v1/fix-plan.

Validate an email address: syntax, MX, disposable and role account. $0.01 USDC on Base per call. Returns a verdict of ok, risky or undeliverable without sending mail. Bad syntax returns 400, not charged. Don't use this for confirming a mailbox exists; no SMTP probe is made.

Mail Security Tools API: Bulk email security score: up to 100 domains in one call. Scores up to 100 domains (comma/space separated) for SPF, DMARC, DKIM and MX from live DNS: per-domain score, grade and issues plus a summary (grade counts, missing DMARC/SPF, worst 10). Built for MSPs and agents checking a whole client or vendor list. Bad input 400 and widespread DNS failure 502, never charged.

Mail Security Tools API: Prepaid email setup watch: up to 25 domains for 30 days, webhook on change. Pay once, then each domain's SPF, DMARC, DKIM (common selectors), MX and score are re-checked about once a day for 30 days. When something changes or breaks you get an HMAC-signed JSON POST at your https webhook_url (event watch.changed, kind changed|broke, before/after). A watch.created POST is sent right away. Webhook only, no email. Free status at GET /v1/watch/{watch_id}. Bad input 400, never

Get the exact SPF, DKIM and DMARC records to publish, with steps for your DNS host. $1 USDC on Base per call. Reads live MX, NS, SPF, DKIM and DMARC, detects the mail provider and DNS host, and returns records in order with a staged DMARC rollout. Non-sending domains get a lock-down set. Bad input 400, unknown domain 404, not charged. Don't use this for a quick grade; use /v1/score.