Paid services on Base matching “spf”

Change watch for spf authorizes freshdesk: runs the check, compares it with the result from your previous call for the same domain (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

Email authentication posture check: parses SPF, DMARC and DKIM plus MX for any domain and grades deliverability/anti-spoofing gaps (SPF +all, SPF >10 lookups, DMARC p=none, missing DKIM). Clean JSON for deliverability and security-ops automation.

InboxGuards Email Test: Email security fix plan: the exact SPF, DKIM and DMARC records to publish, with steps for your DNS host. Reads the domain's live MX, NS, SPF, DKIM and DMARC records, detects the mailbox provider and DNS host, and returns the exact records to publish in order (create / replace / keep, name, value, why): one merged SPF within the 10-lookup limit, DKIM records or the provider

DNS TXT record lookup — a domain's TXT records as a clean JSON list: SPF, DKIM and DMARC policy strings plus site-verification and domain-ownership tokens, for email-authentication and domain-verification checks.

Unfold a domain's SPF policy (RFC 7208) into merged IPv4 and IPv6 blocks: include and redirect followed as a receiver counts them (10 lookups, 2 void lookups, PermError stops), a and mx resolved with /cidr, sources per block, exists, ptr and macros listed apart, and very broad blocks flagged. Use when an agent must know which servers may send. Input: ?domain=example.com.

One call, whole outside view of a domain: DNS records, email authentication grade (SPF, DMARC, MTA-STS), TLS certificate expiry and chain, post-quantum key exchange (X25519MLKEM768), HTTPS security headers, and a to-do list.

Check whether a domain or email address is trustworthy before you contact it, sign it up, or trust it. Returns a trusted/caution/high_risk/unknown verdict with reasons, based on DNS and mail health (MX, SPF, DMARC), domain age and registrar (RDAP), and disposable, free-provider and typo-lookalike flags. Accepts a domain, URL or email address.

Agent intents: verify signup email · is disposable? · check DMARC before outreach · role-account risk. One call returns syntax, MX, SPF, DKIM, DMARC, disposable, role, provider, score 0-100, light domain enrichment, and recommend accept|challenge|reject with reasons. Production 0.10 USDC; demo free rate-limited. x402 on Base for AI agents.

Mail Security Tools API: Prepaid email setup watch: up to 25 domains for 30 days, webhook on change. Pay once, then each domain's SPF, DMARC, DKIM (common selectors), MX and score are re-checked about once a day for 30 days. When something changes or breaks you get an HMAC-signed JSON POST at your https webhook_url (event watch.changed, kind changed|broke, before/after). A watch.created POST is se

Domain and email security check: SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT, DNSSEC (validated by Cloudflare and Google), CAA, BIMI with its mark certificate, mail IPs on the UCEPROTECT Level 1 blocklist, TLS certificate, registrar and domain age, and Microsoft 365 tenant, each graded with the exact record to fix it, plus a 0-100 score

Email intelligence for a company domain: mail provider (Google Workspace, Microsoft 365, Proofpoint...), catch-all status, SaaS tools revealed by SPF (HubSpot, Salesforce, Zendesk, SendGrid...), DMARC policy, public email addresses found on the company's own website with source URLs, and the likely address pattern. Useful before cold outreach or for tech-stack prospecting.

Evaluate an SPF record against an IPv4/IPv6 address using only its literal ip4/ip6/all mechanisms. DNS-dependent mechanisms (include, a, mx, exists, redirect) reached before a match yield an honest `indeterminate` result rather than a guess.

Domain intelligence in one call: RDAP registration (registrar, created, expires, age, status, nameservers), DNS records (A, AAAA, MX, NS, TXT, CNAME, SPF, DMARC), a live HTTPS probe (reachable, status, server, redirect target, HSTS), plus risk flags and a 0-100 risk score for new, parked, unreachable or badly configured domains.

Check an email address or domain: MX records, mail provider (Google/Microsoft/Zoho), SPF, DMARC policy, disposable-domain flag and a 0-100 deliverability score. Validate leads before sending.

DNS lookup: A/AAAA/MX/TXT/NS/CNAME/SOA/CAA, SPF and DMARC presence

Domain-level contact preflight with MX provider, SPF, DMARC and structured risk signals. Does not claim mailbox existence.

B2A Email Deliverability, MX, SPF & DMARC Verifier (/v1/email-verify) — Validates email syntax, disposable/burner provider status, role accounts, and live DNS MX/SPF/DMARC records. (https://email-verify.agentdiet.dev/v1/email-verify)

Domain trust report for AI agents: is this domain real, how old is it, who registered it, and is its email locked down? DNS (A/AAAA/NS/MX/CAA), DNSSEC, SPF, DMARC, DKIM (common selectors), MTA-STS, TLS-RPT, BIMI, RDAP registration date + registrar + status, parking and disposable detection, risk flags, 0-100 score and verdict. Public DNS + RDAP, no data stored.

DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a st

DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a st

Email authentication check for a domain: SPF, DMARC policy and common DKIM selectors, with findings and a verdict.

Validate email syntax, domain, and MX records for basic automated checks without SMTP mailbox verification; cannot prove a mailbox exists or can receive mail. USE WHEN: agent needs inexpensive structural and mail-domain validation before using an email address. DO NOT USE WHEN: agent requires proof that a mailbox exists or can receive mail.

One DNS Doctor propagation watch: a name is re-checked across six vantage points for a paid window of up to 24 hours, polled by handle.