All projects matching “dkim”

Evaluate an SPF record against an IPv4/IPv6 address using only its literal ip4/ip6/all mechanisms. DNS-dependent mechanisms (include, a, mx, exists, redirect) reached before a match yield an honest `indeterminate` result rather than a guess.

InboxGuards Email Test: Email security fix plan: the exact SPF, DKIM and DMARC records to publish, with steps for your DNS host. Reads the domain's live MX, NS, SPF, DKIM and DMARC records, detects the mailbox provider and DNS host, and returns the exact records to publish in order (create / replace / keep, name, value, why): one merged SPF within the 10-lookup limit, DKIM records or the provider

Email authentication check (SPF, DKIM, DMARC): Check a domain's email authentication and spoofing risk from public DNS: MX and mail provider, SPF (record, all-qualifier, DNS lookup count vs the 10 limit), DMARC policy/pct/rua, DKIM at 30 common selectors, MTA-STS, TLS-RPT, BIMI. Returns grade, spoof

Email authentication posture check: parses SPF, DMARC and DKIM plus MX for any domain and grades deliverability/anti-spoofing gaps (SPF +all, SPF >10 lookups, DMARC p=none, missing DKIM). Clean JSON for deliverability and security-ops automation.

DNS TXT record lookup — a domain's TXT records as a clean JSON list: SPF, DKIM and DMARC policy strings plus site-verification and domain-ownership tokens, for email-authentication and domain-verification checks.

Agent intents: verify signup email · is disposable? · check DMARC before outreach · role-account risk. One call returns syntax, MX, SPF, DKIM, DMARC, disposable, role, provider, score 0-100, light domain enrichment, and recommend accept|challenge|reject with reasons. Production 0.10 USDC; demo free rate-limited. x402 on Base for AI agents.

Mail Security Tools API: Prepaid email setup watch: up to 25 domains for 30 days, webhook on change. Pay once, then each domain's SPF, DMARC, DKIM (common selectors), MX and score are re-checked about once a day for 30 days. When something changes or breaks you get an HMAC-signed JSON POST at your https webhook_url (event watch.changed, kind changed|broke, before/after). A watch.created POST is se

Domain and email security check: SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT, DNSSEC (validated by Cloudflare and Google), CAA, BIMI with its mark certificate, mail IPs on the UCEPROTECT Level 1 blocklist, TLS certificate, registrar and domain age, and Microsoft 365 tenant, each graded with the exact record to fix it, plus a 0-100 score

DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a st

Domain trust report for AI agents: is this domain real, how old is it, who registered it, and is its email locked down? DNS (A/AAAA/NS/MX/CAA), DNSSEC, SPF, DMARC, DKIM (common selectors), MTA-STS, TLS-RPT, BIMI, RDAP registration date + registrar + status, parking and disposable detection, risk flags, 0-100 score and verdict. Public DNS + RDAP, no data stored.

Email authentication check for a domain: SPF, DMARC policy and common DKIM selectors, with findings and a verdict.

DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a st

About the .download top-level domain: registry operator, type (generic, country-code, sponsored), IANA/RDAP details, WHOIS server, creation date, DNSSEC signing status and the registry's nameservers. Registration research and TLD-policy checks for .download. $0.01 per call.