Audit a domain's email authentication DNS: SPF (record count, all qualifier, includes, ~DNS lookups vs 10 limit), DMARC (p, sp, pct, rua/ruf, adkim/aspf), DKIM (common or given selectors, key type and length), MX, plus BIMI / MTA-STS / TLS-RPT presence. Returns per-check status, issues, recommendations, score 0-100 and grade A-F. Costs $0.003 USDC per call via x402.
Parametersdomainrequiredselectors
Domain lookup: DNS records (A, AAAA, MX, NS, TXT, CNAME, SOA, CAA via Cloudflare DNS-over-HTTPS, DNSSEC AD flag) plus registration data from the registry's RDAP server (IANA bootstrap): registrar + IANA id, created / updated / expiry dates, age in days, days to expiry, EPP status, nameservers, DNSSEC delegation, registrar abuse contact. No registrant personal data. Charged only when DNS answered (NOERROR) or the registry RDAP returned the registration. TLDs without RDAP (e.g. .de, .io) still succeed with DNS records and rdap_available:false. NXDOMAIN with no registration (404 DOMAIN_NOT_FOUND), upstream failure (502) and bad input (400) are not charged. Costs $0.003 USDC per call via x402.
Parametersdomainrequired
Bulk domain lookup: the same DNS + RDAP registration report as domain_lookup for up to 10 domains in one call (deduplicated). Per-domain errors are returned inline. Charged once ($0.01 USDC via x402) only if at least one domain succeeded; otherwise not charged.
Parametersdomainsrequired
Free health check. Returns service status, price and network.
Takes no parameters.