Email Authentication Auditor API checks a domain’s public email security DNS records and returns an audit result.
It reviews SPF, DKIM, DMARC, BIMI, MTA-STS, and MX records, then returns the domain checked, date and time checked, a score from 0 to 100, detected problems, severity levels, and the DNS records found.
This API only reads public DNS information. It does not send email, read email, access mailboxes, require mailbox passwords, verify domain ownership, or change DNS records.
{"domain":"example.com","checkedAt":"2026-06-12T20:39:05.455Z","summary":{"score":45,"totalProblems":4,"problems":[{"check":"dmarc","problem":"DMARC record has no rua reporting address.","severity":"high"},{"check":"bimi","problem":"No BIMI record found.","severity":"low"},{"check":"mtaSts","problem":"No MTA-STS TXT record found.","severity":"medium"},{"check":"mx","problem":"Domain uses a null MX record and does not accept email.","severity":"high"}]},"results":{"spf":{"checked":true,"found":true,"records":["v=spf1 -all"],"problems":[]},"dkim":{"checked":true,"found":true,"selectorsChecked":["default","selector1","selector2","google","k1","mail","mandrill","sendgrid"],"records":[{"selector":"default","domain":"default._domainkey.example.com","records":["v=DKIM1; p="]},{"selector":"selector1","domain":"selector1._domainkey.example.com","records":["v=DKIM1; p="]},{"selector":"selector2","domain":"selector2._domainkey.example.com","records":["v=DKIM1; p="]},{"selector":"google","domain":"google._domainkey.example.com","records":["v=DKIM1; p="]},{"selector":"k1","domain":"k1._domainkey.example.com","records":["v=DKIM1; p="]},{"selector":"mail","domain":"mail._domainkey.example.com","records":["v=DKIM1; p="]},{"selector":"mandrill","domain":"mandrill._domainkey.example.com","records":["v=DKIM1; p="]},{"selector":"sendgrid","domain":"sendgrid._domainkey.example.com","records":["v=DKIM1; p="]}],"problems":[]},"dmarc":{"checked":true,"found":true,"records":["v=DMARC1;p=reject;sp=reject;adkim=s;aspf=s"],"problems":["DMARC record has no rua reporting address."]},"bimi":{"checked":true,"found":false,"records":[],"problems":["No BIMI record found."]},"mtaSts":{"checked":true,"found":false,"records":[],"problems":["No MTA-STS TXT record found."]},"mx":{"checked":true,"found":true,"records":[{"exchange":"","priority":0,"type":"MX"}],"problems":["Domain uses a null MX record and does not accept email."]}}}
curl --location --request GET 'https://zylalabs.com/api/12789/email+authentication+auditor+api/25118/audit+email+authentication+dns+records&domain=Required' --header 'Authorization: Bearer YOUR_API_KEY'
| Header | Description |
|---|---|
Authorization
|
[Required] Should be Bearer access_key. See "Your API Access Key" above when you are subscribed. |
No long-term commitment. Upgrade, downgrade, or cancel anytime. Free Trial includes up to 50 requests.
The API returns an audit result for a domain's email authentication DNS records, including SPF, DKIM, DMARC, BIMI, MTA-STS, and MX records. The response includes the domain checked, audit date and time, a score from 0 to 100, detected problems, severity levels, and the specific DNS records found.
Key fields in the response include "domain," "checkedAt," "summary" (with "score" and "totalProblems"), "problems" (detailing issues found), and "results" (which includes detailed checks for SPF, DKIM, DMARC, BIMI, MTA-STS, and MX records).
The response is structured in a JSON format, with a top-level object containing "domain," "checkedAt," "summary," and "results." The "summary" provides an overview of the audit score and problems, while "results" contains detailed information for each type of DNS record checked.
The API provides information on email authentication DNS records, including SPF, DKIM, DMARC, BIMI, MTA-STS, and MX records. It also identifies detected issues and severity levels so users can review email authentication setup details.
Users can submit the domain they want to audit in the API call. The API does not require additional parameters and returns results based on the submitted domain value.
Typical use cases include reviewing public email authentication DNS records, identifying DNS record setup issues, checking SPF, DKIM, DMARC, BIMI, MTA-STS, and MX details, and supporting technical review of domain email configuration.
The API reads public DNS records for the submitted domain and returns the records found at the time of the request. Results may vary as DNS records change, caching occurs, or domain settings are updated.
Users can expect a score, a list of detected problems with severity levels, and detailed results for each DNS record type. Common patterns include missing records, missing reporting addresses, null MX records, and record setup details shown in the response.
To obtain your API key, first sign in to your account and navigate to the API you want to use. From the API's Pricing section, choose a plan and complete the subscription process. Once subscribed, return to the API page and you will see your API Access Key displayed at the top of the documentation page. You can use this key to authenticate your requests.
You can’t switch APIs during the free trial. If you subscribe to a different API, your trial will end and the new subscription will start as a paid plan.
The free trial lasts for 7 days and allows you to make up to 50 API requests.
No, the free trial is available only once, so we recommend using it on the API that interests you the most. Most of our APIs offer a free trial, but some may not include this option.
Yes. If the API offers a free trial, you will see a "Free 7-Day Trial" option in its Pricing section. The trial lasts for 7 days and allows up to 50 API requests, enabling you to evaluate the API before subscribing to a paid plan.
Zyla API Hub is like a big store for APIs, where you can find thousands of them all in one place. We also offer dedicated support and real-time monitoring of all APIs. Once you sign up, you can pick and choose which APIs you want to use. Just remember, each API needs its own subscription. But if you subscribe to multiple ones, you'll use the same key for all of them, making things easier for you.
You can monitor your API usage through the response headers included with every request:
x-zyla-api-calls-monthly-used: Shows the total number of API requests you have used during the current billing period.
x-zyla-api-calls-monthly-remaining: Shows the number of API requests you have remaining for the current billing period.
Yes, you can cancel your subscription at any time. Simply go to the Pricing section of the API you're subscribed to and click the "Unsubscribe" button.
Please note that upgrades, downgrades, and cancellations take effect immediately. Once your subscription is canceled, access to the service will end immediately, regardless of any remaining API calls in your quota.
Please have a look at our Refund Policy: https://zylalabs.com/terms#refund
Service Level:
100%
Response Time:
240ms
Service Level:
100%
Response Time:
1,531ms
Service Level:
100%
Response Time:
181ms
Service Level:
100%
Response Time:
96ms
Service Level:
100%
Response Time:
53ms
Service Level:
100%
Response Time:
49ms
Service Level:
100%
Response Time:
1,120ms
Service Level:
100%
Response Time:
57ms
Service Level:
100%
Response Time:
429ms
Service Level:
100%
Response Time:
2,756ms