---
title: "Domain and email security check"
method: GET
path: "/v1/domain/check"
tags: ["Domain"]
---

# Domain and email security check

`GET /v1/domain/check`

## Request

- Base URL: `https://afriref.dev`
- URL: `https://afriref.dev/v1/domain/check`
- Auth: one of:
  - API key in header `PAYMENT-SIGNATURE`
  - API key in header `X-PAYMENT`
  - API key in header `X-API-Key`

Use when mail lands in spam, before an email campaign, for vendor due diligence or to confirm a Microsoft 365 tenant: graded SPF, DKIM, DMARC, MX, MTA-STS, DNSSEC, CAA, TLS and domain age, each with the exact fix record. Passive and non-intrusive. $0.01 per domain. Domain and email security check: SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT, DNSSEC, CAA, BIMI, TLS certificate, registrar and domain age, and Microsoft 365 tenant, each graded with the exact record to fix it, plus a 0-100 score.

## Query parameters

- `domain` string, required

## Response `200`

Graded report

- object
  - `domain` string, required
  - `checked_at` string, date-time, required
  - `score` integer, required: Weighted over graded checks; info checks are left out
  - `letter` 'A' | 'B' | 'C' | 'D' | 'F', required
  - `summary` string, required
  - `checks` object[], required
    - `check` 'spf' | 'dkim' | 'dmarc' | 'mx' | 'tls' | 'm365' | 'registration' | 'mta_sts' | 'tls_rpt' | 'dnssec' | 'caa' | 'bimi', required
    - `label` string, required: Human name; tls is the website certificate
    - `grade` 'pass' | 'warn' | 'fail' | 'info', required
    - `finding` string, required
    - `fix` string, nullable, required: The exact record to publish or step to take
    - `detail` object, required
  - `notes` string[]

## Other responses

- `400`: Not a valid public domain, or it only resolves to private addresses (free, before payment)
- `402`: Payment Required. HEAD always gets this free preview and is never charged.
- `404`: Domain does not exist (free)
- `429`: Rate limited (free)
- `503`: DNS unavailable for two or more of SPF, DMARC and MX (free, not settled)

## Changes

- **2026-10-19** `d78528e9f644`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/afriref/apis/afriref-pan-african-government-reference-data/changes/v1/domain/check/get.md)

---

[API](https://skmtc.dev/afriref/apis/afriref-pan-african-government-reference-data.md) · [All operations](https://skmtc.dev/afriref/apis/afriref-pan-african-government-reference-data/llms.txt) · [OpenAPI document](https://skmtc.dev/afriref/apis/afriref-pan-african-government-reference-data/revisions/d78528e9f644?raw)