Tool

Audit a domain

Run the full email-authentication audit against a domain from live DNS: MX, SPF, DKIM, DMARC, BIMI, MTA-STS and TLS-RPT, each scored and annotated, plus an overall score out of 100. The domain does not have to be one you have added to Palisade. Results are cached for ten minutes per domain. Authentication is optional. Note that this response predates the API-wide snake_case convention and keeps its original camelCase field names (mtaSts, lookupCount, dmarcValue), so it does not read like the rest of the API.

get/tools/audit

Request

  • Base URL: https://api.palisade.email
  • URL: https://api.palisade.email/tools/audit
  • Auth: one of:
    • none
    • HTTP bearer
    • HTTP basic

Query parameters

domainstring required
emailstring email
skip_dkim'true' | 'false'
skip_webhooks'true' | 'false'
store_scan'true' | 'false'
utm_sourcestring

Headers

Palisade-Journey-Idstring uuid

The website visitor journey this audit belongs to, the same id sent to POST /attribution/touches. Read only when the request captures a lead, and ignored rather than rejected when it is missing or malformed.

Response

Success

status'success' | 'error' required

"success", or "error" when the audit could not run because the domain's nameservers did not resolve or belong to a domain-parking advertiser. On "error" only summary is present, with the reason in summary.errors.

nameserversstring[]

The NS records the audit resolved: the domain's own, or its parent's when it has none.

Changes

No recorded changes to this operation across all 1 revision of this API.