x402

Email Authentication Check (x402)

A domain's email authentication posture from live DNS: SPF, DMARC policy, MX hosts, and DKIM selector probing — the pre-send deliverability check for outreach agents.

post/x402/v2/email-auth-check

Request

  • Base URL: https://api.strale.io
  • URL: https://api.strale.io/x402/v2/email-auth-check
  • Auth: none required

Request body

OR
OR

Response

Success

domainstring
has_mxboolean
dkim_notestring nullable
spf_recordstring nullable
spf_status'present' | 'missing' | 'invalid_multiple'
auth_summary'enforced' | 'partially_enforced' | 'configured_monitor_only' | 'incomplete'
dmarc_policystring nullable
dmarc_recordstring nullable
dmarc_status'present' | 'missing' | 'invalid_multiple'
dmarc_presentboolean
dmarc_inherited_fromstring nullable

Set when DMARC was inherited from a parent (organizational) domain

dmarc_effective_policystring nullable

The policy actually governing this domain's mail — includes RFC 7489 organizational-domain inheritance for subdomains (sp= aware)

Example response

{
  "domain": "google.com",
  "has_mx": true,
  "mx_hosts": [
    "smtp.google.com"
  ],
  "dkim_note": "DKIM probed via common selectors only — a miss does not prove the domain has no DKIM; pass dkim_selector for an exact check",
  "dmarc_pct": null,
  "dkim_found": [
    {
      "selector": "google",
      "record_present": true
    }
  ],
  "spf_record": "v=spf1 include:_spf.google.com ~all",
  "spf_status": "present",
  "auth_summary": "enforced",
  "dmarc_policy": "reject",
  "dmarc_record": "v=DMARC1; p=reject; rua=mailto:...",
  "dmarc_status": "present",
  "dmarc_present": true,
  "dmarc_inherited_from": null,
  "dkim_checked_selectors": [
    "default",
    "google",
    "selector1",
    "selector2",
    "k1",
    "s1",
    "dkim"
  ],
  "dmarc_effective_policy": "reject",
  "dmarc_subdomain_policy": null
}

Changes

No recorded changes to this operation across all 1 revision of this API.