Email Auth Auditor API performs comprehensive email authentication checks on any domain.
Essential for email deliverability monitoring, security audits, compliance checks, and IT administration tools.
{"domain":"google.com","timestamp":"2026-04-08T14:55:14.145Z","provider":{"name":"Google Workspace","slug":"google","mxPatterns":["10 smtp.google.com"]},"summary":{"score":70,"grade":"C","passedChecks":8,"totalChecks":10,"highlights":["SPF configured","No valid DKIM selectors found","DMARC policy is reject","Missing BIMI record","MTA-STS configured"]},"spf":{"found":true,"record":"v=spf1 include:_spf.google.com ~all","mechanism":"softfail","includes":["_spf.google.com"],"issues":[],"score":100},"dkim":{"found":false,"selectors_checked":["default","google","selector1","selector2","k1","dkim","s1","s2","mail","email"],"valid_selectors":[],"issues":[{"severity":"warning","message":"No valid DKIM selectors found among common selectors. DKIM signing may use a custom selector."}],"score":0},"dmarc":{"found":true,"record":"v=DMARC1; p=reject; rua=mailto:[email protected]","policy":"reject","pct":100,"rua":"mailto:[email protected]","ruf":null,"issues":[],"score":100},"bimi":{"found":false,"record":null,"logo_url":null,"authority_url":null,"issues":[{"severity":"info","message":"No BIMI record found. BIMI displays your logo in email clients."}],"score":0},"mtaSts":{"found":true,"record":"v=STSv1; id=20210803T010101;","policy_accessible":true,"issues":[],"score":100},"recommendations":["Configure DKIM signing for your domain to authenticate outgoing emails","Add a BIMI record to display your brand logo in supported email clients"],"fixes":[{"protocol":"DKIM","recordType":"TXT","hostname":"google._domainkey.google.com","value":"v=DKIM1; k=rsa; p=YOUR_PUBLIC_KEY","priority":"critical","instruction":"Generate your DKIM key in Google Admin Console > Apps > Google Workspace > Gmail > Authenticate email. The default selector is 'google'."},{"protocol":"BIMI","recordType":"TXT","hostname":"default._bimi.google.com","value":"v=BIMI1; l=https://google.com/brand/logo.svg","priority":"optional","instruction":"Add a BIMI record to display your brand logo next to your emails in supported clients (Gmail, Yahoo, Apple Mail). The logo must be an SVG Tiny 1.2 file served over HTTPS. For Gmail, you also need a Verified Mark Certificate (VMC)."}]}
curl --location --request GET 'https://zylalabs.com/api/12316/email+auth+auditor+api/23136/audit+domain+email+auth?domain=google.com' --header 'Authorization: Bearer YOUR_API_KEY'
| Header | Description |
|---|---|
Authorization
|
[Required] Should be Bearer access_key. See "Your API Access Key" above when you are subscribed. |
No long-term commitment. Upgrade, downgrade, or cancel anytime. Free Trial includes up to 50 requests.
The Email Auth Auditor API offers features including SPF validation, DKIM verification, DMARC analysis, DNS record inspection, and security scoring to assess the overall email authentication posture.
The API returns data related to SPF records, DKIM configurations, DMARC policies, DNS TXT records, and a security score that rates the email authentication setup.
The API can be used for email deliverability monitoring, conducting security audits, performing compliance checks, and enhancing IT administration tools to ensure robust email infrastructure.
The core value proposition of the Email Auth Auditor API lies in its ability to provide comprehensive insights into email authentication configurations, helping organizations identify vulnerabilities and improve their email security posture.
The API provides output in structured formats detailing SPF, DKIM, and DMARC results, including fields such as record status, alignment, and security scores, typically returned in JSON format.
Key fields include "domain," "timestamp," "summary" (with score and grade), "spf," "dkim," and "dmarc" sections detailing their respective records, issues, and scores. Each section provides insights into the configuration and potential vulnerabilities.
The response is structured in JSON format, with a top-level object containing domain information, a summary of the audit results, and nested objects for SPF, DKIM, and DMARC details, making it easy to parse and analyze.
The primary parameter is the "domain" for which the audit is requested. Users can customize their requests by specifying different domains to analyze their email authentication configurations.
The audit endpoint provides information on SPF records, DKIM selectors, DMARC policies, and DNS TXT records. It also includes a security score and highlights any issues or vulnerabilities detected during the audit.
Data accuracy is maintained through regular updates and validation checks against authoritative DNS records. The API employs mechanisms to ensure that the information retrieved reflects the current state of email authentication configurations.
Typical use cases include monitoring email deliverability, conducting security audits to identify vulnerabilities, ensuring compliance with email authentication standards, and enhancing IT administration tools for better email security management.
Users can analyze the security score and specific issues highlighted in the response to prioritize improvements in their email authentication setup. The detailed breakdown of SPF, DKIM, and DMARC records allows for targeted remediation efforts.
To obtain your API key, you first need to sign in to your account and subscribe to the API you want to use. Once subscribed, go to your Profile, open the Subscription section, and select the specific API. Your API key will be available there and can be used to authenticate your requests.
You can’t switch APIs during the free trial. If you subscribe to a different API, your trial will end and the new subscription will start as a paid plan.
If you don’t cancel before the 7th day, your free trial will end automatically and your subscription will switch to a paid plan under the same plan you originally subscribed to, meaning you will be charged and gain access to the API calls included in that plan.
The free trial ends when you reach 50 API requests or after 7 days, whichever comes first.
No, the free trial is available only once, so we recommend using it on the API that interests you the most. Most of our APIs offer a free trial, but some may not include this option.
Yes, we offer a 7-day free trial that allows you to make up to 50 API calls at no cost, so you can test our APIs without any commitment.
Zyla API Hub is like a big store for APIs, where you can find thousands of them all in one place. We also offer dedicated support and real-time monitoring of all APIs. Once you sign up, you can pick and choose which APIs you want to use. Just remember, each API needs its own subscription. But if you subscribe to multiple ones, you'll use the same key for all of them, making things easier for you.
Please have a look at our Refund Policy: https://zylalabs.com/terms#refund
Service Level:
100%
Response Time:
228ms
Service Level:
100%
Response Time:
213ms
Service Level:
100%
Response Time:
182ms
Service Level:
100%
Response Time:
39ms
Service Level:
100%
Response Time:
561ms
Service Level:
100%
Response Time:
75ms
Service Level:
100%
Response Time:
1,692ms
Service Level:
100%
Response Time:
1,971ms
Service Level:
100%
Response Time:
293ms
Service Level:
100%
Response Time:
2,084ms
Service Level:
100%
Response Time:
501ms
Service Level:
100%
Response Time:
197ms
Service Level:
100%
Response Time:
560ms
Service Level:
100%
Response Time:
826ms
Service Level:
100%
Response Time:
1,767ms
Service Level:
100%
Response Time:
1,270ms
Service Level:
100%
Response Time:
316ms
Service Level:
100%
Response Time:
373ms
Service Level:
100%
Response Time:
728ms
Service Level:
100%
Response Time:
725ms