Check a public domain's email authentication and anti-spoofing posture using MX, SPF, D…
Check a public domain's email authentication and anti-spoofing posture using MX, SPF, DMARC, caller-selected DKIM, MTA-STS, TLS-RPT, and BIMI DNS evidence.
by apiacre.com · discovered, not yet claimed by its owner · updated 2026-10-12
Mirrored from Coinbase's public x402 Bazaar. The description is the provider's own text and has not been reviewed here; the payment requirements are copied as published.
What it does
Check a public domain's email authentication and anti-spoofing posture using MX, SPF, DMARC, caller-selected DKIM, MTA-STS, TLS-RPT, and BIMI DNS evidence.
Tags: web · audit · email-authentication · dns · spf · bazaar · payment-identifier
Call contract
- Method
- POST
- Input
- json
- Output
- json
- Last paid call
- 2026-10-12
{
"dkim_selectors": [
"protonmail"
],
"domain": "apiacre.com"
}{
"data": {
"checkedAt": "2026-08-12T18:03:16+00:00",
"collectionMs": 19,
"dkim": {
"checked": true,
"checkedSelectors": [
"protonmail"
],
"reason": null,
"selectors": [
{
"configured": true,
"multipleRecords": false,
"recordCount": 1,
"revoked": false,
"selector": "protonmail"
}
]
},
"dmarc": {
"configured": true,
"multipleRecords": false,
"policy": "quarantine",
"recordCount": 1,
"records": [
"v=DMARC1; p=quarantine"
]
},
"domain": "apiacre.com",
"findings": [],
"limitations": [
"DNS answers are a time-specific recursive-resolver snapshot and may be cached.",
"DKIM is checked only for selectors explicitly supplied by the caller.",
"Published records do not prove delivery, domain ownership, sender identity, o..."
],
"mailRouting": {
"addressFallbackObserved": true,
"mode": "explicit_mx",
"mxRecords": [
"10 mail.protonmail.ch.",
"20 mailsec.protonmail.ch."
],
"nullMx": false
},
"optionalPolicies": {
"bimi": {
"configured": false,
"recordCount": 0,
"records": []
},
"mtaSts": {
"configured": false,
"recordCount": 0,
"records": []
},
"tlsReporting": {
"configured": false,
"recordCount": 0,
"records": []
}
},
"posture": {
"basis": "published DNS records only",
"status": "enforcing"
},
"provenance": {
"queries": [
"apiacre.com A",
"apiacre.com AAAA",
"apiacre.com MX",
"apiacre.com TXT",
"_dmarc.apiacre.com TXT",
"protonmail._domainkey.apiacre.com TXT",
"_mta-sts.apiacre.com TXT",
"_smtp._tls.apiacre.com TXT",
"default._bimi.apiacre.com TXT"
],
"queryCount": 9,
"source": "recursive DNS"
},
"spf": {
"allQualifier": "softfail",
"configured": true,
"multipleRecords": false,
"recordCount": 1,
"records": [
"v=spf1 include:_spf.protonmail.ch ~all"
]
}
},
"meta": {
"cached": false,
"duration_ms": 42,
"next_actions": [],
"sources": [],
"warnings": []
},
"request_id": "018f1f54-7f38-7ba2-8dc3-5f90272d9f1a",
"service": "web.email-auth",
"version": "1"
}Use with an agent
- Discover. Agents find this listing with
GET https://bazaar.saylorinnovations.com/discovery/search?query=…, the MCP toolsearch_resources, or/discovery/resources. - Inspect. Fetch
/resources/27723.jsonfor the price and payment options. - Pay. Call
GET https://apiacre.com/v1/web/email-auth. The provider answers402with its payment requirements. An x402 client signs one of the options below and retries withPAYMENT-SIGNATURE. - Execute. The provider returns
200with the data. Agent Bazaar is not in the request path and never sees your payment.
For humans
You don't need an account or an API key; you need a wallet holding a small amount of USDC on Base, Solana, and an x402-capable client (see the examples below). Call the endpoint unpaid first to see exactly what it asks for.
Pricing & payment
- Price
- $0.005 / request
- Protocol
- x402 v2
- Auth
- No account or API key. Pay per request.
- Networks
- Base, Solana
- Demand
- 2 calls · 2 unique payers in 30d (public x402 Bazaar data)
x402 payment requirements
| Scheme | Network | Asset | Amount | Pay to | Timeout |
|---|---|---|---|---|---|
| exact | Base eip155:8453 | USDC | $0.005 | 0xa0BFa4f07281c9b248DC3AED2217836BcA24869B | 300s |
| exact | Solana solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp | USDC | $0.005 | B4CHWQeQn7GDLZD2aW6hpGG2bEseisBFLZYECA3HDLan | 300s |
accepts[] (raw JSON)
[
{
"scheme": "exact",
"network": "eip155:8453",
"payTo": "0xa0BFa4f07281c9b248DC3AED2217836BcA24869B",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"amount": "5000",
"amountUsd": 0.005,
"maxTimeoutSeconds": 300
},
{
"scheme": "exact",
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "B4CHWQeQn7GDLZD2aW6hpGG2bEseisBFLZYECA3HDLan",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"amount": "5000",
"amountUsd": 0.005,
"maxTimeoutSeconds": 300
}
]Schemas
Output schema (JSON Schema)
{
"properties": {
"example": {
"properties": {
"data": {
"additionalProperties": false,
"properties": {
"checkedAt": {
"type": "string"
},
"collectionMs": {
"type": "integer"
},
"dkim": {
"type": "object"
},
"dmarc": {
"type": "object"
},
"domain": {
"type": "string"
},
"findings": {
"items": {
"type": "object"
},
"type": "array"
},
"limitations": {
"items": {
"type": "string"
},
"type": "array"
},
"mailRouting": {
"type": "object"
},
"optionalPolicies": {
"type": "object"
},
"posture": {
"type": "object"
},
"provenance": {
"type": "object"
},
"spf": {
"type": "object"
}
},
"required": [
"domain",
"mailRouting",
"spf",
"dmarc",
"dkim",
"optionalPolicies",
"posture",
"findings",
"provenance",
"limitations",
"checkedAt",
"collectionMs"
],
"type": "object"
},
"meta": {
"properties": {
"cached": {
"type": "boolean"
},
"duration_ms": {
"type": "integer"
},
"next_actions": {
"items": {
"type": "object"
},
"type": "array"
},
"sources": {
"items": {
"type": "string"
},
"type": "array"
},
"warnings": {
"items": {
"type": "string"
},
"type": "array"
}
},
"required": [
"duration_ms",
"cached",
"sources",
"warnings",
"next_actions"
],
"type": "object"
},
"request_id": {
"type": "string"
},
"service": {
"type": "string"
},
"version": {
"type": "string"
}
},
"required": [
"request_id",
"service",
"version",
"data",
"meta"
],
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}Example shape — generated from the schema, not a captured live response
{
"example": {
"data": {
"checkedAt": "string",
"collectionMs": 0,
"dkim": {},
"dmarc": {},
"domain": "string",
"findings": [
{}
],
"limitations": [
"string"
],
"mailRouting": {},
"optionalPolicies": {},
"posture": {},
"provenance": {},
"spf": {}
},
"meta": {
"cached": true,
"duration_ms": 0,
"next_actions": [
{}
],
"sources": [
"string"
],
"warnings": [
"string"
]
},
"request_id": "string",
"service": "string",
"version": "string"
},
"type": "string"
}Examples
curl -X POST 'https://apiacre.com/v1/web/email-auth' -H 'Content-Type: application/json' --data '{"dkim_selectors":["protonmail"],"domain":"apiacre.com"}'
# -> 402 Payment Required; read PAYMENT-REQUIRED
# retry the identical request with PAYMENT-SIGNATUREconst res = await fetch("https://apiacre.com/v1/web/email-auth", {
"method": "POST",
"headers": {
"content-type": "application/json"
},
"body": "{\"dkim_selectors\":[\"protonmail\"],\"domain\":\"apiacre.com\"}"
});
if (res.status === 402) {
const { accepts } = await res.json();
// pay one of accepts[] via an x402 client, then retry with the payment header
}import httpx
import json
res = httpx.request("POST", "https://apiacre.com/v1/web/email-auth", json=json.loads("{\"dkim_selectors\":[\"protonmail\"],\"domain\":\"apiacre.com\"}"))
if res.status_code == 402:
accepts = res.json()["accepts"]
# pay one of accepts[] via an x402 client, then retry with the payment headerDetails
- Provider
- apiacre.com
- Endpoint
- https://apiacre.com/v1/web/email-auth
- Machine-readable
/resources/27723.json