RadarPricesOrder

Home › APIs › Websites & security

Websites & security

DMARC SPF MX Lookup API

In plain words

Checks if a domain's e-mail is set up right, so your messages don't land in spam.

Used by: Web agencies, IT admins, security and sales teams.

Check the email DNS setup of up to 50 domains per call: MX records (do the hosts resolve), SPF (parsed, DNS lookup count against the limit of 10 with includes resolved), DMARC (policy, pct, reports, alignment), DKIM for your selectors and common ones, MTA-STS, TLS-RPT and BIMI, with a score, a grade and a fix for every issue. Change monitor mode returns only domains whose records changed. A resolver outage is reported as unavailable, never as no record.

Try it live, no sign-up

Run the example as is, or change the input. 5 own tries a day without a key.

Example request

curl -X POST https://radarbg.com/v1/email-dns-dmarc-spf-check \
  -H "X-API-Key: YOUR_KEY" -H "Content-Type: application/json" \
  -d '{"domains": ["google.com", "github.com", "example.com"], "dkimSelectors": ["selector1"], "onlyNew": false, "monitorId": "default"}'

Answer: {"ok": true, "count": N, "items": [...], "usage": {...}}. Failed calls are not counted.

Inputs

FieldTypeDescription
domainsarrayDomains to check, up to 50 per call, bare names like example.com (no https://, no mailbox). The API answers 400 above 50 (the Actor checks the first 50). Each row shows your input and the checked (lowercased) domain; duplicates are checked
domainstringOptional: exactly one domain, e.g. example.com. It is never split: a value with spaces, commas, semicolons or new lines returns one invalid_format row. Use domains for a list.
dkimSelectorsarrayOptional. Your own DKIM selector names (the part before ._domainkey), up to 20 (the API answers 400 above 20 or for an invalid name), for example s1 or mimecast20240101. They are checked in addition to the common ones: google, selector1, se
onlyNewbooleanReturn only domains whose MX, SPF, DMARC, DKIM, MTA-STS, TLS-RPT or BIMI records changed since the last run with this Monitor ID (the first run returns all). Use it on a schedule to watch your domains or your customers' domains.
monitorIdstringName of the watch list for the changed-domains mode, e.g. my-domains. Each Monitor ID keeps its own memory.

Price

Included in every plan: 500 calls a month free, then from €5 a month for 5,000 calls across all APIs.

Questions

What does the DMARC SPF MX Lookup API do?

Checks if a domain's e-mail is set up right, so your messages don't land in spam.

Where does the data come from?

Check the email DNS setup of up to 50 domains per call: MX records (do the hosts resolve), SPF (parsed, DNS lookup count against the limit of 10 with includes resolved), DMARC (policy, pct, reports, alignment), DKIM for your selectors and common ones, MTA-STS, TLS-RPT and BIMI, with a score, a grade and a fix for every issue. Change monitor mode returns only domains whose records changed. A resolv

How much does it cost?

500 calls a month are free with no card. Paid plans start at EUR 5 a month for 5,000 calls and include every API on Radar. Failed calls are not counted.

Can I use it without writing code?

Yes. Try it live on this page, use our free browser tools, or ask us to run it on your list as a service.

Related APIs

Domain Security ReportOne security check-up for a website and its e-mail, with the exact fix for each problem.
Domain WHOIS LookupSee who a domain belongs to, when it expires and when its SSL certificate runs out.
Lighthouse PageSpeed CheckerMeasures how fast a website loads on phones and computers, with Google's scores.
Link Preview APIGets the title, picture and description of any link, like the preview you see in chat apps.
Package VulnerabilitiesTells you if a software package version has known security holes.
Security Headers & SSL Certificate Checker APIGrades a website's security settings and SSL certificate from A+ to F.