Home › APIs › Websites & security
DMARC SPF MX Lookup API
Checks if a domain's e-mail is set up right, so your messages don't land in spam.
Used by: Web agencies, IT admins, security and sales teams.
Check the email DNS setup of up to 50 domains per call: MX records (do the hosts resolve), SPF (parsed, DNS lookup count against the limit of 10 with includes resolved), DMARC (policy, pct, reports, alignment), DKIM for your selectors and common ones, MTA-STS, TLS-RPT and BIMI, with a score, a grade and a fix for every issue. Change monitor mode returns only domains whose records changed. A resolver outage is reported as unavailable, never as no record.
Try it live, no sign-up
Run the example as is, or change the input. 5 own tries a day without a key.
Example request
curl -X POST https://radarbg.com/v1/email-dns-dmarc-spf-check \
-H "X-API-Key: YOUR_KEY" -H "Content-Type: application/json" \
-d '{"domains": ["google.com", "github.com", "example.com"], "dkimSelectors": ["selector1"], "onlyNew": false, "monitorId": "default"}'
Answer: {"ok": true, "count": N, "items": [...], "usage": {...}}. Failed calls are not counted.
Inputs
| Field | Type | Description |
|---|---|---|
domains | array | Domains to check, up to 50 per call, bare names like example.com (no https://, no mailbox). The API answers 400 above 50 (the Actor checks the first 50). Each row shows your input and the checked (lowercased) domain; duplicates are checked |
domain | string | Optional: exactly one domain, e.g. example.com. It is never split: a value with spaces, commas, semicolons or new lines returns one invalid_format row. Use domains for a list. |
dkimSelectors | array | Optional. Your own DKIM selector names (the part before ._domainkey), up to 20 (the API answers 400 above 20 or for an invalid name), for example s1 or mimecast20240101. They are checked in addition to the common ones: google, selector1, se |
onlyNew | boolean | Return only domains whose MX, SPF, DMARC, DKIM, MTA-STS, TLS-RPT or BIMI records changed since the last run with this Monitor ID (the first run returns all). Use it on a schedule to watch your domains or your customers' domains. |
monitorId | string | Name of the watch list for the changed-domains mode, e.g. my-domains. Each Monitor ID keeps its own memory. |
Price
Included in every plan: 500 calls a month free, then from €5 a month for 5,000 calls across all APIs.
Questions
What does the DMARC SPF MX Lookup API do?
Checks if a domain's e-mail is set up right, so your messages don't land in spam.
Where does the data come from?
Check the email DNS setup of up to 50 domains per call: MX records (do the hosts resolve), SPF (parsed, DNS lookup count against the limit of 10 with includes resolved), DMARC (policy, pct, reports, alignment), DKIM for your selectors and common ones, MTA-STS, TLS-RPT and BIMI, with a score, a grade and a fix for every issue. Change monitor mode returns only domains whose records changed. A resolv
How much does it cost?
500 calls a month are free with no card. Paid plans start at EUR 5 a month for 5,000 calls and include every API on Radar. Failed calls are not counted.
Can I use it without writing code?
Yes. Try it live on this page, use our free browser tools, or ask us to run it on your list as a service.