Email authentication posture

What you receive

Demonstration data only. The paid endpoint returns a fresh result and settlement receipt.

{
  "request_id": "018f1f54-7f38-7ba2-8dc3-5f90272d9f1a",
  "service": "web.email-auth",
  "version": "1",
  "data": {
    "domain": "apiacre.com",
    "mailRouting": {
      "mode": "explicit_mx",
      "mxRecords": [
        "10 mail.protonmail.ch.",
        "20 mailsec.protonmail.ch."
      ],
      "nullMx": false,
      "addressFallbackObserved": true
    },
    "spf": {
      "configured": true,
      "recordCount": 1,
      "records": [
        "v=spf1 include:_spf.protonmail.ch ~all"
      ],
      "multipleRecords": false,
      "allQualifier": "softfail",
      "directDnsMechanismCount": 1
    },
    "dmarc": {
      "configured": true,
      "recordCount": 1,
      "records": [
        "v=DMARC1; p=quarantine"
      ],
      "multipleRecords": false,
      "policy": "quarantine",
      "subdomainPolicy": null,
      "percentage": null,
      "aggregateReportingConfigured": false,
      "forensicReportingConfigured": false,
      "dkimAlignment": null,
      "spfAlignment": null
    },
    "dkim": {
      "checked": true,
      "checkedSelectors": [
        "protonmail"
      ],
      "selectors": [
        {
          "selector": "protonmail",
          "configured": true,
          "recordCount": 1,
          "multipleRecords": false,
          "revoked": false,
          "keyType": "rsa",
          "publicKeySha256": "cc2f27246460f945974ac7bf0282287809d7f7c76757b4cdad5590fa38a80f69"
        }
      ],
      "reason": null
    },
    "optionalPolicies": {
      "mtaSts": {
        "configured": false,
        "recordCount": 0,
        "records": []
      },
      "tlsReporting": {
        "configured": false,
        "recordCount": 0,
        "records": []
      },
      "bimi": {
        "configured": false,
        "recordCount": 0,
        "records": []
      }
    },
    "posture": {
      "status": "enforcing",
      "basis": "published DNS records only"
    },
    "findings": [],
    "provenance": {
      "source": "recursive DNS",
      "queries": [
        "apiacre.com A",
        "apiacre.com AAAA",
        "apiacre.com MX",
        "apiacre.com TXT",
        "_dmarc.apiacre.com TXT",
        "protonmail._domainkey.apiacre.com TXT",
        "_mta-sts.apiacre.com TXT",
        "_smtp._tls.apiacre.com TXT",
        "default._bimi.apiacre.com TXT"
      ],
      "queryCount": 9
    },
    "limitations": [
      "DNS answers are a time-specific recursive-resolver snapshot and may be cached.",
      "DKIM is checked only for selectors explicitly supplied by the caller.",
      "Published records do not prove delivery, domain ownership, sender identity, or message authenticity."
    ],
    "checkedAt": "2026-08-12T18:03:16+00:00",
    "collectionMs": 19
  },
  "meta": {
    "duration_ms": 42,
    "cached": false,
    "sources": [],
    "warnings": [],
    "next_actions": []
  }
}