Email Security & Deliverability Audit
# MailSec — Email Security & Deliverability Audit **MailSec** turns a single domain name into a complete picture of how that domain handles email. In one request you get the state of every record that mail providers actually look at — SPF, DMARC, DKIM, DNSSEC, MX, BIMI, MTA-STS, TLS-RPT — plus Spamhaus blacklist status, a numeric security score, an A–F letter grade, and a plain-language…
1 subscribers
14 endpoints
The in-depth APIMemo review for this API hasn't been published yet —
the data below comes straight from the public marketplace listing.
Email Security & Deliverability Audit endpoints
| Method | Endpoint | Description |
|---|---|---|
| health | ||
| GET |
healthCheck /health |
|
| v1 | ||
| GET |
validateEmail /v1/email/validate |
Validates an email address: RFC 5322 syntax, IDN normalisation (via `idna.Lookup`), domain existence (NS), MX presence, SPF/DMARC presence (informational), and disposable-domain… |
| GET |
checkBIMI /v1/bimi/{domain} |
Checks the `default._bimi.` TXT record for a valid BIMI v1 record. Returns the parsed logo URL and VMC certificate URL when present. |
| GET |
checkMTASTS /v1/mta-sts/{domain} |
Checks the `_mta-sts.` TXT record and fetches the HTTPS policy file at `https://mta-sts./.well-known/mta-sts.txt` (RFC 8461). Returns parsed mode, MX patterns, max_age, and any… |
| GET |
checkDMARC /v1/dmarc/{domain} |
|
| GET |
checkDisposable /v1/email/disposable/{domain} |
Suffix-walks an embedded blocklist. For an exact match, `matchedAs` equals the input domain; for a suffix match, `matchedAs` is the parent registrable domain (e.g. probing… |
| POST |
auditBulk /v1/audit/bulk |
Audits up to 10 domains in parallel. Each input is validated per-item; validation failures are surfaced as a per-item `error` rather than failing the whole batch. |
| GET |
checkSPF /v1/spf/{domain} |
|
| GET |
checkDKIM /v1/dkim/{domain} |
Probes common DKIM selectors automatically. Pass `selector` to check a specific one. |
| GET |
checkMX /v1/mx/{domain} |
|
| GET |
checkDNSSEC /v1/dnssec/{domain} |
|
| GET |
checkTLSRPT /v1/tlsrpt/{domain} |
Checks the `_smtp._tls.` TXT record for a valid TLS-RPT v1 record (RFC 8460). Returns the parsed reporting URIs and any validation issues. Informational only — not included in… |
| GET |
auditDomain /v1/audit/{domain} |
Runs all checks (SPF, DMARC, DKIM, DNSSEC, MX, blacklists) and returns a combined result with a score (0–100), grade (A–F), and deliverability verdict. |
| GET |
checkDeliverability /v1/deliverability/{domain} |
Combines SPF, DMARC, DKIM, MX, and Spamhaus DBL/ZEN blacklist checks into a single deliverability verdict (READY / CAUTION / BLOCKED). Scoring uses a 4-component scale (no… |
Email Security & Deliverability Audit pricing
| Plan | Price | Rate limit | Quotas |
|---|---|---|---|
| BASIC | Free | 2 / second |
|
| PRO | $29 / month | 10 / second |
|
| ULTRA | $99 / month | 50 / second |
|
