Infrastructure x402 offerings

Change watch for dkim selector smtpapi: runs the check, compares it with the result from your previous call for the same domain (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

DKIM public key for selector "sparkpost" of a domain: looks up sparkpost._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the sparkpost selector will verify. $0.01 per lookup.

DKIM public key for selector "squarespace" of a domain: looks up squarespace._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the squarespace selector will verify. $0.01 per lookup.

DKIM public key for selector "wix" of a domain: looks up wix._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the wix selector will verify. $0.01 per lookup.

DKIM public key for selector "yahoo" of a domain: looks up yahoo._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the yahoo selector will verify. $0.01 per lookup.

DKIM public key for selector "yesware" of a domain: looks up yesware._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the yesware selector will verify. $0.01 per lookup.

DKIM public key for selector "zendesk2" of a domain: looks up zendesk2._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the zendesk2 selector will verify. $0.01 per lookup.

DKIM public key for selector "zoho" of a domain: looks up zoho._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the zoho selector will verify. $0.01 per lookup.

Change watch for dkim selector zoho: runs the check, compares it with the result from your previous call for the same domain (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

DKIM public key for selector "zohomail" of a domain: looks up zohomail._domainkey.<domain> (TXT, Cloudflare DoH) and parses v=, k=, key type, public-key length, testing flag and whether the key is revoked (empty p=). Confirms that mail signed with the zohomail selector will verify. $0.01 per lookup.

Fetch and validate a domain's DMARC policy at _dmarc.<domain> (RFC 7489). Surfaces the enforcement policy (none/quarantine/reject), reporting addresses, alignment modes, and common misconfigs (no rua, p=none stuck for months, percent <100). Pair with SPF and DKIM for full Feb-2024 sender-rule compliance.

Change watch for dmarc tag adkim: runs the check, compares it with the result from your previous call for the same domain (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

DMARC aspf= tag for a domain: SPF alignment mode. Reads _dmarc.<domain> (Cloudflare DoH), parses the record and returns the aspf value (or that it is absent, with the default that then applies) plus the full record. Precise single-answer check for compliance scripts. $0.01 per lookup.

Change watch for dmarc tag aspf: runs the check, compares it with the result from your previous call for the same domain (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

Change watch for dmarc tag p: runs the check, compares it with the result from your previous call for the same domain (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

DMARC pct= tag for a domain: percentage of messages the policy applies to. Reads _dmarc.<domain> (Cloudflare DoH), parses the record and returns the pct value (or that it is absent, with the default that then applies) plus the full record. Precise single-answer check for compliance scripts. $0.01 per lookup.

Change watch for dmarc tag pct: runs the check, compares it with the result from your previous call for the same domain (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

DMARC ri= tag for a domain: report interval seconds. Reads _dmarc.<domain> (Cloudflare DoH), parses the record and returns the ri value (or that it is absent, with the default that then applies) plus the full record. Precise single-answer check for compliance scripts. $0.01 per lookup.

Change watch for dmarc tag ri: runs the check, compares it with the result from your previous call for the same domain (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

DMARC rua= tag for a domain: aggregate report addresses. Reads _dmarc.<domain> (Cloudflare DoH), parses the record and returns the rua value (or that it is absent, with the default that then applies) plus the full record. Precise single-answer check for compliance scripts. $0.01 per lookup.

Change watch for dmarc tag rua: runs the check, compares it with the result from your previous call for the same domain (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

DMARC ruf= tag for a domain: forensic report addresses. Reads _dmarc.<domain> (Cloudflare DoH), parses the record and returns the ruf value (or that it is absent, with the default that then applies) plus the full record. Precise single-answer check for compliance scripts. $0.01 per lookup.

Change watch for dmarc tag ruf: runs the check, compares it with the result from your previous call for the same domain (kept 90 days) and returns the current answer, changed true/false, the fields that changed with before/after values, and when it was last seen. Schedule it to be alerted when this changes. $0.02 per check.

DMARC sp= tag for a domain: policy for subdomains. Reads _dmarc.<domain> (Cloudflare DoH), parses the record and returns the sp value (or that it is absent, with the default that then applies) plus the full record. Precise single-answer check for compliance scripts. $0.01 per lookup.