Skip to content
We use cookies to improve the site and measure traffic. See our Cookie Policy. You can accept or reject non-essential cookies.
  • Free
  • No signup
  • Fast
  • Privacy-friendly

Back to Category

SPF / DKIM / DMARC Checker

Look up SPF, common DKIM selectors, and DMARC TXT records for a domain or URL hostname.

Waiting for bot check… this usually takes a second.

What next?

Keep going with SPF / DKIM / DMARC Checker

Finish this check in the browser, then pick the path that matches how you work — another related tool, REST for apps, or MCP for agents.

  1. 1. Related check

    After this result, run TLS certificate checker for the next signal.

    TLS certificate checker
  2. 2. Automate with API

    Same job from your server with X-Api-Key. Free tier includes 500 credits/month.

    Create free account
  3. 3. Hand off to an agent

    Connect Cursor or Claude to ToolYour MCP — plan → run → verify.

    MCP setup

What is SPF / DKIM / DMARC Checker?

Email deliverability and spoofing defense start with DNS: SPF at the apex, DKIM selectors, and DMARC at _dmarc. ToolYour SPF/DKIM/DMARC Checker looks up TXT on the apex (www hosts are stripped to the registrable domain), probes common DKIM selectors (including Cloudflare cf2024-*), and scores presence with fix advice. Custom ESP selectors may not appear — check your provider docs. REST/MCP: /api/v1/security-apis/spf-dkim-dmarc-checker.

What are common questions about SPF / DKIM / DMARC Checker?

Why is DKIM only a warning when missing?

We probe common selectors (google, selector1, default, Cloudflare cf2024-1/cf2024-2, …). Your ESP may use a custom name we did not try — confirm in their control panel.

Can I pass a full URL?

Yes — we extract the hostname. If you pass https://www.example.com, SPF/DMARC/DKIM are looked up on example.com (apex), where those records live.

What are the key features of SPF / DKIM / DMARC Checker?

SPF + DKIM + DMARC together

One report instead of three thin DNS tools.

Record snippets

Shows found TXT values truncated for readability.

How do you use SPF / DKIM / DMARC Checker?

Publish missing records

Add SPF, then DKIM from your ESP, then DMARC starting at p=none if needed.

Enter the sending domain

Use the apex you publish SPF for (often the From domain).

Rollout tip

Start DMARC at p=none with rua reporting, fix alignment, then move to quarantine/reject. Pair with TLS and headers checks for a broader web posture.

Free · API · MCPToolYour platform

Use SPF / DKIM / DMARC Checker three ways

The free SPF / DKIM / DMARC Checker on this page works in your browser. The same workflow is available via REST API for apps and via the remote MCP server for Cursor, Claude, and other agents — one API key, one plan, one quota. This tool is part of the security-apis module under Security Tools.

  1. 1Create a free accountGet an API key for REST and MCP — 500 credits/month on the free tier.
  2. 2Connect or callPaste the MCP URL into Cursor/Claude, or call REST with X-Api-Key.
  3. 3Same key & creditsBrowser smoke-checks stay free; API-backed runs share one monthly credit quota.