Email & Domain Live on RapidAPI & Zyla POST /v1/email-dns

Email Deliverability & DNS Auditor API — Check SPF, DMARC, MX, BIMI & MTA-STS

Audit MX, SPF 10-lookup limits, DMARC, DKIM, BIMI, and MTA-STS with a 0–100 score. Audit domain email deliverability via DNS-over-HTTPS: validate MX, SPF lookup limits (<10), DMARC policy, DKIM selectors, BIMI, and MTA-STS.

Try It Live in Your Browser · No API Key Required

1. Interactive Sandbox & Sample JSON Output

200 OK · Ready

Editable Request JSON (`POST /v1/email-dns`)

Live 200 OK Response Envelope

{
  "ok": true,
  "data": {
    "domain": "cloudflare.com",
    "score": 95,
    "grade": "A",
    "checks": {
      "mx": {
        "status": "pass",
        "score": 20,
        "max_score": 20,
        "records": [
          "10 isaac.mx.cloudflare.net",
          "20 linda.mx.cloudflare.net"
        ],
        "issues": [],
        "fix": null
      },
      "spf": {
        "status": "pass",
        "score": 25,
        "max_score": 25,
        "records": [
          "v=spf1 ip4:199.15.212.0/22 include:_spf.google.com -all"
        ],
        "issues": [],
        "fix": null
      },
      "dmarc": {
        "status": "pass",
        "score": 25,
        "max_score": 25,
        "records": [
          "v=DMARC1; p=reject; sp=reject; pct=100; rua=mailto:dmarc@cloudflare.com"
        ],
        "issues": [],
        "fix": null
      },
      "dkim": {
        "status": "pass",
        "score": 20,
        "max_score": 20,
        "records": [
          "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A..."
        ],
        "issues": [],
        "fix": null,
        "found_selectors": [
          "cf2024-1"
        ],
        "checked_selectors": [
          "cf2024-1"
        ]
      },
      "mta_sts": {
        "status": "warn",
        "score": 5,
        "max_score": 10,
        "records": [
          "v=STSv1; id=20260101T000000Z"
        ],
        "issues": [],
        "fix": null
      }
    },
    "fixes": []
  },
  "meta": {
    "request_id": "req_edns_01",
    "ms": 42
  }
}

Get API Key on RapidAPI Get API Key on Zyla Hub Download OpenAPI 3.0.3 Spec

2. Quickstart Code Examples

Full TypeScript & Python SDK →

curl -X POST "https://api.tinplate.dev/v1/email-dns" \
  -H "Content-Type: application/json" \
  -H "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY" \
  -d '{"domain":"cloudflare.com","dkim_selectors":["cf2024-1"]}'

import { TinplateClient } from "@tinplate/sdk"; // npm install @tinplate/sdk

const tinplate = new TinplateClient({
  rapidApiKey: process.env.RAPIDAPI_KEY!,
});

const { data, meta } = await tinplate.call("/v1/email-dns", {
  "domain": "cloudflare.com",
  "dkim_selectors": [
    "cf2024-1"
  ]
});
console.log(`[${meta.ms} ms]`, data);

import requests

response = requests.post(
    "https://api.tinplate.dev/v1/email-dns",
    headers={
        "Content-Type": "application/json",
        "X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
    },
    json={
  "domain": "cloudflare.com",
  "dkim_selectors": [
    "cf2024-1"
  ]
}
)
print(response.json())

const response = await fetch("https://api.tinplate.dev/v1/email-dns", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
  },
  body: JSON.stringify({
  "domain": "cloudflare.com",
  "dkim_selectors": [
    "cf2024-1"
  ]
}),
});
const result = await response.json();
console.log(result);

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "tinplate_email_dns",
    "arguments": {
      "domain": "cloudflare.com",
      "dkim_selectors": [
        "cf2024-1"
      ]
    }
  }
}

OpenAPI 3.0.3 Schema Contract

Request Parameters & Response Schema Reference

Request Body Parameters (`POST /v1/email-dns`)

Parameter	Type & Constraints	Description
`domain`required	`string` minLen: 3, maxLen: 253	Domain name or email address to audit (e.g. 'tinplate.dev' or 'hello@tinplate.dev').
`dkim_selectors`optional	`string[]`	Optional custom DKIM selectors to probe in addition to common defaults.

Response `data` Object Fields (`200 OK`)

Field	Type	Description
`domain`	`string`	Field 'domain'
`score`	`integer`	Field 'score'
`grade`	`"A" \| "B" \| "C" \| "D" \| "F"`	Field 'grade'
`checks`	`object`	Field 'checks'
`fixes`	`object[]`	Field 'fixes'

3. What Email DNS Deliverability Auditor API Detects & Validates

SPF RFC 7208 validation: recursive DNS lookup counter (flags >10 permerror), multiple SPF records, and +all/?all risks
DMARC RFC 7489 validation: p=none/quarantine/reject policy, subdomain sp=, pct=, and rua/ruf reporting URIs
MX record priority inspection, null MX (RFC 7505) detection, and DKIM selector probing
BIMI (default._bimi) and MTA-STS (_mta-sts) presence and syntax checks

Honest Engineering Boundaries

4. Known Limitations & Test Verification

Release Version: v1.0.7 · Last Verified / Benchmarked: 14 November 2026 · Latency Note: Sub-millisecond figures measure in-Worker V8 compute time (typical client HTTPS network RTT to the nearest Cloudflare PoP is 15–65 ms) · See Full Portfolio Benchmarks & Corpora →

DKIM requires knowing the selector names to query (e.g. google, selector1, s1) since DNS does not allow wildcard enumeration of _domainkey.
Queries live Cloudflare DNS-over-HTTPS (1.1.1.1); latency is typically 30–120 ms depending on SPF include depth.

5. Marketplace Plans & Payload Quotas

Plan	Monthly Price	Included Requests	Rate Limit	Max Request Payload	Best For
BASIC	$0.00 / month	500 / month (hard limit)	10 req / min	64 KB	Evaluation, local development & CI smoke tests
PRO	$9.99 / month	15,000 / month	60 req / min	128 KB	Solo developers & production apps
ULTRA	$29.99 / month	100,000 / month	300 req / min	256 KB	Growing SaaS & multi-agent pipelines
MEGA	$79.99 / month	500,000 / month	1,000 req / min	256 KB	High-volume enterprise workloads

Subscribe on RapidAPI Subscribe on Zyla Hub Full Pricing Details

6. Frequently Asked Questions

Does it count nested SPF include: lookups against the RFC 7208 10-lookup limit?

Yes, it traverses include, a, mx, ptr, and exists mechanisms to report the exact DNS lookup count.

What if I want to generate fixed SPF, DKIM, and DMARC records?

Pair this auditor with POST /v1/email-dns-generator to generate ready-to-publish DNS TXT records.

Why does Gmail/Yahoo bulk sender compliance require this?

Since 2024, Google and Yahoo require valid SPF, DKIM, and a DMARC record for all bulk senders.

Zero Payload Logging

7. Data Handling, Privacy & Marketplace Proxy Disclosure

Performs public DNS-over-HTTPS lookups only; no private data is stored.

Worker Zero-Logging Guarantee: Cloudflare Workers Observability and invocation logging are disabled in configuration (observability.enabled = false, head_sampling_rate = 0, invocation_logs = false). Payloads are processed strictly in volatile V8 memory and never logged or stored by Tinplate.

Marketplace Proxies vs. Direct Bearer Key: Requests sent via RapidAPI or Zyla API Hub pass through those marketplaces' proxy infrastructure (subject to their respective privacy policies). Security-sensitive workloads requiring end-to-end zero-intermediary processing can connect directly to https://api.tinplate.dev using a Direct Bearer Key (Authorization: Bearer <API_KEY>). Read our full Privacy Notice and OpenAPI 3.0.3 JSON Schema.