DOMAIN & EMAIL SECURITY

Turn DNS and email policies into structured checks.

Inspect a domain's public configuration through one API. Use individual findings in setup assistants, agency reports and technical support tools, with the checked coverage included in every response.

Start with 25 free domain audits

Checks and their boundaries

Check	Current coverage
DNS and MX	Public records and mail-routing configuration.
SPF	Record configuration and bounded include traversal; not a sender-IP evaluation.
DKIM	Published keys for selectors supplied in the request; not message-signature verification.
DMARC	Direct-domain policy syntax; organizational-domain discovery and message alignment are not evaluated.
BIMI	Record syntax, not logo, VMC or CMC validation.
MTA-STS and TLS-RPT	Published records and HTTPS policy.
DNSSEC	Authentication evidence reported by the DNS resolver; an unavailable result remains unknown.
HTTPS certificate	Public port 443, hostname, trust and expiry checks; not SMTP/STARTTLS.

Tell the API which DKIM selectors to inspect

POST https://api.apivect.com/v1/domains/audit
Authorization: Bearer YOUR_API_KEY
Content-Type: application/json
Idempotency-Key: domain-audit-example-0001

{"domain":"apivect.com","dkimSelectors":["default"]}

Selector names are supplied by the domain's mail provider. Without a selector, DKIM is marked as not tested rather than reported as missing.

Interpret findings individually

Check statuses include pass, warning, fail, unknown and not_tested. A completed audit counts as one operation even when configuration problems are found. A wholly inconclusive operation consumes zero units. Exact idempotent retries within 24 hours do not add usage.

Bounded public network access

ApiVect rejects IP literals, local names and nonpublic destinations. HTTPS checks use fixed paths, port 443, certificate validation and no redirects. DNS queries go to Cloudflare's public DNS-over-HTTPS resolver. No SMTP messages are sent.

This endpoint provides an on-demand configuration audit. Scheduled monitoring, inbox-placement testing, domain ownership verification and deliverability guarantees are not included. Read the quickstart, API schemas and usage plans.