Email Deliverability Auditor — SPF, DKIM, DMARC & Blacklist

Check email deliverability for any domain in seconds. Email Deliverability Auditor reads the public DNS records that decide whether your email lands in the inbox or the spam folder — SPF, DKIM, DMARC, MX, MTA-STS, BIMI and DNSSEC — checks your mail server against DNS blacklists, and returns a 0–100 deliverability score with a prioritized list of fixes. Audit one domain or thousands in bulk, export to JSON, CSV or Excel, run it on a schedule, or call it from an API or AI agent.

Since February 2024, Gmail and Yahoo require SPF, DKIM and DMARC for anyone sending bulk email. This Actor tells you, per domain, exactly what is configured, what is missing, and what to fix — no login, no SMTP connection, just fast and reliable DNS lookups.

What does Email Deliverability Auditor do?

It runs a full email authentication and deliverability audit on every domain you give it. For each domain it checks:

• SPF — is a valid v=spf1 record present, and is the policy strict (-all), soft-fail (~all) or dangerously open (+all)?
• DKIM — probes ~30 common selectors (Google, Microsoft, SendGrid, Mailchimp, Amazon SES, Zoho, Proton and more) plus any selectors you add, and reports which keys exist.
• DMARC — is a record present, and is the policy none, quarantine or reject? Is an aggregate-report (rua) address set?
• MX — can the domain receive mail, and on which servers?
• MTA-STS, BIMI, DNSSEC — the modern trust signals that boost inbox placement and brand visibility.
• DNS blacklists (DNSBL) — is the mail server IP listed on SpamCop, SORBS, Barracuda, UCEPROTECT or s5h?

You get a deliverability score (0–100), an A–F grade, clear canSendEmail / canReceiveEmail flags, and a plain-English recommendations list. Built on Apify, so you also get scheduling, a REST API, webhooks, integrations (Google Sheets, Slack, Zapier, Make) and monitoring for free.

Why use Email Deliverability Auditor?

• Cold email & outreach agencies — audit every client domain before a campaign so messages don't bounce or land in spam.
• Email deliverability consultants — generate a per-domain report and fix list in one run instead of checking records by hand.
• Sales & lead-gen teams — validate your sending domains and check prospects' domains for email infrastructure.
• IT / DevOps / security — monitor SPF/DKIM/DMARC and SSL-adjacent mail settings across a whole portfolio and catch blacklisting early.
• Agencies & MSPs — offer a "free email health check" as a lead magnet, then bulk-audit hundreds of prospect domains.

How to use Email Deliverability Auditor to check email deliverability

1. Click Try for free / open the Actor in Apify Console.
2. In Domains to audit, paste your domains, one per line (example.com). You can also paste an email address or a URL — the domain is extracted for you.
3. (Optional) Add extra DKIM selectors if your provider uses an uncommon one, and toggle Check DNS blacklists on or off.
4. Click Start. Results stream into the dataset as each domain finishes.
5. Export the results as JSON, CSV, Excel or HTML, or pull them from the API.

Input

Configure everything on the Input tab — no code needed. Fields:

• domains (required) — list of domains to audit.
• dkimSelectors (optional) — extra DKIM selectors to probe.
• checkBlacklists (default true) — check mail-server IPs against DNS blacklists.
• concurrency (default 10) — how many domains to audit in parallel.

Example input:

{
  "domains": ["example.com", "mycompany.com"],
  "checkBlacklists": true,
  "concurrency": 10
}

Output

One clean record per domain. Download as JSON, HTML, CSV or Excel, or fetch from the API.

{
  "domain": "example.com",
  "deliverabilityScore": 82,
  "grade": "B",
  "canSendEmail": true,
  "canReceiveEmail": true,
  "spf": { "found": true, "policy": "soft-fail (~all)", "record": "v=spf1 include:_spf.google.com ~all" },
  "dkim": { "found": true, "selectors": ["google", "selector1"] },
  "dmarc": { "found": true, "policy": "quarantine", "reportingAddress": "mailto:dmarc@example.com" },
  "mx": { "found": true, "servers": ["aspmx.l.google.com"] },
  "mtaSts": { "found": false, "mode": null },
  "bimi": { "found": false },
  "dnssec": { "enabled": false },
  "blacklist": { "checked": true, "listed": false, "listedOn": [], "ipsChecked": ["142.250.110.27"] },
  "recommendations": [
    "DNSSEC is not enabled — turn it on at your DNS host to prevent DNS spoofing.",
    "Add MTA-STS to enforce TLS on inbound mail (optional but recommended)."
  ],
  "checkedAt": "2026-07-10T12:00:00+00:00"
}

Data fields

Field	Description
domain	The audited domain
deliverabilityScore	Overall score 0–100
grade	Letter grade A–F
canSendEmail	SPF + DKIM + DMARC all present
canReceiveEmail	Domain has MX records
spf	SPF presence, raw record, enforcement policy
dkim	DKIM presence and detected selectors
dmarc	DMARC presence, policy, reporting address
mx	Mail servers
mtaSts / bimi / dnssec	Modern trust-signal checks
blacklist	DNSBL status of the mail-server IP
recommendations	Prioritized, plain-English fixes
checkedAt	ISO-8601 audit timestamp

How much does it cost to check email deliverability?

The Actor is lightweight — it makes only DNS queries, so runs are fast and cheap. Free-plan users can audit up to 5 domains per run to try it out. To audit larger lists and unlock full throughput, subscribe to an Apify plan. Actual cost depends on your list size and whether blacklist checks are enabled.

Tips

• Turn off blacklist checks for the fastest possible DNS-record-only audit of very large lists.
• If DKIM shows as "not found" for a domain you know signs mail, add its selector under Extra DKIM selectors — some providers use custom selector names.
• Schedule a daily or weekly run to monitor your sending domains and get alerted (via integration/webhook) when a record changes or an IP gets blacklisted.
• A domain with canSendEmail: false is at high risk of landing in spam — fix SPF, DKIM and DMARC first.

FAQ

What is email deliverability?

Email deliverability is whether your messages actually reach the inbox instead of the spam folder or a bounce. It depends heavily on your domain's DNS authentication records — SPF, DKIM and DMARC — which this Actor audits.

Do Gmail and Yahoo require DMARC?

Yes. Since February 2024, Gmail and Yahoo require valid SPF, DKIM and DMARC for bulk senders. Domains without them see mail rejected or sent to spam. This Actor shows you exactly which are missing.

Is this an email verification tool?

No — email verification checks whether a specific address exists. This Actor audits a domain's email infrastructure (SPF, DKIM, DMARC, MX, blacklists) to measure deliverability. They solve different problems and work well together.

Does it need my email login or send any mail?

No. It only reads public DNS records and (optionally) a public MTA-STS policy file over HTTPS. No credentials, no SMTP, nothing sent.

Can I run this from an AI agent or MCP?

Yes. Every Apify Actor is callable from the API and via the Apify MCP server, so an AI agent (Claude, Cursor, custom agents) can audit domains and read the structured results directly.

Is checking DNS records legal?

Yes. SPF, DKIM, DMARC, MX and blacklist records are public DNS data published by the domain owner for exactly this purpose. This Actor performs standard, read-only DNS lookups.

Support & custom solutions

Found a bug or want a new check added? Open an issue on the Issues tab.

💼 Need a custom scraping or automation solution? Email youssefarhan24@gmail.com. 🌐 Got a site or data source you want an Actor for? Suggest it here.