B2B Domain Email Security & Deliverability Auditor (SPF / DMARC / DKIM / MX)

Audit up to 1,000 corporate domains per run for email deliverability posture, email gateway provider classification (google_workspace, microsoft_365, proofpoint, mimecast, cloudflare, amazon_ses, zoho), SPF enforcement, DMARC policy (reject / quarantine / none), active DKIM selectors, BIMI presence, and stateful DNS configuration drift.

Companion B2B Email & Lead Tools:

• Discover verified corporate email addresses from a person's name + company domain: Corporate Email Finder & Verifier (invaluable_rondeau/corporate-email-finder-verifier)
• Pre-send B2B email hygiene gate (allow / review / suppress): B2B Email Deliverability Risk Gate (invaluable_rondeau/b2b-email-deliverability-risk-gate)
• High-volume MX verification up to 50,000 emails at $0.001/email: Bulk Email Verifier (invaluable_rondeau/email-verifier-bulk)

Why Use This Actor?

• Lead Segmentation by Email Gateway: Filter B2B prospect lists by whether they use Google Workspace, Microsoft 365, or strict enterprise gateways (Proofpoint / Mimecast) before launching outreach.
• Sender Domain Hygiene & Spoofing Audit: Verify that all your outbound domains and client domains have valid single-record SPF (-all / ~all), enforced DMARC (p=quarantine / p=reject + rua), and active DKIM keys.
• Scheduled Drift Detection: Set stateId and schedule weekly runs to catch accidental SPF/DMARC regressions (changeType: "changed").

Input Example

{
  "domains": [
    "microsoft.com",
    "apify.com",
    "github.com"
  ],
  "dkimSelectors": ["default", "google", "selector1", "selector2", "k1", "s1"],
  "stateId": "weekly-domain-audit",
  "timeoutMs": 2000
}

Output Example

{
  "domain": "apify.com",
  "isValidDomain": true,
  "hasMx": true,
  "mxProvider": "google_workspace",
  "mxHosts": ["aspmx.l.google.com", "alt1.aspmx.l.google.com"],
  "spfPresent": true,
  "spfPolicy": "softfail (~all)",
  "dmarcPresent": true,
  "dmarcPolicy": "reject",
  "dkimSelectorsFound": ["google"],
  "hasBimi": false,
  "score": 95,
  "verdict": "strong",
  "findings": [],
  "recommendations": [],
  "fingerprint": "9f81c3a04b12e7d1",
  "changeType": "baseline",
  "isBillable": true,
  "checkedAt": "2026-10-20T04:00:00.000Z"
}

Pricing (Pay-Per-Event)

• Event: domain-audited ($0.005 per valid domain audited — $5.00 per 1,000 domains).
• Duplicate domains are automatically deduplicated before auditing, and malformed domain strings are not charged.

---

AI Agent (MCP) & Automation Integration (Claude, Cursor, n8n, Clay, Make)

This Actor is Agentic-Payment & MCP Ready (LIMITED_PERMISSIONS, 256 MB fast cold-start, synchronous JSON output).

1. Claude Desktop / Cursor / Windsurf MCP Configuration

Add to claude_desktop_config.json or .cursor/mcp.json:

{
  "mcpServers": {
    "apify-b2b-quant": {
      "command": "npx",
      "args": [
        "-y",
        "@apify/actors-mcp-server",
        "--actors",
        "invaluable_rondeau/b2b-domain-email-security-auditor"
      ],
      "env": {
        "APIFY_TOKEN": "YOUR_APIFY_TOKEN"
      }
    }
  }
}

2. Synchronous HTTP Webhook (n8n, Make, Clay, Zapier, cURL)

Call the synchronous dataset endpoint to get clean JSON items in a single HTTP request:

curl -X POST "https://api.apify.com/v2/acts/invaluable_rondeau~b2b-domain-email-security-auditor/run-sync-get-dataset-items?token=$APIFY_TOKEN&memory=256&clean=true" \
  -H "Content-Type: application/json" \
  -d '{}'

3. Search Keywords & Supported Workflows

Compatible with Model Context Protocol (MCP), Clay.com HTTP API enrichment, n8n HTTP Request node, Make.com, Zapier, LangChain, and OpenAI Agent SDK. Built as a high-margin, pay-per-event alternative to rigid monthly SaaS subscriptions (MXToolbox, EasyDMARC, Valimail, dmarcian, SecurityTrails alternative for bulk SPF, DMARC, DKIM, BIMI, MTA-STS, and MX security auditing).