🛡️ Domain & Email Deliverability Auditor (SPF, DMARC, MX, SSL)

Instant DNS, email deliverability, and domain health audit for cold email campaigns, sales automation, and AI agents.

Audit any domain in under 1 second to verify whether it complies with modern inbox requirements (Google, Yahoo, Microsoft), detect missing SPF or DMARC policies, inspect MX mail servers, check SSL certificate expiration, and receive an actionable 0–100% Deliverability Health Score (Grade A–F).

---

⚡ Why Deliverability Matters in 2026

Google, Yahoo, and Microsoft enforce strict email authentication rules:

• Missing or misconfigured SPF: Messages are flagged as spam or dropped.
• Missing DMARC policy: Bulk senders without DMARC face immediate rejections.
• Dangerous qualifiers (+all or ?all): Allows spoofers to forge emails from your domain.
• Expiring SSL certificates: Triggers browser and security gateway warnings.

This Actor allows sales teams, email marketers (Instantly, Smartlead, Lemlist), and AI agents to audit domains before launching outreach campaigns or adding sending accounts.

---

🔍 What Data Is Audited?

Check	What It Validates	Example Result
Health Score	Overall deliverability rating (0–100) & Grade	95 / 100 (Grade A - Inboxing Ready)
SPF	Record presence, multiple record check, qualifiers, ESP includes	{"valid": true, "status": "softfail", "qualifier": "~all"}
DMARC	Record presence, policy enforcement (p=reject/quarantine/none), rua	{"valid": true, "policy": "reject", "rua": ["dmarc@..."]}
MX Records	Mail exchange servers, priorities, and email provider	[{"host": "aspmx.l.google.com", "provider": "Google Workspace"}]
SSL Certificate	Certificate validity, issuer, and days until expiration	{"valid": true, "issuer": "Let's Encrypt", "daysRemaining": 78}
DKIM	Common selector detection (google, default, k1, s1)	{"found": true, "selector": "google"}
Recommendations	Actionable next steps to reach 100% inbox deliverability	["Upgrade DMARC policy from none to quarantine"]

---

🤖 MCP (Model Context Protocol) Integration

Plug this Actor directly into Claude Desktop, Cursor, or custom autonomous agents using Apify MCP:

Claude Desktop Configuration (claude_desktop_config.json)

{
  "mcpServers": {
    "apify": {
      "command": "npx",
      "args": [
        "-y",
        "@apify/mcp-server",
        "--actors",
        "knobby_wallpaper/domain-email-deliverability-auditor"
      ],
      "env": {
        "APIFY_TOKEN": "YOUR_APIFY_API_TOKEN"
      }
    }
  }
}

Now your AI agent can automatically audit domains:

"Audit stripe.com and tell me if their DMARC policy is set to reject."

---

📥 Input Parameters

Parameter	Type	Required	Default	Description
startUrls	Array	Yes	[{"url": "https://apify.com"}]	Domains or website URLs to audit.
checkSsl	Boolean	No	true	Verify SSL certificate validity and expiration days.
checkDkim	Boolean	No	true	Test standard DKIM selectors (google, default, k1, etc.).
customDkimSelector	String	No	""	Optional specific DKIM selector if known.

Example Input

{
  "startUrls": [
    { "url": "https://apify.com" },
    { "url": "stripe.com" }
  ],
  "checkSsl": true,
  "checkDkim": true
}

---

📤 Example Output

{
  "domain": "apify.com",
  "score": 95,
  "grade": "A",
  "summary": "Excellent - Inboxing Ready. High deliverability and strong authentication.",
  "spf": {
    "status": "softfail",
    "valid": true,
    "record": "v=spf1 include:_spf.google.com include:sendgrid.net ~all",
    "qualifier": "~all",
    "includes": ["_spf.google.com", "sendgrid.net"],
    "providers": ["Google Workspace", "SendGrid"],
    "warning": null
  },
  "dmarc": {
    "status": "valid",
    "valid": true,
    "record": "v=DMARC1; p=reject; rua=mailto:dmarc@apify.com",
    "policy": "reject",
    "percentage": 100,
    "rua": ["mailto:dmarc@apify.com"],
    "warning": null
  },
  "mx": [
    {
      "host": "aspmx.l.google.com",
      "priority": 1,
      "provider": "Google Workspace / Gmail"
    }
  ],
  "ssl": {
    "valid": true,
    "daysRemaining": 84,
    "expiresAt": "2026-12-28T12:00:00+00:00",
    "issuer": "Let's Encrypt",
    "warning": null
  },
  "dkim": {
    "found": true,
    "selector": "google",
    "record": "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCg..."
  },
  "recommendations": [
    "All SPF, DMARC, MX, and SSL records are configured according to industry best practices."
  ],
  "auditedAt": "2026-10-05T08:00:00.000Z"
}

---

🚀 Key Advantages

1. 100% Reliable & Immune to Blocking: Operates on pure DNS and SSL protocols. Zero Cloudflare blocks, zero captchas, zero browser overhead.
2. Sub-Second Speed: Audits each domain in 300ms to 800ms.
3. Agency & Automation Ready: Easily integrates into n8n, Make.com, Zapier, or Google Sheets workflows for bulk domain health verification.

---

💬 Support & Customization

Developed and maintained by Apex Data Solutions. For feedback, custom integrations, or questions, reach out via the Apify Console or open an issue on GitHub.