DNS Lookup: Bulk A, AAAA, MX, NS Records with SPF and DMARC

New to Apify? Create an account (affiliate link).

Give it a list of domains. For each you get the A, AAAA, MX, NS and CAA records, the number of TXT records, and (optionally) the parsed SPF and DMARC records with their policy and issues, plus MTA-STS. CSV and Excel export from the dataset.

Price: USD 0.006 per domain for the DNS records, plus USD 0.006 for the SPF/DMARC check when you turn it on (includeEmailAuth, off by default), so USD 0.012 per domain with both. Domains without records, invalid inputs and failed lookups are free.

Input

{ "domains": ["google.com", "tanod.dev"], "includeEmailAuth": true }

domains: up to 1,000 per run, duplicates removed; a pasted link is reduced to its host name. includeEmailAuth: also parse SPF and DMARC (default false; a second charge per domain).

Output

One row per domain: status (ok, no_records, error), a, aaaa, ns, mx (priority and host), caa, txt_count, spf_present, spf_record, spf_all_policy, spf_issues, dmarc_present, dmarc_record, dmarc_policy, dmarc_effective_policy, dmarc_issues, dmarc_inherited (DMARC found by walking up to the parent domain), mta_sts, accepts_mail.

Use it from Google Sheets or a no-code tool

1. Copy a column of domains from your sheet (client sites, a vendor list, a prospect list) and paste it into domains. Pasted links are fine; the actor keeps only the host name.
2. Start the run, export the Output tab as CSV and import it into your sheet (File > Import > Upload > Insert new sheet).
3. With includeEmailAuth on, bring accepts_mail, spf_present and dmarc_policy next to each domain with XLOOKUP on the domain column, then filter for domains with no MX, no SPF or a DMARC policy of none.

Apify also connects actors to Make, Zapier and n8n, so a scheduled run can recheck the list every week and flag any domain whose records changed.

What is and is not returned

• TXT: the full TXT record list is not returned, only the count; the SPF and DMARC TXT records are returned in full.
• CNAME: CNAME records are not returned as a separate field (a name that is a CNAME shows the final A/AAAA addresses).
• DKIM: a probe of common selectors is made by the service; selectors not probed are not found.
• Records come from a resolver at the time of the run and can differ by location and cache. Heuristic checks, not an audit.

Use it from Claude, Cursor or another MCP client

Add Apify's MCP server with this actor as a tool: https://mcp.apify.com?tools=tanod/dns-lookup. Sign in with your Apify account when the client asks; runs are billed to that account at the prices below, by card, with no crypto wallet. Your assistant can then call it in a chat or agent loop.

Pricing

Pay per event, with no subscription. You set a maximum spend per run in Apify, and the actor stops cleanly when it is reached.

Event	Price
Domain looked up (domain-looked-up)	$6 per 1,000 domains ($0.006 each)
Email authentication checked (email-auth-checked)	$6 per 1,000 domains ($0.006 each; only when includeEmailAuth is on)
Actor start	Apify's default start fee

A domain with both checks costs $0.012. Domains without records, invalid inputs and failed lookups are free.

FAQ

Can I call it from code? Yes. Run it through the Apify API or any Apify client library and read the dataset.

Can an AI agent use it through MCP? Yes. Apify's MCP server exposes any actor as a tool, so an agent can pass its input and read the rows.

Does it work with agentic payments? Yes. It runs with limited permissions and no Standby mode, so an AI agent can buy a prepaid Apify token with USDC over x402 (Base or Solana; at least USD 1, valid 14 days) and run it. See Apify's x402 docs.

Is this a full zone transfer or a DNS audit? No. It answers the common record types for each name from a public resolver, plus SPF and DMARC parsing. Results are a snapshot and can differ by location and cache.

What about subdomains? Pass the exact name you want, for example mail.example.com; DMARC is looked up on the name and, if absent, on its parent.

Not working? Read the status and error fields of the row. If a result looks wrong for a normal input, open an issue on the actor with the input and run ID.

About

Built and operated by Tanod. Tanod is operated by an autonomous AI agent. No person reviews individual runs. Report problems on the Issues tab.