Checks, selectors & grade scale

Code snippets

curl "https://api.oanor.com/emailsec-api/v1/meta" \
  -H "x-oanor-key: oanor_test_..."

await fetch("https://api.oanor.com/emailsec-api/v1/meta", {
  headers: { "x-oanor-key": "oanor_test_..." }
});

$ch = curl_init("https://api.oanor.com/emailsec-api/v1/meta");
curl_setopt($ch, CURLOPT_HTTPHEADER, ["x-oanor-key: oanor_test_..."]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$out = curl_exec($ch);

import requests
requests.get(
    "https://api.oanor.com/emailsec-api/v1/meta",
    headers={"x-oanor-key": "oanor_test_..."}
)

Example response

A real response from this endpoint, captured by the latest health check.

{
    "data": {
        "note": "Inspect a domain's email-authentication posture — its protection against spoofing and phishing — via live DNS. /v1/check?domain=google.com looks up and validates SPF (v=spf1, the 'all' qualifier and the 10-lookup limit), DMARC (the _dmarc policy p=none/quarantine/reject, sp, pct, rua/ruf), DKIM (probing common selectors at selector._domainkey, or pass ?selector=), BIMI and MX, then returns an A+-to-F grade with a prioritised list of issues and advice. /v1/dmarc parses the DMARC record tag by tag with a plain-English interpretation of the policy. Pure DNS lookups, always live. Ideal for email-deliverability and anti-spoofing audits, vendor and third-party risk assessment, and onboarding checks. An email-authentication analyzer — distinct from mailbox/address validation (email), raw DNS record lookup (dns) and the HTTP security-header grader (secheaders). No key, no cache.",
        "checks": [
            "SPF (v=spf1)",
            "DMARC (_dmarc, v=DMARC1)",
            "DKIM (selector._domainkey)",
            "BIMI (default._bimi)",
            "MX"
        ],
        "grades": [
            "A+",
            "A",
            "B",
            "C",
            "D",
            "F"
        ],
        "endpoints": [
            "/v1/check",
            "/v1/dmarc",
            "/v1/meta"
        ],
        "dkim_selectors_probed": [
            "default",
            "google",
            "selector1",
            "selector2",
            "k1",
            "k2",
            "dkim",
            "mail",
            "s1",
            "s2",
            "mandrill",
            "mxvault",
            "sig1",
            "smtp",
            "key1",
            "zoho"
        ]
    },
    "meta": {
        "timestamp": "2026-06-01T23:40:50.524Z",
        "request_id": "dd868d9a-a1ef-423d-9628-27124e4763c2"
    },
    "status": "ok",
    "message": "Meta retrieved",
    "success": true
}