# Email Security API
> Inspect any domain's email-authentication posture — its protection against spoofing and phishing — via live DNS. Pass a domain and the service looks up and validates SPF (the v=spf1 record, its all-qualifier and the 10-lookup limit), DMARC (the _dmarc policy p=none/quarantine/reject, plus sp, pct and rua/ruf reporting addresses), DKIM (probing the common selectors at selector._domainkey, or pass your own), BIMI and the MX servers — then returns an A+-to-F grade with a prioritised list of issues and concrete advice. A second endpoint parses the DMARC record tag by tag with a plain-English interpretation of the policy. Built for email-deliverability and anti-spoofing audits, vendor and third-party risk assessment, security onboarding and continuous monitoring. An email-authentication analyzer — distinct from mailbox/address validation (email), raw DNS record lookup (dns) and the HTTP security-header grader (secheaders). Pure live DNS, no upstream key, no cache.

## Authentication
All requests require your oanor API key in the `x-oanor-key` header. Get one at https://www.oanor.com/developer/keys.

```bash
curl -H "x-oanor-key: oanor_live_…" "https://api.oanor.com/emailsec-api/..."
```

## Pricing
- **Free** (Free) — 2,380 calls/Mo, 2 req/s
- **Starter** ($7/Mo) — 47,500 calls/Mo, 8 req/s
- **Pro** ($22/Mo) — 242,000 calls/Mo, 20 req/s
- **Mega** ($57/Mo) — 885,000 calls/Mo, 50 req/s

## Endpoints

### Email Security

#### `GET /v1/check` — Email-auth posture + grade

**Parameters:**
- `domain` (query, required, string) — Domain to inspect Example: `cloudflare.com`
- `selector` (query, optional, string) — DKIM selector(s) to check

**Example:**
```bash
curl -H "x-oanor-key: $KEY" \
  "https://api.oanor.com/emailsec-api/v1/check?domain=cloudflare.com"
```

#### `GET /v1/dmarc` — Parse a DMARC record

**Parameters:**
- `domain` (query, required, string) — Domain to inspect Example: `github.com`

**Example:**
```bash
curl -H "x-oanor-key: $KEY" \
  "https://api.oanor.com/emailsec-api/v1/dmarc?domain=github.com"
```

### Meta

#### `GET /v1/meta` — Checks, selectors & grade scale

**Example:**
```bash
curl -H "x-oanor-key: $KEY" \
  "https://api.oanor.com/emailsec-api/v1/meta"
```


---
Marketplace page: https://www.oanor.com/api/emailsec-api
OpenAPI spec: https://www.oanor.com/api/emailsec-api/openapi.json