Email Security API — SPF, DMARC, and DKIM in one call.

import requests

domain = "cloudflare.com"
url = f"https://domain-intelligence-api.p.rapidapi.com/domain/{domain}/email-security"
headers = {
    "X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
    "X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
}
r = requests.get(url, headers=headers, timeout=15)
data = r.json()

if not data["spf"]["present"]:
    print(f"WARN: {domain} missing SPF")
if not data["dmarc"]["present"]:
    print(f"WARN: {domain} missing DMARC")
if not data["dkim"]["found"]:
    print(f"WARN: {domain} no DKIM found across 29 selectors")
else:
    print(f"OK: {domain} uses DKIM selectors {data['dkim']['found']}")

// Node 18+ has built-in fetch — no import needed
const domain = "cloudflare.com";
const res = await fetch(
  `https://domain-intelligence-api.p.rapidapi.com/domain/${domain}/email-security`,
  { headers: {
      "X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
      "X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
  }}
);
const data = await res.json();
console.log("SPF:", data.spf.present, "DMARC:", data.dmarc.present);
console.log("DKIM selectors found:", data.dkim.found);

<?php
$domain = "cloudflare.com";
$ch = curl_init("https://domain-intelligence-api.p.rapidapi.com/domain/$domain/email-security");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
    "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com",
    "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY",
]);
$data = json_decode(curl_exec($ch), true);
curl_close($ch);
echo "SPF: " . ($data["spf"]["present"] ? "yes" : "no");