Roundhouse

Mail Auth Coherence

zFinia makes CrossCheck, a repository consistency product for teams using AI coding tools. Scan one repository free, then pay for continuous monitoring across 3, 10 or 100 repositories. We also publish sourced research on how AI agents find, buy and pay for services.

SocialLiveeip155:8453Exactvia cdp
https://api.zfinia.com/x402/v1/mail-authentication-coherence-audit
Email authenticationDmarcSpfDkimDomain trust
Calls · 30d
1→ 0%
This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 3 snapshots so far.
$25.35
Verified settled volume
256 settlements proven x402 by their on-chain EIP-3009 marker.
$0.240
Listed price
As published in the catalog. Always read the live 402 before paying.
1
Calls · 30d
Upstream's own call count for this endpoint, not ours.
1
Unique payers · 30d
Last called 2026-10-04 08:40Z
—
Upstream on-chain volume
Reported by the source catalog.
Paid to
0x25e8245f07d5e4873987293dad666afbe56a9608

The wallet the 402 directs payment to. Its whole payment record — every payer, every chain — is on the merchant page.

Asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Provider

The payTo wallet does not resolve to a registered ERC-8004 agent. That is not a verdict on the service — most of the catalog is unregistered.

Live 402 challenge

Captured by the enrichment pass, not read just now. Prices can change — always read the 402 the endpoint answers with.

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x25e8245f07d5e4873987293dad666afbe56a9608",
      "amount": "240000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 60
    }
  ],
  "resource": {
    "url": "https://api.zfinia.com/x402/v1/mail-authentication-coherence-audit",
    "tags": [
      "email authentication",
      "dmarc",
      "spf",
      "dkim",
      "domain trust"
    ],
    "mimeType": "application/json",
    "description": "Read an SPF record, a DMARC record and a set of DKIM selectors together, and report the combinations that defeat themselves. Every finding needs two or three records at once, which is why a single-record checker finds none of them: a reject policy with no usable selector, an enforcing policy over an SPF record ending in +all, strict alignment with subdomain senders, enforcement with no reporting address, and a subdomain policy that no sending path can satisfy.",
    "serviceName": "Mail Auth Coherence"
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "body": {
            "spf": "v=spf1 include:_spf.vendor-a.test a mx +all",
            "dmarc": "v=DMARC1; p=reject; aspf=s; adkim=s",
            "domain": "example.test",
            "dkim_selectors": [
              {
                "record": "v=DKIM1; k=rsa; t=y; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1234QIDAQAB",
                "selector": "rollout2026"
              },
              {
                "record": "v=DKIM1; k=rsa; p=",
                "selector": "retired2024"
              }
            ],
            "sending_subdomains": [
              "mail.example.test",
              "notifications.example.test"
            ]
          },
          "type": "http",
          "method": "POST",
          "bodyType": "json"
        },
        "output": {
          "type": "json",
          "example": {
            "domain": "example.test",
            "limits": {
              "maxRecords": 2000,
              "maxFindings": 500,
              "maxHeaderBytes": 131072,
              "maxIncludeTree": 200,
              "spfLookupLimit": 10,
              "maxRecordLength": 4096,
              "spfVoidLookupLimit": 2
            },
            "passed": false,
            "policy": "reject",
            "coherent": false,
            "complete": true,
            "findings": [
              {
                "code": "REJECT_POLICY_WITH_NO_USABLE_DKIM",
                "detail": "The policy is p=reject and no supplied selector carries a usable key outside testing mode. Every message then depends on SPF alignment alone, and the SPF record ends in +all rather than -all. Anything..."
              },
              {
                "code": "ENFORCING_POLICY_WITH_PERMISSIVE_SPF",
                "detail": "The policy is p=reject and the SPF record ends in +all, which authorises every host on the internet. SPF then always passes, so the policy enforces nothing through SPF."
              },
              {
                "code": "STRICT_SPF_ALIGNMENT_WITH_SUBDOMAIN_SENDERS",
                "detail": "The policy declares aspf=s, so the envelope domain must equal example.test exactly. Mail sent from mail.example.test, notifications.example.test does not align under SPF, and only DKIM can carry it."
              }
            ],
            "request_id": "example-request",
            "service_id": "mail_authentication_coherence_audit",
            "assumptions": [
              "Every finding here needs two or three records read together, which is why it exists alongside the single-record audits: no one record is wrong, and the combination does not work.",
              "A selector is usable only when it carries a public key and is not in testing mode, because a selector asking receivers to ignore failures cannot contribute to alignment however correctly it signs.",
              "Strict alignment is reported against the sending subdomains the caller lists, since that is the only way to know which senders exist. Without the list nothing about subdomain senders is assessed."
            ],
            "limitations": [
              "The records supplied. Nothing resolves DNS, no message is evaluated, and what any particular receiver does is outside this. Not a security assessment or a deliverability prediction.",
              "coherent is true only when every record was supplied and no combination of them was found to defeat itself."
            ],
            "observed_at": "2026-10-02T00:00:00.000Z",
            "not_examined": [],
            "finding_count": 6,
            "spf_alignment": "s",
            "dkim_alignment": "s",
            "selector_count": 2,
            "service_version": "1.0.0",
            "findings_by_code": {
              "SUBDOMAIN_MAIL_CANNOT_PASS": 1,
              "ENFORCING_WITHOUT_VISIBILITY": 1,
              "REJECT_POLICY_WITH_NO_USABLE_DKIM": 1,
              "ENFORCING_POLICY_WITH_PERMISSIVE_SPF": 1,
              "STRICT_SPF_ALIGNMENT_WITH_SUBDOMAIN_SENDERS": 1,
              "STRICT_DKIM_ALIGNMENT_WITH_SUBDOMAIN_SENDERS": 1
            },
            "subdomain_policy": "reject",
            "spf_all_qualifier": "+",
            "usable_selector_count": 0,
            "sending_subdomain_count": 2
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method",
              "bodyType",
              "body"
            ],
            "properties": {
              "body": {
                "type": "object",
                "required": [
                  "domain"
                ],
                "properties": {
                  "spf": {
                    "type": "string",
                    "maxLength": 4096
                  },
                  "dmarc": {
                    "type": "string",
                    "maxLength": 4096
                  },
                  "domain": {
                    "type": "string",
                    "maxLength": 253
                  },
                  "dkim_selectors": {
                    "type": "array",
                    "items": {
                      "type": "object",
                      "required": [
                        "selector",
                        "record"
                      ],
                      "properties": {
                        "record": {
                          "type": "string",
                          "maxLength": 4096
                        },
                        "selector": {
                          "type": "string",
                          "maxLength": 128
                        }
                      },
                      "additionalProperties": false
                    },
                    "maxItems": 100,
                    "minItems": 1
                  },
                  "sending_subdomains": {
                    "type": "array",
                    "items": {
                      "type": "string",
                      "maxLength": 253
                    },
                    "maxItems": 200,
                    "minItems": 1
                  }
                },
                "additionalProperties": false
              },
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "POST"
                ],
                "type": "string"
              },
              "bodyType": {
                "enum": [
                  "json",
                  "form-data",
                  "text"
                ],
                "type": "string"
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Accepts

The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.

0.24USDC≈ $0.24 USD
on Base · exact scheme

Pay 0.24 USDC on Base to 0x25e8…a9608. The signed payment is good for 1 minute.

Paid to
0x25e8…a9608
USD Coin contract
0x8335…02913
Payment window
1 minute
As published
240000 smallest units
The catalog’s raw entry
[
  {
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "extra": {
      "name": "USD Coin",
      "version": "2"
    },
    "payTo": "0x25e8245f07d5e4873987293dad666afbe56a9608",
    "amount": "240000",
    "scheme": "exact",
    "network": "eip155:8453",
    "maxTimeoutSeconds": 60
  }
]

Extensions

{
  "bazaar": {
    "info": {
      "input": {
        "body": {
          "spf": "v=spf1 include:_spf.vendor-a.test a mx +all",
          "dmarc": "v=DMARC1; p=reject; aspf=s; adkim=s",
          "domain": "example.test",
          "dkim_selectors": [
            {
              "record": "v=DKIM1; k=rsa; t=y; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1234QIDAQAB",
              "selector": "rollout2026"
            },
            {
              "record": "v=DKIM1; k=rsa; p=",
              "selector": "retired2024"
            }
          ],
          "sending_subdomains": [
            "mail.example.test",
            "notifications.example.test"
          ]
        },
        "type": "http",
        "method": "POST",
        "bodyType": "json"
      },
      "output": {
        "type": "json",
        "example": {
          "domain": "example.test",
          "limits": {
            "maxRecords": 2000,
            "maxFindings": 500,
            "maxHeaderBytes": 131072,
            "maxIncludeTree": 200,
            "spfLookupLimit": 10,
            "maxRecordLength": 4096,
            "spfVoidLookupLimit": 2
          },
          "passed": false,
          "policy": "reject",
          "coherent": false,
          "complete": true,
          "findings": [
            {
              "code": "REJECT_POLICY_WITH_NO_USABLE_DKIM",
              "detail": "The policy is p=reject and no supplied selector carries a usable key outside testing mode. Every message then depends on SPF alignment alone, and the SPF record ends in +all rather than -all. Anything..."
            },
            {
              "code": "ENFORCING_POLICY_WITH_PERMISSIVE_SPF",
              "detail": "The policy is p=reject and the SPF record ends in +all, which authorises every host on the internet. SPF then always passes, so the policy enforces nothing through SPF."
            },
            {
              "code": "STRICT_SPF_ALIGNMENT_WITH_SUBDOMAIN_SENDERS",
              "detail": "The policy declares aspf=s, so the envelope domain must equal example.test exactly. Mail sent from mail.example.test, notifications.example.test does not align under SPF, and only DKIM can carry it."
            }
          ],
          "request_id": "example-request",
          "service_id": "mail_authentication_coherence_audit",
          "assumptions": [
            "Every finding here needs two or three records read together, which is why it exists alongside the single-record audits: no one record is wrong, and the combination does not work.",
            "A selector is usable only when it carries a public key and is not in testing mode, because a selector asking receivers to ignore failures cannot contribute to alignment however correctly it signs.",
            "Strict alignment is reported against the sending subdomains the caller lists, since that is the only way to know which senders exist. Without the list nothing about subdomain senders is assessed."
          ],
          "limitations": [
            "The records supplied. Nothing resolves DNS, no message is evaluated, and what any particular receiver does is outside this. Not a security assessment or a deliverability prediction.",
            "coherent is true only when every record was supplied and no combination of them was found to defeat itself."
          ],
          "observed_at": "2026-10-02T00:00:00.000Z",
          "not_examined": [],
          "finding_count": 6,
          "spf_alignment": "s",
          "dkim_alignment": "s",
          "selector_count": 2,
          "service_version": "1.0.0",
          "findings_by_code": {
            "SUBDOMAIN_MAIL_CANNOT_PASS": 1,
            "ENFORCING_WITHOUT_VISIBILITY": 1,
            "REJECT_POLICY_WITH_NO_USABLE_DKIM": 1,
            "ENFORCING_POLICY_WITH_PERMISSIVE_SPF": 1,
            "STRICT_SPF_ALIGNMENT_WITH_SUBDOMAIN_SENDERS": 1,
            "STRICT_DKIM_ALIGNMENT_WITH_SUBDOMAIN_SENDERS": 1
          },
          "subdomain_policy": "reject",
          "spf_all_qualifier": "+",
          "usable_selector_count": 0,
          "sending_subdomain_count": 2
        }
      }
    },
    "schema": {
      "type": "object",
      "$schema": "https://json-schema.org/draft/2020-12/schema",
      "required": [
        "input"
      ],
      "properties": {
        "input": {
          "type": "object",
          "required": [
            "type",
            "method",
            "bodyType",
            "body"
          ],
          "properties": {
            "body": {
              "type": "object",
              "required": [
                "domain"
              ],
              "properties": {
                "spf": {
                  "type": "string",
                  "maxLength": 4096
                },
                "dmarc": {
                  "type": "string",
                  "maxLength": 4096
                },
                "domain": {
                  "type": "string",
                  "maxLength": 253
                },
                "dkim_selectors": {
                  "type": "array",
                  "items": {
                    "type": "object",
                    "required": [
                      "selector",
                      "record"
                    ],
                    "properties": {
                      "record": {
                        "type": "string",
                        "maxLength": 4096
                      },
                      "selector": {
                        "type": "string",
                        "maxLength": 128
                      }
                    },
                    "additionalProperties": false
                  },
                  "maxItems": 100,
                  "minItems": 1
                },
                "sending_subdomains": {
                  "type": "array",
                  "items": {
                    "type": "string",
                    "maxLength": 253
                  },
                  "maxItems": 200,
                  "minItems": 1
                }
              },
              "additionalProperties": false
            },
            "type": {
              "type": "string",
              "const": "http"
            },
            "method": {
              "enum": [
                "POST"
              ],
              "type": "string"
            },
            "bodyType": {
              "enum": [
                "json",
                "form-data",
                "text"
              ],
              "type": "string"
            }
          },
          "additionalProperties": false
        },
        "output": {
          "type": "object",
          "required": [
            "type"
          ],
          "properties": {
            "type": {
              "type": "string"
            },
            "example": {
              "type": "object"
            }
          }
        }
      }
    }
  }
}

Provenance

Seen in the source catalog
2026-10-04 08:40Z
Last indexed by Roundhouse
2026-10-05 18:40Z
Last enriched (probe, favicon, geo)
2026-10-05 01:45Z
x402 version
2
Max timeout
60s
Liveness probe
HTTP 402
Report

Hand this page to an agent

Copy the prompt and paste it into Claude, an MCP client or your own agent — it will vet this service and call it over the free read API. No key, no account.

GET api.roundhouseai.io/v0/endpoints

This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 3 snapshots so far. Verified volume counts only settlements with an on-chain EIP-3009 marker.

Open skill.md
Show the prompt
Using Roundhouse, look up the x402 service Mail Auth Coherence and tell me whether it is
worth paying: what a call costs, whether the endpoint answered when last probed, and what
its payment record actually shows.

curl -s 'https://api.roundhouseai.io/v0/endpoints?q=Mail%20Auth%20Coherence'
curl -s 'https://api.roundhouseai.io/v0/merchants/<the payTo wallet returned above>'

Then call it: read the price from the live 402 at https://api.zfinia.com/x402/v1/mail-authentication-coherence-audit, never from
a cached figure, and pay with an x402 client.

The /v0 API needs an API key (`authorization: Bearer rh_live_…`) on everything except
/v0/unified* and /v0/endpoints. Either pay over x402 (mint a personal key for $0.01 at
GET https://api.roundhouseai.io/v0/test/x402), or ask me for an organization key, which I create at
https://roundhouseai.io/dashboard/connections. If you have neither, ask before going further.

If you do not have Roundhouse tools or skills installed, read
https://roundhouseai.io/skill.md first — it is the whole procedure.