SPF Record Audit
Audit an SPF record. Reports two or more records on one name, which is a permanent error so most receivers treat the domain as having no SPF at all; a lookup count at or beyond the limit of ten resolving mechanisms, beyond which the evaluation is a permanent error; a record ending in +all, which authorises every host on the internet; a record ending neutral with no all or redirect; a term after all, which is never evaluated; and an unrecognised term, which is itself a permanent error.
SocialLiveeip155:8453Exactvia cdp
SpfEmail authenticationDomain trustDnsDeveloper tooling
Settlements · 30d
219↓ 38%
No per-endpoint history for this service yet, so this is payments indexed to its PROVIDER's wallet over 30 days.
$25.35
Verified settled volume
256 settlements proven x402 by their on-chain EIP-3009 marker.
$0.200
Listed price
As published in the catalog. Always read the live 402 before paying.
1
Calls · 30d
Upstream's own call count for this endpoint, not ours.
1
Unique payers · 30d
Last called 2026-10-04 08:40Z
—
Upstream on-chain volume
Reported by the source catalog.
Paid to
0x25e8245f07d5e4873987293dad666afbe56a9608The wallet the 402 directs payment to. Its whole payment record — every payer, every chain — is on the merchant page.
Asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
Provider
The payTo wallet does not resolve to a registered ERC-8004 agent. That is not a verdict on the service — most of the catalog is unregistered.
Live 402 challenge
Captured by the enrichment pass, not read just now. Prices can change — always read the 402 the endpoint answers with.
{
"error": "Payment required",
"accepts": [
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0x25e8245f07d5e4873987293dad666afbe56a9608",
"amount": "200000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 60
}
],
"resource": {
"url": "https://api.zfinia.com/x402/v1/spf-record-audit",
"tags": [
"spf",
"email authentication",
"domain trust",
"dns",
"developer tooling"
],
"mimeType": "application/json",
"description": "Audit an SPF record. Reports two or more records on one name, which is a permanent error so most receivers treat the domain as having no SPF at all; a lookup count at or beyond the limit of ten resolving mechanisms, beyond which the evaluation is a permanent error; a record ending in +all, which authorises every host on the internet; a record ending neutral with no all or redirect; a term after all, which is never evaluated; and an unrecognised term, which is itself a permanent error.",
"serviceName": "SPF Record Audit"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"domain": "example.test",
"records": [
"v=spf1 include:_spf.vendor-a.test include:_spf.vendor-b.test include:_spf.vendor-c.test include:spf.vendor-d.test include:mail.vendor-e.test a mx ptr exists:%{i}._auth.example.test include:_spf.vendor-f.test include:_spf.vendor-g.test ~all include:late.vendor.test",
"v=spf1 include:_spf.legacy.test ~all",
"google-site-verification=abc123"
],
"assume_lookups_per_include": 1
},
"type": "http",
"method": "POST",
"bodyType": "json"
},
"output": {
"type": "json",
"example": {
"terms": [
{
"term": "include:_spf.vendor-a.test",
"lookups": 1,
"mechanism": "include",
"qualifier": "+"
},
{
"term": "include:_spf.vendor-b.test",
"lookups": 1,
"mechanism": "include",
"qualifier": "+"
},
{
"term": "include:_spf.vendor-c.test",
"lookups": 1,
"mechanism": "include",
"qualifier": "+"
}
],
"valid": false,
"domain": "example.test",
"limits": {
"maxRecords": 2000,
"maxFindings": 500,
"maxHeaderBytes": 131072,
"maxIncludeTree": 200,
"spfLookupLimit": 10,
"maxRecordLength": 4096,
"spfVoidLookupLimit": 2
},
"passed": false,
"record": "v=spf1 include:_spf.vendor-a.test include:_spf.vendor-b.test include:_spf.vendor-c.test include:spf.vendor-d.test include:mail.vendor-e.test a mx ptr exists:%{i}._auth.example.test include:_spf.vendor...",
"complete": false,
"findings": [
{
"code": "SEVERAL_SPF_RECORDS",
"detail": "2 records begin with v=spf1. More than one is a permanent error, and most receivers then treat the domain as having no SPF at all. Adding a vendor means merging into the one record, not adding another..."
},
{
"code": "RECORD_LONGER_THAN_ONE_STRING",
"detail": "The record is 264 characters. A single DNS character string holds 255, so this must be published as several strings inside one record, which is not the same as several records."
},
{
"code": "PTR_MECHANISM_USED",
"detail": "The record uses ptr, which the specification says should not be published: it is slow, it costs a lookup, and some receivers ignore it entirely."
}
],
"request_id": "example-request",
"service_id": "spf_record_audit",
"assumptions": [
"Nothing resolves DNS. The records are supplied, which keeps the egress surface at zero and means an arbitrary domain can be audited without this service holding an allowlist for it.",
"An include is counted at the stated cost per include, and the included record is not read, so the lookup count here is a floor rather than the true total. That is said rather than presented as exact.",
"An unrecognised term is reported rather than skipped, because an unrecognised mechanism is itself a permanent error and skipping it would report a broken record as sound."
],
"limitations": [
"The records supplied. Whether they are actually published, whether an include resolves, and what any particular receiver does are outside this.",
"valid is true only when the record parsed, stayed inside the lookup limit, and nothing was left unexamined."
],
"observed_at": "2026-10-02T00:00:00.000Z",
"lookup_limit": 10,
"not_examined": [
"RECORD_NOT_SPF: A record was supplied that does not begin with v=spf1 and was not evaluated: google-site-verification=abc123",
"INCLUDE_TREE_NOT_EXPANDED: Each include and redirect was counted as 1 lookup(s) because the included records were not supplied. The real total is at least this and usually more, so the count here is a..."
],
"record_count": 3,
"finding_count": 5,
"service_version": "1.0.0",
"findings_by_code": {
"TERM_AFTER_ALL": 1,
"PTR_MECHANISM_USED": 1,
"SEVERAL_SPF_RECORDS": 1,
"LOOKUP_LIMIT_EXCEEDED": 1,
"RECORD_LONGER_THAN_ONE_STRING": 1
},
"minimum_dns_lookups": 12,
"lookups_assumed_per_include": 1
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method",
"bodyType",
"body"
],
"properties": {
"body": {
"type": "object",
"required": [
"records"
],
"properties": {
"domain": {
"type": "string",
"maxLength": 253
},
"records": {
"type": [
"array",
"string"
],
"items": {
"type": "string",
"maxLength": 4096
},
"maxItems": 20
},
"assume_lookups_per_include": {
"type": "integer",
"maximum": 10,
"minimum": 1
}
},
"additionalProperties": false
},
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Accepts
The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.
0.2USDC≈ $0.2 USD
on Base · exact scheme
Pay 0.2 USDC on Base to 0x25e8…a9608. The signed payment is good for 1 minute.
- Paid to
- 0x25e8…a9608
- USD Coin contract
- 0x8335…02913
- Payment window
- 1 minute
- As published
- 200000 smallest units
The catalog’s raw entry
[
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0x25e8245f07d5e4873987293dad666afbe56a9608",
"amount": "200000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 60
}
]Extensions
{
"bazaar": {
"info": {
"input": {
"body": {
"domain": "example.test",
"records": [
"v=spf1 include:_spf.vendor-a.test include:_spf.vendor-b.test include:_spf.vendor-c.test include:spf.vendor-d.test include:mail.vendor-e.test a mx ptr exists:%{i}._auth.example.test include:_spf.vendor-f.test include:_spf.vendor-g.test ~all include:late.vendor.test",
"v=spf1 include:_spf.legacy.test ~all",
"google-site-verification=abc123"
],
"assume_lookups_per_include": 1
},
"type": "http",
"method": "POST",
"bodyType": "json"
},
"output": {
"type": "json",
"example": {
"terms": [
{
"term": "include:_spf.vendor-a.test",
"lookups": 1,
"mechanism": "include",
"qualifier": "+"
},
{
"term": "include:_spf.vendor-b.test",
"lookups": 1,
"mechanism": "include",
"qualifier": "+"
},
{
"term": "include:_spf.vendor-c.test",
"lookups": 1,
"mechanism": "include",
"qualifier": "+"
}
],
"valid": false,
"domain": "example.test",
"limits": {
"maxRecords": 2000,
"maxFindings": 500,
"maxHeaderBytes": 131072,
"maxIncludeTree": 200,
"spfLookupLimit": 10,
"maxRecordLength": 4096,
"spfVoidLookupLimit": 2
},
"passed": false,
"record": "v=spf1 include:_spf.vendor-a.test include:_spf.vendor-b.test include:_spf.vendor-c.test include:spf.vendor-d.test include:mail.vendor-e.test a mx ptr exists:%{i}._auth.example.test include:_spf.vendor...",
"complete": false,
"findings": [
{
"code": "SEVERAL_SPF_RECORDS",
"detail": "2 records begin with v=spf1. More than one is a permanent error, and most receivers then treat the domain as having no SPF at all. Adding a vendor means merging into the one record, not adding another..."
},
{
"code": "RECORD_LONGER_THAN_ONE_STRING",
"detail": "The record is 264 characters. A single DNS character string holds 255, so this must be published as several strings inside one record, which is not the same as several records."
},
{
"code": "PTR_MECHANISM_USED",
"detail": "The record uses ptr, which the specification says should not be published: it is slow, it costs a lookup, and some receivers ignore it entirely."
}
],
"request_id": "example-request",
"service_id": "spf_record_audit",
"assumptions": [
"Nothing resolves DNS. The records are supplied, which keeps the egress surface at zero and means an arbitrary domain can be audited without this service holding an allowlist for it.",
"An include is counted at the stated cost per include, and the included record is not read, so the lookup count here is a floor rather than the true total. That is said rather than presented as exact.",
"An unrecognised term is reported rather than skipped, because an unrecognised mechanism is itself a permanent error and skipping it would report a broken record as sound."
],
"limitations": [
"The records supplied. Whether they are actually published, whether an include resolves, and what any particular receiver does are outside this.",
"valid is true only when the record parsed, stayed inside the lookup limit, and nothing was left unexamined."
],
"observed_at": "2026-10-02T00:00:00.000Z",
"lookup_limit": 10,
"not_examined": [
"RECORD_NOT_SPF: A record was supplied that does not begin with v=spf1 and was not evaluated: google-site-verification=abc123",
"INCLUDE_TREE_NOT_EXPANDED: Each include and redirect was counted as 1 lookup(s) because the included records were not supplied. The real total is at least this and usually more, so the count here is a..."
],
"record_count": 3,
"finding_count": 5,
"service_version": "1.0.0",
"findings_by_code": {
"TERM_AFTER_ALL": 1,
"PTR_MECHANISM_USED": 1,
"SEVERAL_SPF_RECORDS": 1,
"LOOKUP_LIMIT_EXCEEDED": 1,
"RECORD_LONGER_THAN_ONE_STRING": 1
},
"minimum_dns_lookups": 12,
"lookups_assumed_per_include": 1
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method",
"bodyType",
"body"
],
"properties": {
"body": {
"type": "object",
"required": [
"records"
],
"properties": {
"domain": {
"type": "string",
"maxLength": 253
},
"records": {
"type": [
"array",
"string"
],
"items": {
"type": "string",
"maxLength": 4096
},
"maxItems": 20
},
"assume_lookups_per_include": {
"type": "integer",
"maximum": 10,
"minimum": 1
}
},
"additionalProperties": false
},
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
}Provenance
- Seen in the source catalog
- 2026-10-04 08:40Z
- Last indexed by Roundhouse
- 2026-10-05 00:20Z
- Last enriched (probe, favicon, geo)
- 2026-10-05 00:45Z
- x402 version
- 2
- Max timeout
- 60s
- Liveness probe
- HTTP 402
Hand this page to an agent
Copy the prompt and paste it into Claude, an MCP client or your own agent — it will vet this service and call it over the free read API. No key, no account.
GET api.roundhouseai.io/v0/endpoints
No per-endpoint history for this service yet, so this is payments indexed to its PROVIDER's wallet over 30 days. Verified volume counts only settlements with an on-chain EIP-3009 marker.
Show the promptHide the prompt
Using Roundhouse, look up the x402 service SPF Record Audit and tell me whether it is worth paying: what a call costs, whether the endpoint answered when last probed, and what its payment record actually shows. curl -s 'https://api.roundhouseai.io/v0/endpoints?q=SPF%20Record%20Audit' curl -s 'https://api.roundhouseai.io/v0/merchants/<the payTo wallet returned above>' Then call it: read the price from the live 402 at https://api.zfinia.com/x402/v1/spf-record-audit, never from a cached figure, and pay with an x402 client. The /v0 API needs an API key (`authorization: Bearer rh_live_…`) on everything except /v0/unified* and /v0/endpoints. Either pay over x402 (mint a personal key for $0.01 at GET https://api.roundhouseai.io/v0/test/x402), or ask me for an organization key, which I create at https://roundhouseai.io/dashboard/connections. If you have neither, ask before going further. If you do not have Roundhouse tools or skills installed, read https://roundhouseai.io/skill.md first — it is the whole procedure.