NERDTOOLS / DOMAIN DIAGNOSTICS

DEVELOPER WORKFLOW / REST + JSON

Email authentication API, ready for production workflows.

Add structured SPF, DKIM, DMARC, and MX diagnostics to onboarding, support, monitoring, and domain-security workflows.

Current programmatic coverage: The Free and Pro developer plans expose the same diagnostic catalog. Plans differ by quota and rate limits.

01 /

Turn DNS policy into onboarding evidence.

Use parsed authentication results to show customers what is published, what is missing, and which configuration needs attention.

  • Count SPF DNS-query-causing mechanisms.
  • Parse DMARC policy, alignment, and reporting tags.
  • Check provider selectors for DKIM public keys.
  • Review MX routing alongside sender authentication.

02 /

Keep message evidence in the loop.

Public DNS describes policy and key availability; it cannot prove the identities used by a particular message.

  • Combine API findings with Authentication-Results headers.
  • Use DMARC aggregate reports to inventory real senders.
  • Avoid claiming inbox placement from authentication alone.
  • Recheck after DNS TTLs expire and provider configuration changes.

REST / EXAMPLE

Connect with the interface you already use.

curl -H "Authorization: Bearer nt_live_…" \
+  "https://nerdtools.co.uk/api/v1/email/dmarc?domain=example.com"

03 /

Choose the signal you need.

FAQ /

Operational detail.

Can I evaluate the API for free?

Yes. The free plan supports evaluation and small workflows with the same endpoint catalog as Pro.

Can the API access private infrastructure?

No. Targets are validated and restricted to public hosts and public network destinations.

Are REST and MCP separate products?

They share the same account, API key, diagnostic capabilities, and quota model.