Skip to content
Docs

Check Domain Authentication

Run a fresh SPF, DKIM and DMARC check for an account's sending domain.

POST/api/v1/email-accounts/{account_id}/domain-auth/check

Requires an API key with the write scope.

FoxReach looks up the sending domain's DNS records now, stores the result on the account and returns it. The result is informational: a failing check never blocks sending. Use domainAuth on Get Email Account to read the last stored result without a new lookup.

Path Parameters#

account_idstringpathrequired
The email account id.

Response#

dataobject
Show data
domainAuthobject
The stored result, with an entry for spf, dkim and dmarc.
domainAuthCheckedAtstring
ISO 8601 timestamp of this check.
dkimSelectorstring
The DKIM selector used, or null to try the common ones.

Errors#

StatusDescription
401Missing, invalid, revoked or expired API key
403API key does not have the required scope: write
404Email account not found: the account does not exist in this workspace

Rate Limit#

  • 100 requests per minute, shared by every expensive call in your workspace. Fixed 60-second window.
  • Every response includes X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset (unix epoch seconds) and X-RateLimit-Bucket (expensive).
  • A 429 response includes a Retry-After header (seconds until the bucket resets).

For client-side patterns, see Rate Limiting.

Was this page helpful?
View as MarkdownLast updated November 4, 2026