{
  "openapi": "3.0.1",
  "info": {
    "title": "Domain Security & Email Deliverability — DNS, SPF, DMARC, DKIM",
    "description": "Audit a domain portfolio for email spoofing, broken SPF, DMARC enforcement, DNSSEC and shadow-SaaS senders. Returns a posture score, what to fix first, vendor dependencies and drift alerts — not just records. Bulk DNS / SPF / DMARC / DKIM lookup, no API keys.",
    "version": "2.0",
    "x-build-id": "j8U5WW3L4cptjCS01"
  },
  "servers": [
    {
      "url": "https://api.apify.com/v2"
    }
  ],
  "paths": {
    "/acts/ryanclinton~dns-record-lookup/run-sync-get-dataset-items": {
      "post": {
        "operationId": "run-sync-get-dataset-items-ryanclinton-dns-record-lookup",
        "x-openai-isConsequential": false,
        "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.",
        "tags": [
          "Run Actor"
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/inputSchema"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "token",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Enter your Apify token here"
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          }
        }
      }
    },
    "/acts/ryanclinton~dns-record-lookup/runs": {
      "post": {
        "operationId": "runs-sync-ryanclinton-dns-record-lookup",
        "x-openai-isConsequential": false,
        "summary": "Executes an Actor and returns information about the initiated run in response.",
        "tags": [
          "Run Actor"
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/inputSchema"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "token",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Enter your Apify token here"
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/runsResponseSchema"
                }
              }
            }
          }
        }
      }
    },
    "/acts/ryanclinton~dns-record-lookup/run-sync": {
      "post": {
        "operationId": "run-sync-ryanclinton-dns-record-lookup",
        "x-openai-isConsequential": false,
        "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.",
        "tags": [
          "Run Actor"
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/inputSchema"
              }
            }
          }
        },
        "parameters": [
          {
            "name": "token",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Enter your Apify token here"
          }
        ],
        "responses": {
          "200": {
            "description": "OK"
          }
        }
      }
    }
  },
  "components": {
    "schemas": {
      "inputSchema": {
        "type": "object",
        "required": [
          "domains"
        ],
        "properties": {
          "domains": {
            "title": "Domains",
            "maxItems": 1000,
            "type": "array",
            "description": "List of domains to analyse (e.g. google.com, github.com). Protocol, path, port and www. are stripped automatically; duplicates are removed. Domains that do not resolve are reported but not billed.",
            "items": {
              "type": "string"
            },
            "default": [
              "google.com",
              "github.com"
            ]
          },
          "recordTypes": {
            "title": "Record Types",
            "type": "array",
            "description": "Which DNS record types to query. Leave empty for all types.",
            "items": {
              "type": "string"
            },
            "default": [
              "A",
              "AAAA",
              "MX",
              "NS",
              "TXT",
              "CNAME",
              "SOA"
            ]
          },
          "checkEmailSecurity": {
            "title": "Check Email Security",
            "type": "boolean",
            "description": "Check SPF, DMARC, and DKIM records for email deliverability and security analysis.",
            "default": true
          },
          "timeout": {
            "title": "Timeout (ms)",
            "minimum": 1000,
            "maximum": 30000,
            "type": "integer",
            "description": "Timeout per DNS query in milliseconds.",
            "default": 5000
          },
          "analysisMode": {
            "title": "Analysis mode",
            "enum": [
              "balanced",
              "deliverability",
              "security",
              "monitoring",
              "mna"
            ],
            "type": "string",
            "description": "Shifts the emphasis of the posture score (the same email-auth + DNS-resilience signals, reweighted). 'deliverability' weights SPF/DMARC/DKIM heaviest; 'security' gives more weight to DNS resilience and takeover risk; 'monitoring' is tuned for scheduled re-runs; 'mna' (M&A due diligence) weights infrastructure hygiene and emits an acquisition-readiness summary; 'balanced' is the default blend.",
            "default": "balanced"
          },
          "outputProfile": {
            "title": "Output profile",
            "enum": [
              "minimal",
              "standard",
              "full"
            ],
            "type": "string",
            "description": "How much detail per record. 'minimal' = decision fields only (score, grade, spoofable, action) for Zapier/Make rules; 'standard' = decision + key email-auth fields + raw records; 'full' = every diagnostic sub-block.",
            "default": "standard"
          },
          "expandSpfIncludes": {
            "title": "Expand SPF include tree",
            "type": "boolean",
            "description": "Resolve the full SPF include chain to count the real number of DNS lookups (RFC 7208 caps these at 10; over the cap is a PermError that silently breaks SPF) and map the sending vendors. Off by default because it performs extra DNS queries; when off, a static lower-bound count is used.",
            "default": false
          },
          "checkDnssec": {
            "title": "Check DNSSEC",
            "type": "boolean",
            "description": "Query DNSSEC state via Cloudflare DNS-over-HTTPS (no API key) — reports whether the zone is signed and whether the answer is DNSSEC-validated. Adds one lightweight HTTPS request per domain; turn off to skip.",
            "default": true
          },
          "watchlistName": {
            "title": "Watchlist name (monitoring)",
            "type": "string",
            "description": "Set a name to persist this run's DNS / email-auth fingerprint and diff it on the next run with the same name. Each record then carries a 'monitoring' block flagging DMARC downgrades, MX / mail-provider changes, SPF rewrites and DKIM removals. Leave blank for a one-off scan."
          },
          "maxPostureScore": {
            "title": "Maximum posture score (surface problems only)",
            "minimum": 0,
            "maximum": 100,
            "type": "integer",
            "description": "Only output (and only bill for) domains whose posture score is at or below this threshold — i.e. surface only the domains that need attention. Leave at 100 to return every domain.",
            "default": 100
          }
        }
      },
      "runsResponseSchema": {
        "type": "object",
        "properties": {
          "data": {
            "type": "object",
            "properties": {
              "id": {
                "type": "string"
              },
              "actId": {
                "type": "string"
              },
              "userId": {
                "type": "string"
              },
              "startedAt": {
                "type": "string",
                "format": "date-time",
                "example": "2025-01-08T00:00:00.000Z"
              },
              "finishedAt": {
                "type": "string",
                "format": "date-time",
                "example": "2025-01-08T00:00:00.000Z"
              },
              "status": {
                "type": "string",
                "example": "READY"
              },
              "meta": {
                "type": "object",
                "properties": {
                  "origin": {
                    "type": "string",
                    "example": "API"
                  },
                  "userAgent": {
                    "type": "string"
                  }
                }
              },
              "stats": {
                "type": "object",
                "properties": {
                  "inputBodyLen": {
                    "type": "integer",
                    "example": 2000
                  },
                  "rebootCount": {
                    "type": "integer",
                    "example": 0
                  },
                  "restartCount": {
                    "type": "integer",
                    "example": 0
                  },
                  "resurrectCount": {
                    "type": "integer",
                    "example": 0
                  },
                  "computeUnits": {
                    "type": "integer",
                    "example": 0
                  }
                }
              },
              "options": {
                "type": "object",
                "properties": {
                  "build": {
                    "type": "string",
                    "example": "latest"
                  },
                  "timeoutSecs": {
                    "type": "integer",
                    "example": 300
                  },
                  "memoryMbytes": {
                    "type": "integer",
                    "example": 1024
                  },
                  "diskMbytes": {
                    "type": "integer",
                    "example": 2048
                  }
                }
              },
              "buildId": {
                "type": "string"
              },
              "defaultKeyValueStoreId": {
                "type": "string"
              },
              "defaultDatasetId": {
                "type": "string"
              },
              "defaultRequestQueueId": {
                "type": "string"
              },
              "buildNumber": {
                "type": "string",
                "example": "1.0.0"
              },
              "containerUrl": {
                "type": "string"
              },
              "usage": {
                "type": "object",
                "properties": {
                  "ACTOR_COMPUTE_UNITS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_WRITES": {
                    "type": "integer",
                    "example": 1
                  },
                  "KEY_VALUE_STORE_LISTS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_INTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_EXTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_RESIDENTIAL_TRANSFER_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_SERPS": {
                    "type": "integer",
                    "example": 0
                  }
                }
              },
              "usageTotalUsd": {
                "type": "number",
                "example": 0.00005
              },
              "usageUsd": {
                "type": "object",
                "properties": {
                  "ACTOR_COMPUTE_UNITS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATASET_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "KEY_VALUE_STORE_WRITES": {
                    "type": "number",
                    "example": 0.00005
                  },
                  "KEY_VALUE_STORE_LISTS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_READS": {
                    "type": "integer",
                    "example": 0
                  },
                  "REQUEST_QUEUE_WRITES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_INTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "DATA_TRANSFER_EXTERNAL_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_RESIDENTIAL_TRANSFER_GBYTES": {
                    "type": "integer",
                    "example": 0
                  },
                  "PROXY_SERPS": {
                    "type": "integer",
                    "example": 0
                  }
                }
              }
            }
          }
        }
      }
    }
  }
}