Domain Deliverability Checker

What's new (October 2026)

• Watch mode, only changed domains. Turn on the new only_changed input on a scheduled run and you get rows only for domains whose SPF, DKIM, DMARC, MX, mail provider, blacklist, or catch-all result changed since the last run with the same state_key. An unchanged domain returns no row and is not charged. Changed rows carry watch_status, changed_fields, and previous_check_at. Off by default.
• Parent domain checks for subdomains. For a subdomain such as mail.acme.com, each row adds parent_domain, parent_dmarc_record, parent_dmarc_policy, parent_dmarc_subdomain_policy, parent_spf_valid, and parent_has_mx, plus dmarc_inherited, effective_dmarc_policy, and a separate parent_aware_score that counts an inherited DMARC policy. deliverability_score is unchanged. On by default.

No price change. Existing fields and saved inputs work as before.

📬 What can Domain Deliverability Checker do?

Give it a domain and it returns a complete email deliverability verdict in one flat row: SPF, DKIM and DMARC with policy, MX records and mail provider, DNS blacklist status, catch-all detection, domain age, and a single 0 to 100 health score.

Pure DNS and SMTP. No browser, no proxy, no paid third-party APIs.

📦 What you get	⚙️ Features and integrations
🛡️ SPF, DKIM and DMARC with the actual policy 💯 A 0 to 100 score and a low/medium/high risk level 🚫 DNS blacklist status with the zones queried 🧾 42 flat fields, always present, null when absent	📮 Mail provider detection from MX 📅 Domain age via RDAP, with a SOA fallback 🧊 24 hour cache, repeat lookups skip the network, not the per-row charge ⬇️ Export to JSON, CSV, Excel, HTML or XML

Bought by outbound agencies, sales operations teams and Clay users who need to check domain health before sending cold email. Where most actors check one slice, just DNS or just blacklists or just DMARC, this returns the whole verdict in a single row.

🚫 This audits a domain, not a mailbox. It does not verify individual email addresses. If you need per-address verification, use Work Email Waterfall Finder.

💡 Why use Domain Deliverability Checker?

If you want	Read these fields
One number to gate on	deliverability_score, risk_level
Whether authentication is actually set up	spf_valid, spf_policy, dkim_present, dmarc_policy
Who runs their mail	mail_provider, mx_records
Reputation problems	blacklisted, blacklists_listed, blacklist_status
Early warning signs	spam_trap_risk, spam_trap_flags, domain_age_days
Whether the domain even sends	has_mx, has_website

💯 The score model, stated in full

has_mx +20; valid SPF +20 (hard -all +5); DKIM present +15; valid DMARC +15 (quarantine +5, reject +10); blacklist clean +15 (unknown +7); catch-all not detected +5 (detected -10). Capped 0 to 100.

Risk level: 80 or more low, 50 to 79 medium, under 50 high.

The model is published so you can disagree with it and rebuild your own from the raw fields, all of which are on the row.

▶️ Ready-to-run examples

Each is a preconfigured version of this actor. Open one and run it immediately.

Example	What it does
SPF DKIM DMARC Checker for Any Domain	Full email authentication check on any domain
Bulk Email Deliverability Checker	Score a list of domains before launching cold outreach
DMARC Policy and Blacklist Lookup	Check DMARC policy and scan for blacklist presence
Live Domain Health Recheck	Force a fresh check with no cached result
Catch-All Domain Detection	Detect whether a domain accepts all addresses

📋 What data can Domain Deliverability Checker extract?

42 fields per domain: 39 result fields plus row_status, error_reason, and billable_events_json. Every field is always present; absent values are null.

Field	What it holds
spf_record, spf_valid, spf_policy	Raw record, validity, and the qualifier on all
dkim_selectors_found, dkim_present	Which common selectors returned a key
dmarc_record, dmarc_policy, dmarc_valid	Raw record and none, quarantine or reject
mx_records, has_mx, mail_provider	Hosts with priority, and the detected provider
catch_all, catch_all_status	catch_all, not_catch_all or unknown
blacklisted, blacklists_listed, blacklists_checked, blacklist_status	Which zones were queried and what they said
spam_trap_risk, spam_trap_flags	Advisory heuristics for young or unauthenticated domains
domain_age_days, domain_age_source	Days since registration, and whether it came from rdap or soa
has_website	Domain has an A or AAAA record
deliverability_score, risk_level	The composite verdict
audit_error, run_date	What stopped it, and when it ran
parent_domain, parent_dmarc_record, parent_dmarc_policy, parent_dmarc_subdomain_policy, parent_spf_valid, parent_has_mx	For a subdomain, its organizational domain and that domain's DMARC (p= and sp=), SPF, and MX. Null for a domain that is not a subdomain
dmarc_inherited, effective_dmarc_policy	Whether the parent's DMARC governs a subdomain with no record of its own, and the policy that applies
parent_aware_score	The score with the effective DMARC policy counted. deliverability_score stays as before and ignores the parent
watch_status, changed_fields, previous_check_at	With only_changed: baseline or changed, which facts changed, and when the compared results were read. Null when only_changed is off

⚠️ A clean blacklist result means clean on the zones that answered, not an authoritative all-clear. Spamhaus and Barracuda block queries from cloud IPs and public resolvers without a paid data-query key, so some zones return unknown. Read blacklists_checked to see what was actually asked. The same care applies to dkim_present: an empty result means not found on a common selector, never a guarantee that DKIM is absent.

🛠️ How to check a domain's email deliverability

1. Open the Input tab and put a bare domain in domain, without https:// or a trailing slash.
2. For a list, use domains instead. It takes precedence and returns one row per domain.
3. Click Start.
4. Read deliverability_score and risk_level for the verdict.
5. Read spf_policy, dmarc_policy and blacklist_status for what to fix.

🧪 Using it in Clay

Add an Apify enrichment column and map your domain column to domain. The output is flat and one row per domain, so every field maps directly to a Clay column with no JSON unwrapping.

Gate downstream sends on a formula like deliverability_score >= 70 to keep risky domains out of a sequence before they cost you a reputation.

🔌 MCP

$npm install @mambalabsdev/mcp-domain-deliverability-checker

{
  "mcpServers": {
    "domain-deliverability": {
      "command": "npx",
      "args": ["-y", "@mambalabsdev/mcp-domain-deliverability-checker"],
      "env": { "APIFY_TOKEN": "YOUR_TOKEN" }
    }
  }
}

Tool: check_domain_deliverability with { "domain": "stripe.com" }. The Mamba Labs GTM Suite server exposes the wider fleet through one install.

💵 How much does it cost to audit a domain?

You are charged once per domain audited.

Plan	Per domain	Per 1,000 domains
Free	$0.005	$5.00
Bronze	$0.00475	$4.75
Silver	$0.0045	$4.50
Gold	$0.00425	$4.25

There is also an Actor start event at $0.00005, charged once per run per GB of memory.

Free Apify plans get 600 results per calendar month, resetting on the 1st. Paid plans have no monthly cap.

🛑 Your spending limit is respected. Set a maximum cost per run in Apify, or max_charge_usd on the Input tab, and the run stops before it would go over, keeping every result already charged. Each row's billable_events_json lists the events that row was charged for.

💳 This actor passes Apify platform usage costs through to you, unlike most of the Mamba Labs fleet, where we absorb them. That is compute and proxy usage billed at Apify's rates on top of the per-domain price above.

⚠️ A cached repeat lookup is served instantly but is still billed. This actor prices per result row, and Apify charges that event for every row written to the dataset, whether the answer came from the network or from the 24 hour cache. Corrected 2026-08-12: an earlier version of this section said cached repeat lookups were free. They are not, and they never were. Measured on 2026-08-12, an identical three domain re-run 75 minutes after the first was charged the same three result events. The cache saves you the wait and the platform usage, not the per-row price.

⌨️ Input

Everything is on the Input tab. Provide either domain or domains.

Field	Type	Default	What it does
domain	string	stripe.com	Bare domain, no scheme and no trailing slash.
domains	array	none	Batch. Takes precedence over domain. One row per domain.
batchSize	integer	5	Domains audited concurrently per wave. Maximum 10.
skipCache	boolean	false	Force a fresh audit and ignore any cached result.
attempt_catch_all	boolean	false	Run the SMTP catch-all probe. See Known limits before turning this on.
only_changed	boolean	false	Watch mode. Return only domains whose results changed since the last run with the same state_key; unchanged domains return no row and are not charged. Always reads fresh.
state_key	string	none	Names the saved results watch mode compares against. One per schedule.
max_charge_usd	number	none	Optional. The run stops before the next result that would take this run's charges over this amount, and keeps every result already charged. Leave empty to rely only on the maximum cost per run you set in Apify.

📤 Output

One flat row per domain, exportable as JSON, CSV, Excel, HTML or XML.

{
  "domain": "stripe.com",
  "spf_record": "v=spf1 include:_spf.google.com ~all",
  "spf_valid": true,
  "spf_policy": "softfail",
  "dkim_selectors_found": ["google", "s1", "s2"],
  "dkim_present": true,
  "dmarc_record": "v=DMARC1; p=reject;",
  "dmarc_policy": "reject",
  "dmarc_valid": true,
  "mx_records": [{"host": "aspmx.l.google.com", "priority": 10}],
  "has_mx": true,
  "mail_provider": "Google Workspace",
  "catch_all": null,
  "catch_all_status": "unknown",
  "blacklisted": false,
  "blacklists_listed": [],
  "blacklist_status": "clean",
  "spam_trap_risk": "low",
  "domain_age_days": 11238,
  "domain_age_source": "rdap",
  "has_website": true,
  "deliverability_score": 95,
  "risk_level": "low",
  "run_date": "2026-06-19T08:10:59Z",
  "parent_domain": null,
  "parent_dmarc_record": null,
  "parent_dmarc_policy": null,
  "parent_dmarc_subdomain_policy": null,
  "parent_spf_valid": null,
  "parent_has_mx": null,
  "dmarc_inherited": false,
  "effective_dmarc_policy": "reject",
  "parent_aware_score": 95,
  "watch_status": null,
  "changed_fields": null,
  "previous_check_at": null
}

🧾 More fields on every row

Field	Type	What it holds
row_status	string	ok, degraded, error, or notice (a notice row carries a message, not a result). Present on every row.
error_reason	string	Why the row is degraded or an error, in plain words. Null on an ok row. Present on every row.
billable_events_json	string	JSON list of the pricing events this row was charged for, for example [{"event":"apify-default-dataset-item","count":1}]. Lets you reconcile a run from the dataset alone. The once per run start event is not repeated on rows.

💡 Tips

• Audit your own sending domains before a campaign, not just your prospects'. That is the use this actor gets bought for most.
• spf_policy: "softfail" with dmarc_policy: "none" is the most common real finding on a domain that thinks it is set up correctly.
• A young domain with no authentication is the classic spam-trap shape. spam_trap_flags names which heuristics fired.
• Batch with domains rather than looping. Repeat lookups inside 24 hours are free anyway.

⚠️ Known limits

Catch-all is off by default. The Apify platform blocks outbound SMTP on port 25, so the catch-all probe returns unknown here. Enable attempt_catch_all only when running this actor on infrastructure that permits port 25 egress.

DNS blacklist coverage is best effort. Spamhaus and Barracuda block queries from cloud IPs and public resolvers without a paid data-query key, so some zones return unknown.

DKIM uses common-selector probing. DKIM selectors cannot be enumerated from DNS, so the actor checks a fixed list of provider selectors.

Domain age depends on the registry. RDAP returns the registration date for most TLDs; some registries omit or redact it, in which case the value is null or an approximate SOA-based fallback.

A domain with no MX is not an error. The row is emitted with has_mx: false, and the blacklist and SMTP checks are skipped.

Results are cached for 24 hours. Pass skipCache: true for a live audit.

❓ FAQ

Why is catch_all null?

Because the SMTP probe could not run. Apify blocks outbound port 25, so catch_all_status comes back unknown rather than a guess.

What does a score of 95 actually mean?

Read the score model above. It is published in full precisely so the number is not a black box.

Does it verify individual email addresses?

No. It audits the domain's sending setup, not a mailbox.

One domain failed in my batch. Did it break the run?

No. Failures are caught per domain, an empty record is pushed for that one, and the other rows are unaffected.

Is a clean result an all-clear?

Clean on the zones that answered. Check blacklists_checked.

🧩 Want other GTM data?

Mamba Labs builds a fleet of enrichment actors that share one flat output convention:

Actor	Actor ID
Account Hiring Watch	gRAZA5WBi1r6L0gy7
Agent Accessibility Auditor	anxbRv0lKrpQ1pnua
Agent to Brokerage Resolver	ePRRGLxOGyaVHO4dI
AI Answer Visibility Tracker	RJZvzKniYK4nswcMg
AI List Extractor for Any Website	D5hOdIez45M0NX5jD
AI Tooling Detector	EwkHhmqiuJgRoVEbE
Amazon Product, Price, and Stock Tracker	MtJPZoyjJ3IeqTFyo
Amazon Top Reviews Scraper	wh6Mq6G6BlW1CRPwx
API Deprecation and Breaking Change Monitor	pHsbS3xXUK8Jqutz5
App Store and Google Play Review Monitor	MaCMEhGrbchxQZ92G
B2B Reddit Conversation Monitor	SoDryzzsjmY3SsiyG
B2B Social Video Transcripts	dG2UYVKE2e4zfDucK
Bluesky Brand Presence Mapper	eLpxzP4IuXznlFVND
Bluesky Posts Scraper	KldSjS7wjoeZ7vQGm
Brand Sponsor Finder	PPgK6xrgOmvL7Nrys
Bulk WHOIS and RDAP Domain Age Lookup	MTrkG5FLU6SjqLdJY
Business PDF Field Extractor	vM7JCk0CMAx5W0oJh
Career Change Signal Engine	vX2Yga1a6wGaXaP14
Company Careers Page Jobs, 17 ATS Boards	izP0rfIgf5YaRZfIh
Company Change Event Feed	oX44rS0fkEJ3rXLWe
Company Discovery List Builder	jch0HdaZnpbMqlcGS
Company Firmographic Enricher	YlUtLWjfPpqykmB8g
Company Funding Record	OFS4Mt1gyYNtGfUbE
Company Headcount Estimator	aHC4GROnNt6kfZe5r
Company Identity Resolver	lr8fTRAmZCBZmuwwh
Company Role Email, Phone and Address Finder	4mMncKaJykiq94grz
Company Social Presence Mapper	4k6CCemkgBDz18m2h
Competitor Price, Stock, and Changelog Monitor	yxdgCbUQ4PYQWwRNU
Contact Classifier	0lGSeYJmniXhGANnO
Contractor License Search, CA, TX, WA, OR, LA	WBYK3CPI2kdeq4bP1
CRM Contact Job Change Checker	L8UbEmMJC1XYPSZOb
Domain Deliverability Checker	0tVgxI7A6o9jMlxmc
Domain to LinkedIn URL Resolver	3HtnSaqPHOg1Qg5gx
Ecommerce Platform Profiler	5G2NeYjBbQTjaTn9L
Ecommerce Store Discovery	PeHu4sLyFvQHXUUrX
Email List Verifier, Bring Your Own Key	CzVJ4NlaCKk80xpgE
Event Presence Index	WLhMy8fMDgsxdYxv5
Eventbrite Events Scraper	sgc6znyrbjOy5Yk9f
Expert Witness Finder, US and Australia	LIpwlgfE3LaQBaXd4
Facebook Posts Scraper	T6jxIeq4ua0SLXnqG
Funding and Press Signal Scanner	FS13X6dhQVgX3XOM6
GDPR Cookie Banner and Consent Checker	TrKyOS0KBoGC35nbr
GitHub Followers and Following Export	SGNxDmFb9v3tRDaFI
GitHub Organization Signal Scanner	ahF8RRpv5mzPao5CN
Google Ads Transparency Center Scraper by Domain	1eOwxhBVxzvOXAm4s
Google Maps Places Scraper	SuvHCNJ7pIuw6gn54
Google Trends Scraper	OeDzaACKmBYJXzHZk
GTM Hiring Signal Scraper	D7O1SA2EqwHGsGr1P
GTM Signals Aggregator	xKdRfnfFNkdMpFuNs
Healthcare Provider NPI Enricher	MrgbHzcpDq3mOv9Df
ICP Fit Scorer	W161DT8W4kW55dMFh
Influencer Change Monitor	d2VVgahNL6UmcLkhg
Influencer Lead List Builder	KnmByszcv135yM30G
Influencer Profile Scraper	EqEnklDVMIcB1V499
Influencer Search Across TikTok, Instagram and YouTube	tpkedmloIIWtXx6sg
Influencer Talent Agency Lookup	zCuX4Mgyg6JvXgGzd
Instagram Facebook Brand Presence Mapper	HXh65I0JBjPsunbY8
Integration and Marketplace Presence Mapper	V0guNuvM85Q61f2gj
Job Board Keyword Signal Scanner	4DvqpvhMR74NLcDDY
Job Posting Monitor	QCfICD9kOPiOdj5iI
Journalist and Media List Builder	mAfizsZC8qRoR0ecS
Launch Directory List Builder	cRq3bmvEZxZtioQ7U
Lead File Import Checker	RwlGVXTf46LqZdUgt
Legal Entity Resolver	KHFyPCDIx7CyqULYm
Link in Bio Scraper and Newsletter Detector	OorucdheTIgu7RFzK
LinkedIn Company Page Mapper	zOPm6A9JEhUGcIdFW
LinkedIn Jobs Feed	SH6N0d8cz46BhCC8B
LinkedIn Post Tracker	oiGLNPuaf5BRaz9K5
Local Business Lead Builder	qMN97aoHhsAS5bznV
Local Rank and Map Pack Tracker	gv0kyHGDIg8XscclB
Lookalike Companies from Seed Domains	e2O426WBAbLLQL4Z2
Manufacturer and Supplier Finder	Qcsdmd0lUfPzVkonh
MCP Server Change and Health Monitor	IeqjWF9U0BdDQFY08
Media URL Transcriber	Syfr7Ya3EsHgWfrB6
Meta Ad Library Ads by Company, Graph API	J1GWlSXfSGU3u8Wng
Mobile Phone Waterfall	6OOgPktf7RIa5XCOP
Multi Platform Social Posts and Comments	icFuHR1EzDvUcfCQ5
Netherlands Rental Listings	sGKGsbwoX18lFb6dR
New Hire Finder	cKuc38p4nYHNF3IW8
Newly Registered Companies, UK, Norway, Finland, France	g2WfZhWvCtc57g2Jo
News and Media Mention Monitor	gol1PPUKrsIk4QLBd
News Site Article Archive	NjcF3UD8791raFNHh
Newsletter Sponsor Tracker	qSwpqxD1TiPZpLQHv
Open Tender and RFP Finder	kPTGz6t6TFoUUyfaO
Outbound Stack Detector	v43UJC8r7qW7cBSTG
Page Finder and Extractor	TpurgcOZbVnknlaiC
Partner and Member Directory Extractor	ZX0XJPPUvnFJxeC1a
People Finder & Email Verifier	LEgloG7tWgQl4o6TD
Person LinkedIn URL Resolver	ssuyPV8LnEsL8qbnb
Person Social Footprint Mapper	jfQXa2zW9FHCJot9K
Personal Email to Company Resolver	AefT5Ye6YNPFQwJBf
Pinterest Brand Presence Mapper	d1HvjZfKhgvWsoEwn
Podcast Guest and Host Finder	o2MGSvgbSLeeXOsIo
Private Company Funding History	H02K3rQIVOYpnLYc3
Product Hunt Daily Launches with Maker Domains	O4VX63drWK9Y9x641
Property Owner Records	0J7ovG1iaZpQD1P0T
Prospect Engine	q9rT6v64nUJdPexOQ
Public Feature Board and Roadmap Monitor	rcHF5gj5r2Vqnry35
Publishing Frequency Tracker	TbLwaUUATdYb6wp4N
Recent Funding Rounds Feed	KueVp9MOz7iOoAgDp
Reddit Brand Presence Mapper	pKQZmDaT70SEb54bZ
Reddit Search and Thread Scraper	4Gsth5cP2Xt9V2xDN
Reporting Window Finder	uINxR7a1IW8qUTRUX
Research Topic Institutions and Authors	OH8ANqt7bCKbo72Gk
Semrush Domain Metrics	3dqa0abJrpssHtrYL
Sequencer Event Poller	S6s8Rjd61tGdrMRk4
Sequencer Lead Push	0Jv27VeWM5tSZQs9x
Shopify App Store and Chrome Web Store Listings	gaY0BzkLyN77mD3wI
Site Crawler for Links and Tables	lLLJ6JxZ4XqN8ULz0
Streaming Subscription Prices by Country	tbMroS2Zyn57bW17E
Substack Newsletter and Posts Scraper	UEFsdwiPLmPNVy9xd
Team Page People Extractor	j8a9zX0k4mNbvDbWK
Tech Stack Signal Detector	qyd7nNyqFPelQViBx
Tennis Match Data	v3OX6zxXHZOf2yurO
Threads Posts by Keyword, Exact Match	2OT8K8RiEEWtaj2MW
Ticketmaster Event Prices	CrvPX4IwLXQX9bls1
TikTok Brand Presence Mapper	fco8FvoJcSafbeyd1
TikTok Video Stats	uz9Q3cEycRgA6NfqA
Trustpilot Reputation Enricher	3lIqfCt61j4hqE1xz
US and UK Contract Award Winners by Company	zhEtllASykOcx9hJ8
US Import Records Buyer Finder	VIMafpKF5ggOw0COU
VC and Accelerator Portfolio List Builder	chH8hrfuoqqolW06m
Website Accessibility Checker, WCAG 2.2 AA	P3jBj3FRghKEhX52z
Website Phrase and Business Model Classifier	CBuZ9k7sRwBeiKiCS
Website Traffic Rank Estimator	GnOFUzlNVIoXgeJjH
Work Email Waterfall	OT6xqTFThC0Rjf7Zj
Workplace Program Detector	Li6pPDhqbdzFz3h7G
X Brand Presence Mapper	oLOgadhHUkNAyDA3w
YouTube Channel and Video List Scraper	txaAjeBqgj5MStFE4
YouTube Channel Email Finder	IDgKZcmeeuunUbccN
YouTube Channel from Company Domain	6hSpD3kd2s2IQ4VSs
Zillow Listing Details	yG4zM0Enfsw2NefJ1

Every actor in the suite takes a domain or a company and returns one flat row, so they stack in the same Clay table without reshaping anything.

🆘 Support

Something wrong, or a mail provider the actor does not recognize? Open an issue on the Issues tab with the domain and the row, and we will look at it.

ℹ️ Sourcing and legal. Every field comes from public DNS records, public RDAP registry data and public DNSBL zones. Nothing reads a mailbox or sends a message. The catch-all probe, when enabled, opens an SMTP conversation and never delivers anything. You are responsible for how you use the output.

Built by Mamba Labs.