API reference

Base URL https://emailsecops.com/api/v1. Every endpoint needs Authorization: Bearer <team token>.

Account

• GET /me Team, plan and limits of the token

Domains

• GET /domains List monitored domains
• POST /domains Add a domain (returns the TXT record that proves ownership)
• GET /domains/{domain} Domain with latest posture, recommendations and exact DNS fixes
• DELETE /domains/{domain} Remove a domain
• POST /domains/{domain}/verify Look for the ownership TXT record now
• POST /domains/{domain}/check Queue a posture check (verified domains)
• GET /domains/{domain}/checks Posture check history
• GET /domains/{domain}/diffs Changes between consecutive checks

DKIM

• GET /domains/{domain}/dkim DKIM selector inventory with key age, health, report evidence and findings
• POST /domains/{domain}/dkim/selectors Monitor a selector we cannot discover (looked up immediately)
• GET /domains/{domain}/dkim/selectors/{selector} One selector with its key rotation history
• DELETE /domains/{domain}/dkim/selectors/{selector} Stop monitoring a selector you added (409 if it is published)
• GET /dkim/lookup Live DKIM check of any domain: one or more selectors, or discovery across common selectors
• POST /dkim/verify Cryptographically verify every DKIM-Signature of a raw message (body hash and signature)
• POST /dkim/generate Generate a key pair and the exact TXT record (not stored or logged)

DMARC

• GET /domains/{domain}/dmarc DMARC report summary, enforcement advice and daily series

Alerts

• GET /alerts Alerts, newest first
• POST /alerts/{alert}/resolve Mark an alert resolved

Intelligence

• GET /intel/domain Full posture of any domain without adding it
• GET /intel/email Risk check of one email address
• POST /intel/emails Risk check of up to 100 addresses

Webhooks

• GET /webhook-events Event types an endpoint can subscribe to
• GET /webhooks Webhook endpoints (meta.limit = plan allowance)
• POST /webhooks Create an endpoint; the signing secret is returned once
• GET /webhooks/{webhook} One endpoint
• PATCH /webhooks/{webhook} Change URL, events, domains or enabled
• DELETE /webhooks/{webhook} Delete an endpoint and its delivery log
• POST /webhooks/{webhook}/test Send a webhook.test event now
• POST /webhooks/{webhook}/rotate-secret New secret; the old one keeps signing for 24 hours
• GET /webhooks/{webhook}/deliveries Delivery log (30 days)
• GET /webhooks/{webhook}/deliveries/{delivery} One delivery with payload and response
• POST /webhooks/{webhook}/deliveries/{delivery}/redeliver Send a delivery again (same webhook-id, new signature)