DMARC, SPF and DKIM checker
Free DMARC, SPF and DKIM checker.
Seven APIs, 44 endpoints, one key. Convert an image, merge a PDF, screenshot a page, read a scan, transcode a video, audit a domain's mail security, draw a barcode. Plain HTTP, no SDK, no client library to keep up to date.
Every endpoint answers a demo quota of 25 calls a day per IP address. Paste this in a terminal.
curl "https://173-249-18-142.sslip.io/v1/qr?data=https://example.com&size=400" --output qr.pngSomething more useful — a full mail-security audit of any domain, graded A to F:
curl -X POST "https://173-249-18-142.sslip.io/v1/domain/mail-security" \
-H "Content-Type: application/json" \
-d '{"domain":"github.com"}'Eight browser tools built on the same endpoints. Free, no signup, no watermark, nothing stored.
Free DMARC, SPF and DKIM checker.
Free SSL/TLS certificate checker: issuer, subject alternative names, protocol, cipher, chain length and the exact number of days before expiry.
Free HTTP security headers test: HSTS, Content-Security-Policy, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP and CORP, scored A to F.
Free DNSBL lookup across Spamhaus ZEN, SpamCop, Barracuda, SORBS, PSBL, WPBL, UCEPROTECT and more, with the listing reason when the list publishes one.
Free website screenshot tool.
Free QR code generator: URL, text, Wi-Fi credentials, vCard and more.
Free image compressor for JPEG, PNG, WebP and AVIF.
Free PDF merge tool.
One key unlocks all of them, and one quota covers all of them. No per-product plans to juggle.
Convert, compress, resize, watermark and inspect images.
Merge, split, compress, protect and read PDF files.
Screenshots, page-to-PDF and clean content extraction from any URL.
Read text out of images and scanned PDFs, in 7 languages.
Transcode, compress, trim and take thumbnails from media files.
SPF, DKIM, DMARC, TLS, DNS, RDAP and blacklist checks with a grade.
Generate QR codes and 20 barcode symbologies as PNG or SVG.
Most projects need a bit of image work, a bit of PDF work and one screenshot. That is normally three signups, three invoices and three SDKs. Here it is one key and one bill.
$19 a month buys 20,000 calls across every endpoint. Nothing is metered twice and nothing is reserved for an enterprise tier.
Uploads live in a per-request scratch directory that is removed as soon as the response is written. Nothing is stored, indexed or used for training.
The domain and mail-security API is the part we use ourselves: SPF lookup counting against the RFC 7208 limit, DKIM selector probing, DMARC parsing, certificate expiry.
200 calls a month, every endpoint, no card. The key appears once on this page — copy it somewhere safe, we only keep a hash.
We use the address to deliver the key and to warn you before a quota runs out. Nothing else, no list, no third party.