Developer API

Email-domain posture data without building a scanner yourself.

A security-conscious API for normalized SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT, DANE and TLS signals.

Built for ESPs, CRMs, hosting and onboarding platforms.

The outcome

Give product teams protocol-depth results through a clean API contract.

Read API docs

What it verifies

Scoped bearer keys stored only as hashes

RFC 9457 problem responses and rate limits

Bounded, SSRF-safe outbound probing

YAS reports externally observable technical signals. It does not claim that a single scan makes a domain compliant, secure, or deliverable; review findings in the context of your environment.