DNS Doctor × AmbactiBring DNS Doctor into
the flow of work.
A little less busywork with DNS Doctor.
Domain7 capabilities+
- Add a domain to monitoring
Adds a domain to the token account's monitoring and returns the ownership TXT record to publish. Requires a credential with the domains:manage scope.
- Build the next safe DMARC record for a domain
The next safe DMARC record (alignment-gated) with the rationale. The record can be null; then the rationale is the answer.
- Check whether a domain ownership record is visible
Re-checks the ownership TXT record and marks the domain verified on a match. A transient outcome is our lookup, never a verdict about the DNS.
- Get the records a monitored domain still needs
The ownership record while unverified, and the DMARC reporting record once verified. Read-only.
- Get a monitoring signup link for a domain
A link that carries the domain into paid monitoring, for a human to open. Nothing is created and no email is sent.
- Get the persisted report for a domain
The last persisted report, or a fresh scan when none exists
- Scan a domain
SPF, DKIM, DMARC, MX, DNS health, blacklists and expiry with deterministic per-check verdicts and copy-paste fix records
Tool8 capabilities+
- Audit an SPF include chain
Walk every include and redirect and report who can transitively send as the domain, with typed findings
- Check a DKIM selector
Read one DKIM selector and report the key and its strength
- Check a DNS record
Read one record at the authoritative nameservers and at public resolvers, with TTLs and whether they agree
- Check DNS propagation
Read one name from six locations on four continents and report whether a change has propagated
- Check reverse DNS for an IP
The PTR record of an IP address and whether it is forward-confirmed
- Count SPF DNS lookups
The DNS lookups an SPF record spends against the limit of 10, term by term
- Look up a domain registration
Read the registry over RDAP for registrar, dates, EPP status codes, nameservers and DNSSEC
- Validate a DMARC record
Parse a DMARC record and report its tags, policy, warnings and errors
Monitoring2 capabilities+
- Get monitoring alerts
Alerts for your monitored domains, newest first, with a paging cursor. Needs an API token.
- Get DMARC enforcement readiness
Whether a monitored domain is ready for the next DMARC policy step, from its aggregate reports. Needs an API token.
Frequently asked
questions.
What could an Ambacti integration do with DNS Doctor?
The documented operations include Domain: Add a domain to monitoring; Domain: Build the next safe DMARC record for a domain; Domain: Check whether a domain ownership record is visible; Domain: Get the records a monitored domain still needs.
Could I keep a workflow read-only?
For a read-only workflow, limit account permissions to reading data and exclude actions that create, update, or delete records.
Will every action run automatically?
Choose which steps could run on their own and which should pause for review. Changes should follow the permissions and approval rules you set.
Do I need to review actions in DNS Doctor?
Decide which work could run on its own and which steps need your review.