AI broke my email records. How do I check SPF and DMARC?

Updated 2026-10-17

Short answer: look up your SPF, DKIM and DMARC records, and check there's one SPF record under 10 lookups.

AI coding tools check that the code runs. They don't check what the live site serves. So a change can pass every test and still break the site, and the AI reports the job as done. An AI that edits DNS or adds an email service often adds a second SPF record or pushes SPF past its 10-lookup limit.

How to check it yourself

  1. Look up your domain's TXT records. There must be one SPF record, not two.
  2. Count the lookups in SPF. Over 10 and it fails.
  3. Check your DMARC record exists and has a policy.
  4. Check DKIM is set up for every service that sends your email.

What Preventionlabs shows

Preventionlabs checks SPF and its 10-lookup limit, DKIM and DMARC for your domain. Each report lists problems first, with the evidence and what to do, and shows what changed since the last report.

Give your AI agent the Preventionlabs MCP server and it runs the same check itself after it deploys.

Price

First report free, no card needed. Then A$50 a month, up to 10 domains.

Run your first report free

More questions it answers