Analyze email headers
analyze_headersAnalyze pasted raw email headers. Reports From / Return-Path / Reply-To / DKIM d= alignment (relaxed and strict), SPF / DKIM / DMARC / ARC verdicts as recorded by the receiving servers (Authentication-Results, ARC-*), the Received hop chain oldest first with per-hop delays and public IPs, and plain-English findings with severity and what each means or how to fix it. Makes no network or DNS calls and does not verify signatures. Header text is not stored. Read-only. Same engine as the MailAlign JSON API (POST /api/analyze).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| headers | Yes | The full raw header block of one email, e.g. "Received: from ... Authentication-Results: ... From: ...". A body after the first blank line is ignored. | |
| include_raw | No | Also return the full /api/analyze JSON (all findings and hops) in structuredContent.raw. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| arc | No | ||
| raw | No | Full /api/analyze response (only when include_raw is true) | |
| spf | No | ||
| dkim | No | ||
| hops | Yes | ||
| dmarc | No | ||
| verdict | Yes | ||
| version | Yes | ||
| findings | Yes | ||
| publicIps | No | ||
| fromDomain | No | ||
| spfAligned | No | ||
| dkimAligned | No | ||
| hopsOmitted | No | ||
| findingsOmitted | No | ||
| totalDelaySeconds | No |