hi"
}
```
### POST /email-preflight/v1/css_support — 1 credit
Email-client CSS/HTML compatibility map for the template (Can-I-Email data, MIT): which CSS features used in the HTML break or degrade in Outlook/Gmail/Apple Mail/Yahoo and friends. Pure local compute (offline snapshot).
**Parameters:**
- `html` (string, required) — The full HTML of the email you are about to send (paste the source). Parsed read-only in a no-network, no-script sandbox.
**Returns:** features_detected[{feature,title,category,unsupported_in[],partial_in[],high_risk,support_map{}}], high_risk_count, clients_considered[], data_source (bundled-snapshot|curated-fallback), data_version, summary
**Example request body:**
```json
{
"html": "x
"
}
```
### POST /email-preflight/v1/spam_score — 1 credit
Deterministic spam-SIGNAL score for the email content (caps ratio, image-to-text ratio, spam phrases, missing unsubscribe, raw-IP links…). HONEST: a content signal score, NOT an inbox-placement prediction; SpamAssassin/Rspamd sidecar = the calibrated upgrade (see docs). Pure local compute.
**Parameters:**
- `html` (string, required) — The full HTML of the email you are about to send (paste the source). Parsed read-only in a no-network, no-script sandbox.
- `subject` (string, optional) — Optional subject line — included in the spam-signal analysis.
- `text_part` (string, optional) — Optional plain-text alternative of the email. If omitted, the audit flags the missing multipart/alternative text part.
**Returns:** score (>=5 ~ likely spam), verdict (clean_signal|suspicious|likely_spam), triggered_rules[{rule,score,description}], rule_count, metrics{words,caps_ratio,image_count,link_count,has_unsubscribe_text}, threshold_note, engine
**Example request body:**
```json
{
"html": "100% FREE!!! ACT NOW — WIN CASH PRIZE
", "subject": "FREE MONEY" } ``` ### POST /email-preflight/v1/check_links — 2 credits Resolve every link in the email through url-resolver (SSRF-guarded): final URL, redirect chain, status, final domain. Bot-403/429 = `unverifiable` (honest — not marked broken). Inner-calls url-resolver per link. **Parameters:** - `html` (string, required) — The full HTML of the email you are about to send (paste the source). Parsed read-only in a no-network, no-script sandbox. - `base_url` (string, optional) — Optional base URL: relative links/images in the HTML are resolved against it before checking. **Returns:** links[{url,final_url,final_domain,status,redirect_count,verdict: ok|broken|redirect|unverifiable|blocked|skipped}], counts{total,checked,ok,broken,redirect,unverifiable}, unique_domains[] **Example request body:** ```json { "html": "ab" } ``` ### POST /email-preflight/v1/check_images — 1 credit Audit every
"
}
```
### POST /email-preflight/v1/dns_auth — 1 credit
Sender-domain email-authentication summary (SPF/DKIM/DMARC/MX + deliverability grade) via an inner-call to the email-health engine — REUSE, not re-implemented here (email-health owns DNS auth; this is a thin preflight wrapper).
**Parameters:**
- `domain` (string, required) — The sending domain (the From: address domain). Its email authentication (SPF/DKIM/DMARC/MX) is summarized via email-health.
- `dkim_selector` (string, optional) — Optional DKIM selector to look up (e.g. 'google', 's1'). If omitted, email-health autoscans common selectors.
- `include_blacklist` (boolean, optional, default false) — Also run the slower DNSBL reputation pass (email-health blacklist). Default false = auth-only (SPF/DKIM/DMARC/MX), the fast pre-send check.
**Returns:** domain, score{score,grade}, spf{found,policy}, dkim{found,selectors_found}, dmarc{found,policy,enforced}, mx{found,provider}, summary, source ('email-health inner-call'), reused_engine
**Example request body:**
```json
{
"domain": "github.com"
}
```
### POST /email-preflight/v1/preview_basic — 3 credits
Basic visual preview: render the HTML to a PNG via web-capture's browser sandbox. HONEST: a browser render, NOT a real email-client render (no Outlook/Word engine). Degrades gracefully if web-capture is not deployed.
**Parameters:**
- `html` (string, required) — The full HTML of the email you are about to send (paste the source). Parsed read-only in a no-network, no-script sandbox.
- `width` (integer, optional, default 600) — Viewport width in px (typical email width = 600).
**Returns:** image_b64 (PNG) or unavailable status, width, rendered_by ('web-capture'), disclaimer (browser != email-client render)
**Example request body:**
```json
{
"html": "