Developers & API

Public Tools API Reference

Gugu provides free, public HTTP GET endpoints for SPF, DKIM, DMARC, MX, and IP blacklist checks. No registration or API key required.

Free & Open Service

Free & Open

All public tools endpoints are open to everyone. No prior sign-up or API tokens required.

HTTP 429

Rate Limits

Up to 60 requests per hour per client IP. Returns HTTP 429 when the limit is exceeded.

60s TTL

Server Caching

Query results for identical targets are cached in-memory on the server for 60 seconds.

HTTPS

Base URL

https://gugu.tr

Available Endpoints

The following GET /api/v1/tools/* endpoints return JSON responses directly.

Add ?lang=tr, en, de, fr, or sr to choose the language of findings; a missing or invalid value returns Turkish.

GET/api/v1/tools/spf?domain=example.com

SPF Record Check

Queries the SPF TXT record for the domain, parses syntax and evaluation mechanisms.

Parameters:

domain: Domain name to query (e.g. example.com)

cURL Example:

curl -s "https://gugu.tr/api/v1/tools/spf?domain=example.com"

GET/api/v1/tools/dkim?domain=example.com&selector=default

DKIM Key Check

Verifies the public key TXT record for the specified selector and domain.

Parameters:

domain: Domain name, selector: DKIM selector (e.g. default)

cURL Example:

curl -s "https://gugu.tr/api/v1/tools/dkim?domain=example.com&selector=default"

GET/api/v1/tools/dmarc?domain=example.com

DMARC Policy Check

Inspects the DMARC policy, alignment rules, and reporting tags from the _dmarc record.

Parameters:

domain: Domain name to query (e.g. example.com)

cURL Example:

curl -s "https://gugu.tr/api/v1/tools/dmarc?domain=example.com"

GET/api/v1/tools/bimi?domain=example.com

BIMI Record Check

Checks the domain BIMI record, logo link and DMARC requirements.

Parameters:

domain: Domain name to query (e.g. example.com)

cURL Example:

curl -s "https://gugu.tr/api/v1/tools/bimi?domain=example.com"

GET/api/v1/tools/mx?domain=example.com

MX Delivery Path Check

Lists MX host destinations, priority order, resolved IP addresses, and provider info.

Parameters:

domain: Domain name to query (e.g. example.com)

cURL Example:

curl -s "https://gugu.tr/api/v1/tools/mx?domain=example.com"

GET/api/v1/tools/domain-scan?domain=example.com

Domain Scan

Scans SPF, DMARC, MX, BIMI, MTA-STS and TLS-RPT records in one request.

Parameters:

domain: Domain name to query (e.g. example.com)

cURL Example:

curl -s "https://gugu.tr/api/v1/tools/domain-scan?domain=example.com"

GET/api/v1/tools/blacklist/ip?ip=1.2.3.4

IP Blacklist Lookup

Checks an IPv4 or IPv6 address across 20+ DNSBL/RBL spam lists.

Parameters:

ip: IP address to check (e.g. 1.2.3.4)

cURL Example:

curl -s "https://gugu.tr/api/v1/tools/blacklist/ip?ip=1.2.3.4"

HTTP Response Codes

200 OK — Successful inspection, returns JSON result object.

400 Bad Request — Missing or invalid query parameter.

429 Too Many Requests — Hourly rate limit (60 requests) exceeded for this IP.