How it works

Every step, and exactly what it's allowed to do

This page exists so you never have to guess what domain-repair.com can touch. If a step needs a permission, it's named here.

1

Connect your sender

Read access to your domain list

Instantly or Smartlead, read-only. We pull the list of sending domains you're already running outbound through. Nothing about your campaigns or leads. Paste an API key, validated live on connect, not an OAuth grant.

2

Scan every 6 hours

No write access needed

SPF, DKIM, DMARC, MX, and blacklist status for every connected domain, checked automatically every 6 hours. This is the same read-only lookup the free scan runs, just on a schedule instead of on demand.

3

Detect and explain

No additional permission

A finding isn't just a red dot. It's a plain-language explanation of what's wrong and why it matters, with a severity level, in the workspace.

4

Review or remediate

Explicit, scoped write access, granted and revoked by you

Where you've connected GoDaddy (or, once verified, Cloudflare), a proposed fix appears as a before/after diff. By default it waits for your approval. You can opt a domain into automatic remediation; you can opt it back out at any time.

5

Notify and report

No additional permission

You're told first, in the workspace, and by Slack if you connect a webhook. A client-ready written summary follows on a schedule, not as a raw DNS dump you have to translate yourself.

Try the fix logic yourself

This runs the exact SPF analysis and fix-proposal code the product uses, live, on a real domain or on a record you paste in. Nothing here is a mockup.

Review-before-apply vs. automatic remediation

Review before applying

The default once a provider is connected and write access is on for a domain. A proposed fix appears as a diff and sits there until someone clicks Approve, then Apply. Nothing is written without both of those being a real, separate click.

Turned off is always the fastest way out

Any of these three can be changed per domain at any time from the dashboard's connections page. Turning write access off entirely reverts a domain to read-only immediately.

Current status: GoDaddy has live, working write access, connect once with a Personal Access Token and proposed fixes can be applied directly. Cloudflare has real client code built against its published API but isn't yet verified against a live account, so it stays scan-only for now. See the Integrations page for the exact status of every provider.

Logging and rollback

Every proposed, approved, or applied change is recorded with who made the decision (a person or domain-repair.com itself), what changed, and when. The change log on the dashboard is that record, not a marketing mockup. For an applied fix, the previous record value is retained so it can be restored, one click, no support ticket.

Sample, illustrates the applied/revert format

SPF record, vantage-cold.com
Applied
v=spf1 -all
v=spf1 include:_spf.google.com ~all

SPF has no explicit "all" mechanism at the end. Eligible for auto-apply once turned on for this domain.

The revert button above is real in your workspace

This sample is read-only because there's no signed-in domain behind a marketing page. In the dashboard, an applied fix like this one has a working "Revert to previous value" button that re-reads the live record and safely writes the previous value back.
Full data handling and retention details on the Security page →