Managed SPF

Stop fighting
the 10-lookup limit.

Every ESP you add pushes you closer to the SPF lookup limit. mxio resolves your entire include chain to IP addresses and keeps it current automatically — one DNS record on your end, zero maintenance.

Get started on Pro Check my SPF first

Why SPF breaks

RFC 7208 limits SPF evaluation to 10 DNS lookups. Every include:, a, and mx mechanism counts. Add Google Workspace, SendGrid, Salesforce, Mailchimp, and a few more — you hit the limit before you realize it.

When you exceed 10 lookups, receivers return permerror — which DMARC treats as an SPF failure. Mail from legitimate senders gets flagged or rejected.

The standard fix is manual flattening: resolve the IPs yourself and hardcode them. It works until a provider changes their infrastructure — which they do, without announcing it.

How Managed SPF works

Add your domain

Add your domain to mxio. We parse your current SPF record, resolve every include chain, and show you the full lookup tree.

Point one DNS record

Replace your current SPF `include:` with a single `include:spf.mxdns.io` (or your custom subdomain). One record. We manage everything behind it.

We keep it current

mxio polls your upstream providers continuously. When Google, SendGrid, or Mailchimp changes their IP ranges, we update the flattened record automatically — before your mail breaks.

What's included

Stays under 10 lookups

RFC 7208 permits 10 DNS lookups per SPF evaluation. One `include:` to mxio uses one of those 10. Everything else is pre-resolved to IP ranges, no matter how many senders you have.

Automatic polling

Upstream providers change their IP ranges without notice. mxio detects those changes and republishes your SPF record within hours — not after a bounced email tips you off.

Full include tree

See every include, mechanism, and IP in your current SPF record expanded into a readable tree. Understand exactly what you're authorizing before you flatten it.

Change history

Every time the flattened record is updated, mxio records what changed and why. Audit trail for compliance, debugging, and "who changed this?" moments.

Works with any DNS provider

Your domain can be hosted anywhere — Cloudflare, Route 53, GoDaddy, Namecheap. You point one record at mxio. We handle the DNS on our end.

Included in domain health

Managed SPF domains get continuous health monitoring alongside flattening. SPF errors, DMARC alignment issues, and blacklist hits all surface in the same dashboard.