Skip to the documentation
API

Check the DMARC policy of a domain

What the DMARC record of any domain says, and what is wrong with it.

GET/tools/dmarc

Runs the real call on your workspace.

GET /tools/dmarc

What the DMARC record of any domain says, and what is wrong with it.

Example

Needs no scope. domain is any public domain, and an email address or a URL is read as its domain. stage is missing, invalid, monitor for p=none, quarantine or reject.

curl
curl "$OE/tools/dmarc?domain=acme.com" -H "$AUTH"
Response
{  "object": "dmarc_report",  "domain": "acme.com",  "record": "v=DMARC1; p=quarantine; rua=mailto:[email protected]",  "inheritedFrom": null,  "tags": { "v": "DMARC1", "p": "quarantine", "rua": "mailto:[email protected]" },  "stage": "quarantine",  "issues": []}

A subdomain with no record of its own inherits the record of its organisational domain, and inheritedFrom names it.

Every answer is what public DNS said at that moment. DNS that does not answer is a 503 unreachable, which is worth retrying, and a value that does not read as a domain is a 422 invalid_parameter on domain.

Reference