DMARC & DNS MCP Server
DMARC MCP Server and DNS MCP Server provide programmatic access to DMARC analytics, DNS records, and domain monitoring through the Model Context Protocol (MCP). Connect your development tools to access email authentication data programmatically.
Get started with DMARC MCPKey Features
The DMARC MCP Server and DNS MCP Server provide comprehensive programmatic access to email authentication data and DNS records through Model Context Protocol endpoints.
Installation Guide
Connect the DMARC and DNS MCP Server to MCP-compatible tools and start accessing DMARC and DNS data programmatically. Full installation instructions are available after signup at
https://app.dmarcdkim.com/api-keys/mcp-instructions
Step 2: Connect to MCP Clients
Use your API key to connect the DMARC MCP Server to your preferred development tool. We support Claude Code, Cursor (1-click install), VS Code, and other MCP-compatible clients.
Full installation instructions are available after signup at
app.dmarcdkim.com/api-keys/mcp-instructions
Talk to DMARC Reports via MCP
We're working on bringing DMARC report data directly to your MCP server. Get notified when this feature becomes available.
Access your DMARC aggregate reports programmatically through the Model Context Protocol. This feature will allow you to query report data, analyze email authentication results, and integrate DMARC insights into your development workflow.
MCP Tools & Use Cases
The DMARC MCP Server provides four powerful tools for DNS and email authentication analysis. Learn how each tool works and when to use them.
DNS Lookup Tool
Performs comprehensive DNS lookups for domains and IP addresses with support for all standard and email authentication record types.
Supported Lookup Types:
- Standard records: A, AAAA, MX, TXT, NS, CNAME
- Email authentication: SPF, DMARC
- Reverse DNS: PTR lookups
- Domain information: WHOIS data
- Bulk queries: "all" type for multiple records
Use Cases:
- Verify DNS record configuration
- Check email server MX records
- Retrieve SPF and DMARC email authentication records
- Perform reverse DNS lookups for IP addresses
- Retrieve domain WHOIS information
Example:
Use the DmarcDkim MCP server to check DNS records for example.com. Retrieve A records for IP addresses, MX records for email servers, and SPF and DMARC records for email authentication.
Retrieved A records (192.0.2.1, 192.0.2.2), MX records (mail.example.com priority 10), SPF record (v=spf1 include:_spf.google.com ~all), DMARC record (v=DMARC1; p=none; rua=mailto:dmarc@example.com). All email authentication records retrieved successfully.
DMARC Check Tool
Validates DMARC policy records and SPF records for a domain with comprehensive error detection and reporting. This tool checks the _dmarc subdomain for DMARC policies and validates SPF record configuration.
What It Checks:
- DMARC policy records from _dmarc subdomain
- SPF records (TXT records starting with v=spf1)
- DMARC configuration errors and syntax issues
- DNS record availability and validity
Use Cases:
- Verify email authentication DNS setup for a domain
- Diagnose email delivery issues related to authentication
- Check if domain is properly configured for DMARC
- Verify SPF records are present and correctly formatted
- Get a quick overview of DMARC and SPF status
Example:
Use the DmarcDkim MCP server to check DMARC and SPF records for example.com. Verify the email authentication configuration and report any errors or policy issues.
DMARC policy found (v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com), SPF record present (v=spf1 include:_spf.google.com ~all). No configuration errors detected. The domain is properly configured for DMARC enforcement.
SPF Check Tool
Validates SPF record syntax, checks DNS lookup count against RFC 7208 limits, and detects circular references.
Validation Features:
- Syntax validation and error detection
- DNS lookup count (RFC 7208 limit: 10 lookups)
- Circular reference detection in include/redirect chains
- SPF tree structure parsing with all mechanisms
Use Cases:
- Validate SPF record before deployment
- Ensure compliance with RFC 7208 (10 lookup limit)
- Detect configuration errors that could break email delivery
- Understand SPF record structure and mechanisms
Example:
Use the DmarcDkim MCP server to validate the SPF record for example.com. Check for syntax errors, verify DNS lookup count is ≤10 (RFC 7208 limit), and detect any circular references in include chains.
SPF record found: v=spf1 include:_spf.google.com include:_spf.salesforce.com include:_spf.mailchimp.com ~all. Validation results: 12 DNS lookups required (exceeds RFC 7208 limit of 10 - this will cause email delivery failures). Syntax error detected in include statement: invalid domain format in "include:_spf.mailchimp.com". Circular reference detected in include chain: example.com → other.com → example.com. The SPF tree structure shows the problematic include chain that needs optimization.
SPF Merge Tool
Merges multiple SPF records or mechanisms into a single optimized record with duplicate removal and proper formatting.
Features:
- Removes duplicate mechanisms
- Sorts mechanisms by type and qualifier
- Preserves qualifiers (-, ~, +, ?)
- Adds recommended "~all" if missing
- Handles modifiers (redirect, exp)
Use Cases:
- Consolidate multiple SPF records into one
- Merge SPF records when migrating email providers
- Optimize SPF records by removing duplicates
- Combine existing domain SPF with new mechanisms
Example:
Use the DmarcDkim MCP server to merge SPF records. Fetch the existing SPF record from example.com and combine it with ip4:192.168.1.0/24 and include:_spf.newprovider.com. Remove duplicates and create a single optimized record ready for deployment.
Successfully merged SPF records. Original domain SPF: v=spf1 include:_spf.google.com ~all. New mechanisms added: ip4:192.168.1.0/24, include:_spf.newprovider.com. Merged result: v=spf1 include:_spf.google.com include:_spf.newprovider.com ip4:192.168.1.0/24 ~all. Duplicates removed, mechanisms sorted by type, qualifiers preserved, ready for deployment. Note: After deployment, validate the merged record with SPF Check to ensure it complies with RFC 7208 limits.
Tips for Using MCP Tools
Connect Your Domain
Connect your domain to start using the DMARC MCP Server and DNS MCP Server. Access DMARC analytics, DNS records, and domain monitoring through Model Context Protocol endpoints.