Connect DMARC Report

Written By Christopher Scaminaci

Last updated About 3 hours ago

DMARC Report (by DuoCircle) collects the DMARC aggregate and forensic reports that mail receivers send about your domains, the MTA-STS (TLS-RPT) reports about your mail servers, and Google Postmaster data. It scores each domain's DMARC compliance, shows which services send mail as you and whether they pass SPF and DKIM, checks BIMI readiness, and can host a domain's DMARC and MTA-STS records for you. StackJack talks to DMARC Report through its v2 REST API.

Connecting DMARC Report to StackJack gives your AI assistant a family of dmarcreport_ MCP tools. MCP (Model Context Protocol) tools are the standardized commands an AI assistant can call through StackJack. With them, your AI can:

Review accounts and domains - the accounts your DMARC Report user owns or shares, their domains with the published DMARC and SPF records, tags and hosted-service status, and the members of each account with their access
Read the reports - aggregate reports and their individual records (source IP, PTR, country, SPF and DKIM results and alignment, disposition), forensic (failure) reports, and MTA-STS reports with their failure details
Analyze compliance - an account-wide compliance scorecard with a grade per domain, a domain's stats, top senders, alignment failures ranked by volume, and daily compliance trends
Check BIMI, email tests and Postmaster - a domain's BIMI readiness, the test mailbox and the results of test messages, and the Google Postmaster data of connected Postmaster accounts
Download the PDF audit report - DMARC Report's branded audit report for a domain, handed back as a temporary download link
Manage (on Pro plans) - add and remove domains and accounts, link domains to accounts, change a domain's report settings, turn hosted DMARC and MTA-STS on or off, generate and publish a DMARC record, and add, change or remove account members

How StackJack authenticates to DMARC Report

DMARC Report uses an API token that you create in the DMARC Report web app. StackJack sends the token with every call. There is no client ID, no sign-in screen and nothing to refresh, and the address is fixed, so you only paste the token.

The token acts as the DMARC Report user who made it, and one token sees every account that user owns or shares, so one connection covers all of them. The tools take an account (its number or its short name, the "slug") wherever DMARC Report needs one.

The API is part of DMARC Report's paid plans.

Creating the token

Sign in to DMARC Report at app.dmarcreport.com with a user that can see the accounts and domains you want to manage.
Click your profile icon and choose API Tokens, then New Api Token.
Select the privileges the token needs. Read privileges are enough for every Free-tier tool; add write privileges only for what you want your AI to change (domains, hosted DMARC and MTA-STS, members).
Save and copy the token. Treat it like a password.

Connect it in StackJack

Open Connectors, then DMARC Report.
Paste the token into API Token.
Click Test connection. StackJack lists your accounts to prove the token works, and changes nothing.

Paste the token again whenever you save the connection, including when you only rename it.

What is worth knowing before you start

Some tools change live mail or access

These tools are marked destructive, require the Pro tier and ask for approval before they run:

deleting a domain, an account or a member, and removing a domain from an account
publishing a DMARC record to hosted DMARC: it changes the policy receiving mail servers apply to the domain's mail
changing a domain's settings and turning hosted DMARC or MTA-STS off: DMARC Report then manages, or stops managing, live DNS records
adding a domain: it uses your plan's domain quota (or a parked-domain credit)
adding domains to an account and adding or changing a member: both grant access to report data

Generating a DMARC record without publishing it is a read: the generate tool never publishes, and a separate tool publishes.

Forensic reports contain real mail

A forensic report carries the original failed message, which can hold personal data, password-reset links or one-time codes. StackJack never stores or forwards these answers as files. If a forensic list is too large to return, StackJack refuses it and asks for a smaller page rather than parking it behind a link.

When DMARC Report refuses a call

401: the token is wrong or was deleted. Make a new one under API Tokens and paste it in.
403: the token works but lacks the privilege for that action. Edit the token's privileges in DMARC Report, or make a new token that has them. If the connection test itself reports a 403, the token cannot list accounts; that is not counted against the connection, and every tool the token's privileges cover still works.
402: the paid plan the API belongs to has ended. The token is fine; renew the plan.

Reports come in pages

Report lists take a page number (starting at 1) and a page size of up to 100. Some report filters use particular date formats, which each tool's description states (most use YYYY-MM-DD; two record filters use mm-dd-yyyy, as DMARC Report documents them).

The PDF audit report

The PDF comes back as a temporary download link that works for 30 minutes. Nothing else in StackJack keeps a copy, so download it before the link expires. Reports larger than 32 MB are refused; choose a shorter period.

Plans and limits

Read tools, including the PDF audit report, are available on the Free tier. Everything that creates, changes or deletes is Pro. Business reaches the same tools as Pro and differs by monthly call quota.

DMARC Report allows about 20 requests per 20 seconds. StackJack paces its own requests below that and backs off when DMARC Report asks it to slow down.

See the generated DMARC Report tool reference for the current inventory, plan assignment, input schemas, and destructive-action labels.

DMARC Report tools

dmarcreport_ · 51 tools · Free 35 · Pro 16

Accounts

Tool	What it does
`dmarcreport_create_account` Pro · Write	Creates an empty account (a container for domains and members) with the given title.
`dmarcreport_delete_account` Pro · Destructive	DESTRUCTIVE.
`dmarcreport_get_account` Free · Read-only	Gets one account with its title, slug and domains_count.
`dmarcreport_get_account_compliance_summary` Free · Read-only	Gets the DMARC compliance scorecard of every domain in an account: total and active domains, email volume, the overall compliance rate, the policy and grade (A to F) distributions, the domains that need attention, the domains ready for a stronger policy, and a per-domain breakdown with readiness notes.
`dmarcreport_list_accounts` Free · Read-only	Lists the DMARC Report accounts the token's user can see: owned_accounts (the user's own) and accounts (shared with the user).
`dmarcreport_update_account` Pro · Write	Changes an account's title.

Aggregate reports

Tool	What it does
`dmarcreport_download_domain_pdf_report` Free · Read-only	Downloads DMARC Report's branded PDF audit report for a domain: an executive summary with the security grade, SPF, DKIM and DMARC statistics, daily volume, the email source categories, the MTA-STS report when it is enabled, and recommendations.
`dmarcreport_get_aggregate_report` Free · Read-only	Gets one aggregate report with all of its records, each with its authentication results and the source IP's email_service enrichment.
`dmarcreport_get_aggregate_report_stats` Free · Read-only	Gets the aggregate report totals of a domain for a period: compliant, non-compliant and forwarded volume, the none, quarantine and reject dispositions, and the SPF-pass, DKIM-pass and reject counts.
`dmarcreport_get_alignment_failures` Free · Read-only	Gets the sources failing DMARC authentication for a domain, ranked by failure volume, each with its failure count and share of all failures.
`dmarcreport_get_compliance_trends` Free · Read-only	Gets daily DMARC compliance points for a domain (compliant, non-compliant and forwarded volume and the compliance rate per day, oldest first) and a summary for the whole period.
`dmarcreport_get_top_sources` Free · Read-only	Gets a domain's top email sources (senders), grouped by PTR domain and sorted by volume: each with its total, compliant and non-compliant volume and compliance rate.
`dmarcreport_list_aggregate_report_records` Free · Read-only	Lists, searches and pages the individual records of a domain's aggregate reports: one row per sending source with its volume, the applied disposition, SPF and DKIM results and alignment, DMARC compliance, and the source IP with its PTR, country and, when DMARC Report recognizes the sender, an email_service block (the provider and whether it supports SPF, DKIM and DMARC).
`dmarcreport_list_aggregate_reports` Free · Read-only	Lists, searches and pages the DMARC aggregate (RUA) reports received for a domain: the reporter, the report period, the published policy and the raw XML.

Alerts

Tool	What it does
`dmarcreport_get_alert` Free · Read-only	Gets one alert with every domain it covers.
`dmarcreport_list_alerts` Free · Read-only	Lists the alerts configured for the domains of an account.

BIMI

Tool	What it does
`dmarcreport_get_bimi_status` Free · Read-only	Gets a domain's BIMI readiness: whether its DMARC record qualifies (quarantine or reject at pct 100), the BIMI TXT record, the uploaded logo and its validation, the VMC or CMC certificate and its expiry, the recommended BIMI record, and the blockers and recommendations.

Account domains

Tool	What it does
`dmarcreport_add_domains_to_account` Pro · Destructive	DESTRUCTIVE.
`dmarcreport_get_account_domain` Free · Read-only	Gets one domain link of an account: its id, the domain id and the account id.
`dmarcreport_list_account_domains` Free · Read-only	Lists the domains linked to an account (account_managements), each with its link id, the account and the domain.
`dmarcreport_remove_domain_from_account` Pro · Destructive	DESTRUCTIVE.

Domains

Tool	What it does
`dmarcreport_create_domain` Pro · Destructive	DESTRUCTIVE.
`dmarcreport_delete_domain` Pro · Destructive	DESTRUCTIVE.
`dmarcreport_disable_hosted_dmarc` Pro · Destructive	DESTRUCTIVE.
`dmarcreport_disable_hosted_mta_sts` Pro · Destructive	DESTRUCTIVE.
`dmarcreport_generate_dmarc_record` Free · Read-only	Builds a DMARC record for a domain from the options you pass, with DMARC Report's reporting addresses included, and returns it.
`dmarcreport_get_domain` Free · Read-only	Gets one domain with its DMARC record (raw and parsed), its SPF record and include tree, the SPF DNS lookup count, its tags, and its hosted DMARC and MTA-STS services with their CNAME status.
`dmarcreport_get_hosted_services` Free · Read-only	Gets whether hosted DMARC and hosted MTA-STS are on for a domain, the CNAME records to add to your DNS, and their current verification status.
`dmarcreport_list_all_domains` Free · Read-only	Lists every domain across every account of the token's user, each with its DMARC and MTA-STS status, its DMARC and SPF records, whether it is parked, and its tags.
`dmarcreport_list_domains` Free · Read-only	Lists the domains of one account, each with its DMARC and MTA-STS status, its DMARC and SPF records, whether it is parked, and its tags.
`dmarcreport_publish_dmarc_record` Pro · Destructive	DESTRUCTIVE.
`dmarcreport_update_domain` Pro · Destructive	DESTRUCTIVE.
`dmarcreport_verify_hosted_dmarc` Pro · Write	Re-checks a domain's hosted DMARC setup: the CNAME in your DNS (verified, awaiting_setup or misconfigured) and DMARC Report's own TXT record (published or queued), with an overall status of ready, action_required or pending.
`dmarcreport_verify_hosted_mta_sts` Pro · Write	Re-checks a domain's hosted MTA-STS setup: the policy, MTA-STS and TLS-RPT CNAMEs, DMARC Report's TXT records and the policy file, with an overall status of ready, action_required or pending.

Email sources

Tool	What it does
`dmarcreport_list_email_sources` Free · Read-only	Lists the email sources DMARC Report knows for a domain: global sources it identified by PTR domain and the sources you defined for the domain.

Email tests

Tool	What it does
`dmarcreport_get_email_test` Free · Read-only	Gets one email test with its full authentication results, alignment and raw headers.
`dmarcreport_get_email_test_address` Free · Read-only	Gets the mailbox address to send test messages to for a domain.
`dmarcreport_list_email_tests` Free · Read-only	Lists the email test results of a domain: each test message's sender, sending source and IP, SPF, DKIM and DMARC results with alignment, and the HELO check.

Forensic reports

Tool	What it does
`dmarcreport_get_forensic_report` Free · Read-only	Gets one failure (forensic) report with its delivery result, feedback type, sender and recipient, and raw_original_message, the failed message itself, which can hold personal data, password-reset links or one-time codes.
`dmarcreport_list_forensic_reports` Free · Read-only	Lists, searches and pages the DMARC failure (forensic, RUF) reports of a domain.

MTA-STS reports

Tool	What it does
`dmarcreport_get_mta_sts_report` Free · Read-only	Gets one MTA-STS report with its policy, session counts and every failure detail.
`dmarcreport_list_mta_sts_failure_details` Free · Read-only	Lists, searches and pages the failure details of a domain's MTA-STS reports: the result type (for example certificate-host-mismatch), the sending and receiving IPs, the receiving MX host and the failed session count.
`dmarcreport_list_mta_sts_reports` Free · Read-only	Lists, searches and pages a domain's MTA-STS (TLS-RPT) reports: the reporting organization, the period, the policy and the successful and failed session counts.

Postmaster

Tool	What it does
`dmarcreport_get_postmaster_account_summary` Free · Read-only	Gets the cumulative Google Postmaster data of every domain of a connected Postmaster account: spam ratio, domain reputation, SPF, DKIM and DMARC success, inbound encryption, delivery errors and IP reputation per domain.
`dmarcreport_get_postmaster_domain_details` Free · Read-only	Gets the daily Google Postmaster data of one domain: spam rate, IP reputation, domain reputation and feedback loop data by date.
`dmarcreport_list_connected_postmaster_accounts` Free · Read-only	Lists the Google Postmaster accounts connected to DMARC Report, with their id and email address.

Account members

Tool	What it does
`dmarcreport_add_account_member` Pro · Destructive	DESTRUCTIVE.
`dmarcreport_get_account_member` Free · Read-only	Gets one member of an account with every access flag.
`dmarcreport_list_account_members` Free · Read-only	Lists the members of an account (user_accounts) with their access flags, and the account owner's email.
`dmarcreport_remove_account_member` Pro · Destructive	DESTRUCTIVE.
`dmarcreport_update_account_member` Pro · Destructive	DESTRUCTIVE.

Was this helpful?

Still need help? Ask the team