# `bird email tools audit`

## Usage

```bash
bird email tools audit [flags]
```

## Description

Audit a domain's email-authentication setup. Resolves the domain's live DMARC, SPF, DKIM, BIMI, and MX records, validates each, checks how they work together (whether SPF or DKIM can produce a DMARC-aligned pass, whether DMARC is only monitoring, whether SPF exceeds the 10-lookup limit), and returns severity-tagged findings plus prioritized recommendations. Use this to answer "is my email set up correctly?" or "why might my mail land in spam?" for a domain. DKIM needs a selector — selectors cannot be discovered from DNS, so pass the `selector` parameter when you know it; otherwise the DKIM check reports it as unknown. Resolution is live DNS only — no message is sent. Public — no authentication required.

## Examples

```bash
bird email tools audit <domain>
```

## Options

| Name                | Description                                                                                                                                                          |
| ------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `--response-schema` | Print the fields this command returns, then exit                                                                                                                     |
| `--selector`        | The DKIM selector to check (the label before ._domainkey). DKIM selectors cannot be discovered from DNS; omit it and the DKIM check reports the selector as unknown. |

## Related

| Name                                                                                            | Description                                      |
| ----------------------------------------------------------------------------------------------- | ------------------------------------------------ |
| [`bird email tools analyze-dmarc-report`](/docs/cli/reference/email-tools-analyze-dmarc-report) | Analyze a DMARC aggregate report                 |
| [`bird email tools analyze-headers`](/docs/cli/reference/email-tools-analyze-headers)           | Analyze raw email headers                        |
| [`bird email tools split-dns-record`](/docs/cli/reference/email-tools-split-dns-record)         | Split a long DNS TXT value into 255-octet chunks |
| [`bird email tools validate-bimi`](/docs/cli/reference/email-tools-validate-bimi)               | Validate a BIMI record                           |
| [`bird email tools validate-dmarc`](/docs/cli/reference/email-tools-validate-dmarc)             | Validate a DMARC record                          |