Documentation
Sign inGet started

bird email tools audit

Usage

Code example
bird email tools audit [flags]

Description

Audit a domain's email-authentication setup. Resolves the domain's live DMARC, SPF, DKIM, BIMI, and MX records, validates each, checks how they work together (whether SPF or DKIM can produce a DMARC-aligned pass, whether DMARC is only monitoring, whether SPF exceeds the 10-lookup limit), and returns severity-tagged findings plus prioritized recommendations. It answers whether a domain's email is set up correctly, and why its mail might land in spam. DKIM needs a selector and selectors cannot be discovered from DNS: the selector parameter supplies one, and without it the DKIM check reports unknown. Resolution is live DNS only and no message is sent. Public: no authentication required.

Examples

Code example
bird email tools audit <domain>

Options

NameDescription
--response-schemaPrint the fields this command returns, then exit
--selectorThe DKIM selector to check (the label before ._domainkey). DKIM selectors cannot be discovered from DNS; omit it and the DKIM check reports the selector as unknown.
NameDescription
bird email tools analyze-dmarc-reportAnalyze a DMARC aggregate report
bird email tools analyze-headersAnalyze raw email headers
bird email tools split-dns-recordSplit a long DNS TXT value into 255-octet chunks
bird email tools validate-bimiValidate a BIMI record
bird email tools validate-dmarcValidate a DMARC record