--- title: DMARC Reports --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api) [Email Auth](https://developers.cloudflare.com/api/resources/email_auth) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # DMARC Reports ##### [Get DMARC Report Status](https://developers.cloudflare.com/api/resources/email_auth/subresources/dmarc_reports/methods/get) GET/zones/{zone\_id}/email/auth/dmarc-reports ##### [Configure DMARC Reports](https://developers.cloudflare.com/api/resources/email_auth/subresources/dmarc_reports/methods/edit) PATCH/zones/{zone\_id}/email/auth/dmarc-reports ##### ModelsExpand Collapse

DMARCReportGetResponse object {approved\_sources, created, created\_at, 9 more } Response for GET/PATCH /dmarc-reports

approved\_sources: optional array of object {created, created\_at, domain, 6 more } List of approved sending sources (omitted when empty)

Deprecatedcreated: optional string Use created_at instead. Deprecated, use created\_at formatdate-time Link to this property created\_at: optional string Creation timestamp formatdate-time Link to this property domain: optional string The source domain Link to this property ips: optional array of string Resolved IP addresses from SPF Link to this property Deprecatedmodified: optional string Use modified_at instead. Deprecated, use modified\_at formatdate-time Link to this property modified\_at: optional string Last modification timestamp formatdate-time Link to this property name: optional string Source name (typically same as domain) Link to this property slug: optional string URL-friendly identifier Link to this property tag: optional string Source UUID Link to this property

Link to this property Deprecatedcreated: optional string Use created_at instead. Deprecated, use created\_at formatdate-time Link to this property created\_at: optional string Creation timestamp formatdate-time Link to this property enabled: optional boolean Whether DMARC reports are enabled Link to this property Deprecatedmodified: optional string Use modified_at instead. Deprecated, use modified\_at formatdate-time Link to this property modified\_at: optional string Last modification timestamp formatdate-time Link to this property

records: optional object {bimi\_records, cname\_dkim\_records, cname\_dmarc\_records, 5 more } Live DNS records for the zone, grouped by type

bimi\_records: optional array of object {id, content, name, 3 more } BIMI TXT records

id: optional string DNS record ID Link to this property content: optional string Record content Link to this property name: optional string DNS record name Link to this property resolved: optional array of string For a CNAME record, the TXT content(s) found by following the CNAME chain to its target. An empty array means the chain was resolved but nothing usable was found there; omitted/null means resolution was not attempted for this record (always the case for non-CNAME entries). A CNAME chain that terminates in more than one TXT value at the target yields multiple entries. Populated on entries in cname\_dmarc\_records, cname\_spf\_records, and cname\_dkim\_records. Link to this property ttl: optional number Time to live in seconds Link to this property type: optional string Record type Link to this property

Link to this property

cname\_dkim\_records: optional array of object {id, content, name, 3 more } CNAME records for DKIM selectors. Each selector is resolved independently; when a selector’s CNAME resolves to a DKIM TXT record, the API returns that record’s content in the resolved field of the corresponding entry.

Link to this property

cname\_dmarc\_records: optional array of object {id, content, name, 3 more } CNAME records at \_dmarc. When such a CNAME resolves to a DMARC TXT record, the API returns that record’s content in the resolved field of the corresponding entry.

Link to this property

cname\_spf\_records: optional array of object {id, content, name, 3 more } CNAME records at the zone apex. When such a CNAME resolves to an SPF TXT record, the API returns that record’s content in the resolved field of the corresponding entry.

Link to this property

dkim\_records: optional array of object {id, content, name, 3 more } DKIM TXT records

Link to this property

dmarc\_records: optional array of object {id, content, name, 3 more } DMARC TXT records

Link to this property

Deprecatedresolved\_dmarc\_records: optional array of object {content, name } Use the resolved field on the corresponding entry in cname\_dmarc\_records instead. DMARC records that a recursive lookup of \_dmarc.{zone} returned. The API populates this only when the zone lacks a DMARC TXT record of its own, which usually means a CNAME delegates DMARC to another zone.

content: optional string The TXT record value. The API joins all character-strings into a single string. Link to this property name: optional string The name the API queried. Link to this property

Link to this property

spf\_records: optional array of object {id, content, name, 3 more } SPF TXT records

Link to this property

Link to this property rua\_prefix: optional string Prefix for DMARC RUA addresses (32-char hex string) Link to this property skip\_wizard: optional boolean Whether to skip the setup wizard Link to this property

status: optional "missing-dmarc-report"or "multiple-dmarc-reports"or "missing-dmarc-rua"or 2 more DMARC configuration status. The API omits this field when DMARC is correctly configured. If the zone lacks a DMARC TXT record of its own, the API resolves \_dmarc.{zone} recursively and evaluates whatever that lookup returns. A CNAME at \_dmarc.{zone} that points to a valid DMARC record is therefore healthy; the cname-on-dmarc-record value means the CNAME resolves to no DMARC record at all.

One of the following: "missing-dmarc-report" Link to this property "multiple-dmarc-reports" Link to this property "missing-dmarc-rua" Link to this property "cname-on-dmarc-record" Link to this property "unauthorized-reporting-domain" Link to this property

Link to this property Deprecatedtag: optional string Use zone_id instead. Use zone_id instead Link to this property zone\_id: optional string Zone identifier Link to this property

[Link to this property](<#(resource)%20email_auth.dmarc_reports%20%3E%20(model)%20dmarc_report_get_response%20%3E%20(schema)>)

DMARCReportEditResponse object {approved\_sources, created, created\_at, 9 more } Response for GET/PATCH /dmarc-reports

approved\_sources: optional array of object {created, created\_at, domain, 6 more } List of approved sending sources (omitted when empty)

records: optional object {bimi\_records, cname\_dkim\_records, cname\_dmarc\_records, 5 more } Live DNS records for the zone, grouped by type

bimi\_records: optional array of object {id, content, name, 3 more } BIMI TXT records

Link to this property

dkim\_records: optional array of object {id, content, name, 3 more } DKIM TXT records

Link to this property

dmarc\_records: optional array of object {id, content, name, 3 more } DMARC TXT records

Link to this property

content: optional string The TXT record value. The API joins all character-strings into a single string. Link to this property name: optional string The name the API queried. Link to this property

Link to this property

spf\_records: optional array of object {id, content, name, 3 more } SPF TXT records

Link to this property

Link to this property Deprecatedtag: optional string Use zone_id instead. Use zone_id instead Link to this property zone\_id: optional string Zone identifier Link to this property

[Link to this property](<#(resource)%20email_auth.dmarc_reports%20%3E%20(model)%20dmarc_report_edit_response%20%3E%20(schema)>)