---
title: Configure DMARC Reports
---
[Skip to content](#_top)
[API Reference](https://developers.cloudflare.com/api)
[Email Auth](https://developers.cloudflare.com/api/resources/email_auth)
[DMARC Reports](https://developers.cloudflare.com/api/resources/email_auth/subresources/dmarc_reports)
Copy Markdown
Open in **Claude**Open in **ChatGPT**Open in **Cursor**
---
**Copy Markdown****View as Markdown**
# Configure DMARC Reports
PATCH/zones/{zone\_id}/email/auth/dmarc-reports
Updates the DMARC report configuration for a zone. At least one of `enabled` or `skip_wizard` must be provided. When enabling, the handler will ensure the DMARC RUA record exists in DNS.
##### Security
API Token
The preferred authorization scheme for interacting with the Cloudflare API. Create a token.
**Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key
The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key.
**Example:**X-Auth-Email: user@example.com
The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys.
**Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### P ath ParametersExpand Collapse
zone\_id: string
Identifier.
maxLength32
[Link to this property](<#(resource)%20email_auth.dmarc_reports%20%3E%20(method)%20edit%20%3E%20(params)%20default%20%3E%20(param)%20zone_id%20%3E%20(schema)>)
##### Body ParametersJSONExpand Collapse
enabled: optional boolean
Enable or disable DMARC reports for this zone
[Link to this property](<#(resource)%20email_auth.dmarc_reports%20%3E%20(method)%20edit%20%3E%20(params)%200%20%3E%20(param)%20enabled%20%3E%20(schema)>)
skip\_wizard: optional boolean
Skip the DMARC setup wizard
[Link to this property](<#(resource)%20email_auth.dmarc_reports%20%3E%20(method)%20edit%20%3E%20(params)%200%20%3E%20(param)%20skip_wizard%20%3E%20(schema)>)
##### ReturnsExpand Collapse
errors: array of object {code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20email_auth.dmarc_reports%20%3E%20(method)%20edit%20%3E%20(network%20schema)%20%3E%20(property)%20errors>)
messages: array of object {code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20email_auth.dmarc_reports%20%3E%20(method)%20edit%20%3E%20(network%20schema)%20%3E%20(property)%20messages>)
success: true
Whether the API call was successful.
[Link to this property](<#(resource)%20email_auth.dmarc_reports%20%3E%20(method)%20edit%20%3E%20(network%20schema)%20%3E%20(property)%20success>)
result: optional object {approved\_sources, created, created\_at, 9 more }
Response for GET/PATCH /dmarc-reports
approved\_sources: optional array of object {created, created\_at, domain, 6 more }
List of approved sending sources (omitted when empty)
Deprecatedcreated: optional string
Use created_at instead.
Deprecated, use created\_at
formatdate-time
Link to this property
created\_at: optional string
Creation timestamp
formatdate-time
Link to this property
domain: optional string
The source domain
Link to this property
ips: optional array of string
Resolved IP addresses from SPF
Link to this property
Deprecatedmodified: optional string
Use modified_at instead.
Deprecated, use modified\_at
formatdate-time
Link to this property
modified\_at: optional string
Last modification timestamp
formatdate-time
Link to this property
name: optional string
Source name (typically same as domain)
Link to this property
slug: optional string
URL-friendly identifier
Link to this property
tag: optional string
Source UUID
Link to this property
Link to this property
Deprecatedcreated: optional string
Use created_at instead.
Deprecated, use created\_at
formatdate-time
Link to this property
created\_at: optional string
Creation timestamp
formatdate-time
Link to this property
enabled: optional boolean
Whether DMARC reports are enabled
Link to this property
Deprecatedmodified: optional string
Use modified_at instead.
Deprecated, use modified\_at
formatdate-time
Link to this property
modified\_at: optional string
Last modification timestamp
formatdate-time
Link to this property
records: optional object {bimi\_records, cname\_dkim\_records, cname\_dmarc\_records, 5 more }
Live DNS records for the zone, grouped by type
bimi\_records: optional array of object {id, content, name, 3 more }
BIMI TXT records
id: optional string
DNS record ID
Link to this property
content: optional string
Record content
Link to this property
name: optional string
DNS record name
Link to this property
resolved: optional array of string
For a CNAME record, the TXT content(s) found by following the CNAME chain to its target. An empty array means the chain was resolved but nothing usable was found there; omitted/null means resolution was not attempted for this record (always the case for non-CNAME entries). A CNAME chain that terminates in more than one TXT value at the target yields multiple entries. Populated on entries in cname\_dmarc\_records, cname\_spf\_records, and cname\_dkim\_records.
Link to this property
ttl: optional number
Time to live in seconds
Link to this property
type: optional string
Record type
Link to this property
Link to this property
cname\_dkim\_records: optional array of object {id, content, name, 3 more }
CNAME records for DKIM selectors. Each selector is resolved independently; when a selector’s CNAME resolves to a DKIM TXT record, the API returns that record’s content in the resolved field of the corresponding entry.
id: optional string
DNS record ID
Link to this property
content: optional string
Record content
Link to this property
name: optional string
DNS record name
Link to this property
resolved: optional array of string
For a CNAME record, the TXT content(s) found by following the CNAME chain to its target. An empty array means the chain was resolved but nothing usable was found there; omitted/null means resolution was not attempted for this record (always the case for non-CNAME entries). A CNAME chain that terminates in more than one TXT value at the target yields multiple entries. Populated on entries in cname\_dmarc\_records, cname\_spf\_records, and cname\_dkim\_records.
Link to this property
ttl: optional number
Time to live in seconds
Link to this property
type: optional string
Record type
Link to this property
Link to this property
cname\_dmarc\_records: optional array of object {id, content, name, 3 more }
CNAME records at \_dmarc. When such a CNAME resolves to a DMARC TXT record, the API returns that record’s content in the resolved field of the corresponding entry.
id: optional string
DNS record ID
Link to this property
content: optional string
Record content
Link to this property
name: optional string
DNS record name
Link to this property
resolved: optional array of string
For a CNAME record, the TXT content(s) found by following the CNAME chain to its target. An empty array means the chain was resolved but nothing usable was found there; omitted/null means resolution was not attempted for this record (always the case for non-CNAME entries). A CNAME chain that terminates in more than one TXT value at the target yields multiple entries. Populated on entries in cname\_dmarc\_records, cname\_spf\_records, and cname\_dkim\_records.
Link to this property
ttl: optional number
Time to live in seconds
Link to this property
type: optional string
Record type
Link to this property
Link to this property
cname\_spf\_records: optional array of object {id, content, name, 3 more }
CNAME records at the zone apex. When such a CNAME resolves to an SPF TXT record, the API returns that record’s content in the resolved field of the corresponding entry.
id: optional string
DNS record ID
Link to this property
content: optional string
Record content
Link to this property
name: optional string
DNS record name
Link to this property
resolved: optional array of string
For a CNAME record, the TXT content(s) found by following the CNAME chain to its target. An empty array means the chain was resolved but nothing usable was found there; omitted/null means resolution was not attempted for this record (always the case for non-CNAME entries). A CNAME chain that terminates in more than one TXT value at the target yields multiple entries. Populated on entries in cname\_dmarc\_records, cname\_spf\_records, and cname\_dkim\_records.
Link to this property
ttl: optional number
Time to live in seconds
Link to this property
type: optional string
Record type
Link to this property
Link to this property
dkim\_records: optional array of object {id, content, name, 3 more }
DKIM TXT records
id: optional string
DNS record ID
Link to this property
content: optional string
Record content
Link to this property
name: optional string
DNS record name
Link to this property
resolved: optional array of string
For a CNAME record, the TXT content(s) found by following the CNAME chain to its target. An empty array means the chain was resolved but nothing usable was found there; omitted/null means resolution was not attempted for this record (always the case for non-CNAME entries). A CNAME chain that terminates in more than one TXT value at the target yields multiple entries. Populated on entries in cname\_dmarc\_records, cname\_spf\_records, and cname\_dkim\_records.
Link to this property
ttl: optional number
Time to live in seconds
Link to this property
type: optional string
Record type
Link to this property
Link to this property
dmarc\_records: optional array of object {id, content, name, 3 more }
DMARC TXT records
id: optional string
DNS record ID
Link to this property
content: optional string
Record content
Link to this property
name: optional string
DNS record name
Link to this property
resolved: optional array of string
For a CNAME record, the TXT content(s) found by following the CNAME chain to its target. An empty array means the chain was resolved but nothing usable was found there; omitted/null means resolution was not attempted for this record (always the case for non-CNAME entries). A CNAME chain that terminates in more than one TXT value at the target yields multiple entries. Populated on entries in cname\_dmarc\_records, cname\_spf\_records, and cname\_dkim\_records.
Link to this property
ttl: optional number
Time to live in seconds
Link to this property
type: optional string
Record type
Link to this property
Link to this property
Deprecatedresolved\_dmarc\_records: optional array of object {content, name }
Use the resolved field on the corresponding entry in cname\_dmarc\_records instead.
DMARC records that a recursive lookup of \_dmarc.{zone} returned. The API populates this only when the zone lacks a DMARC TXT record of its own, which usually means a CNAME delegates DMARC to another zone.
content: optional string
The TXT record value. The API joins all character-strings into a single string.
Link to this property
name: optional string
The name the API queried.
Link to this property
Link to this property
spf\_records: optional array of object {id, content, name, 3 more }
SPF TXT records
id: optional string
DNS record ID
Link to this property
content: optional string
Record content
Link to this property
name: optional string
DNS record name
Link to this property
resolved: optional array of string
For a CNAME record, the TXT content(s) found by following the CNAME chain to its target. An empty array means the chain was resolved but nothing usable was found there; omitted/null means resolution was not attempted for this record (always the case for non-CNAME entries). A CNAME chain that terminates in more than one TXT value at the target yields multiple entries. Populated on entries in cname\_dmarc\_records, cname\_spf\_records, and cname\_dkim\_records.
Link to this property
ttl: optional number
Time to live in seconds
Link to this property
type: optional string
Record type
Link to this property
Link to this property
Link to this property
rua\_prefix: optional string
Prefix for DMARC RUA addresses (32-char hex string)
Link to this property
skip\_wizard: optional boolean
Whether to skip the setup wizard
Link to this property
status: optional "missing-dmarc-report"or "multiple-dmarc-reports"or "missing-dmarc-rua"or 2 more
DMARC configuration status. The API omits this field when DMARC is correctly configured. If the zone lacks a DMARC TXT record of its own, the API resolves \_dmarc.{zone} recursively and evaluates whatever that lookup returns. A CNAME at \_dmarc.{zone} that points to a valid DMARC record is therefore healthy; the cname-on-dmarc-record value means the CNAME resolves to no DMARC record at all.
One of the following:
"missing-dmarc-report"
Link to this property
"multiple-dmarc-reports"
Link to this property
"missing-dmarc-rua"
Link to this property
"cname-on-dmarc-record"
Link to this property
"unauthorized-reporting-domain"
Link to this property
Link to this property
Deprecatedtag: optional string
Use zone_id instead.
Use zone_id instead
Link to this property
zone\_id: optional string
Zone identifier
Link to this property
[Link to this property](<#(resource)%20email_auth.dmarc_reports%20%3E%20(method)%20edit%20%3E%20(network%20schema)%20%3E%20(property)%20result>)
### Configure DMARC Reports
HTTP
HTTPTypeScriptPythonGoTerraform
```
curl https://api.cloudflare.com/client/v4/zones/$ZONE_ID/email/auth/dmarc-reports \
-X PATCH \
-H 'Content-Type: application/json' \
-H "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \
-d '{
"enabled": true
}'
```
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"success": true,
"result": {
"approved_sources": [
{
"created": "2024-01-15T10:30:00.12345Z",
"created_at": "2024-01-15T10:30:00.12345Z",
"domain": "sendgrid.net",
"ips": [
"192.168.1.1",
"10.0.0.1"
],
"modified": "2024-01-15T11:45:00.12345Z",
"modified_at": "2024-01-15T11:45:00.12345Z",
"name": "SendGrid",
"slug": "sendgrid-net",
"tag": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
}
],
"created": "2024-01-15T10:30:00.12345Z",
"created_at": "2024-01-15T10:30:00.12345Z",
"enabled": true,
"modified": "2024-01-15T11:45:00.12345Z",
"modified_at": "2024-01-15T11:45:00.12345Z",
"records": {
"bimi_records": [
{
"id": "e5bb46707a802688812d5d1c9f7977d4",
"content": "v=DMARC1; p=none; rua=mailto:rua@dmarc-reports.cloudflare.net",
"name": "_dmarc.example.com",
"resolved": [
"v=DMARC1; p=reject; rua=mailto:rua@dmarc-reports.cloudflare.net"
],
"ttl": 300,
"type": "TXT"
}
],
"cname_dkim_records": [
{
"id": "e5bb46707a802688812d5d1c9f7977d4",
"content": "v=DMARC1; p=none; rua=mailto:rua@dmarc-reports.cloudflare.net",
"name": "_dmarc.example.com",
"resolved": [
"v=DMARC1; p=reject; rua=mailto:rua@dmarc-reports.cloudflare.net"
],
"ttl": 300,
"type": "TXT"
}
],
"cname_dmarc_records": [
{
"id": "e5bb46707a802688812d5d1c9f7977d4",
"content": "v=DMARC1; p=none; rua=mailto:rua@dmarc-reports.cloudflare.net",
"name": "_dmarc.example.com",
"resolved": [
"v=DMARC1; p=reject; rua=mailto:rua@dmarc-reports.cloudflare.net"
],
"ttl": 300,
"type": "TXT"
}
],
"cname_spf_records": [
{
"id": "e5bb46707a802688812d5d1c9f7977d4",
"content": "v=DMARC1; p=none; rua=mailto:rua@dmarc-reports.cloudflare.net",
"name": "_dmarc.example.com",
"resolved": [
"v=DMARC1; p=reject; rua=mailto:rua@dmarc-reports.cloudflare.net"
],
"ttl": 300,
"type": "TXT"
}
],
"dkim_records": [
{
"id": "e5bb46707a802688812d5d1c9f7977d4",
"content": "v=DMARC1; p=none; rua=mailto:rua@dmarc-reports.cloudflare.net",
"name": "_dmarc.example.com",
"resolved": [
"v=DMARC1; p=reject; rua=mailto:rua@dmarc-reports.cloudflare.net"
],
"ttl": 300,
"type": "TXT"
}
],
"dmarc_records": [
{
"id": "e5bb46707a802688812d5d1c9f7977d4",
"content": "v=DMARC1; p=none; rua=mailto:rua@dmarc-reports.cloudflare.net",
"name": "_dmarc.example.com",
"resolved": [
"v=DMARC1; p=reject; rua=mailto:rua@dmarc-reports.cloudflare.net"
],
"ttl": 300,
"type": "TXT"
}
],
"resolved_dmarc_records": [
{
"content": "v=DMARC1; p=reject; rua=mailto:rua@dmarc-reports.cloudflare.net",
"name": "_dmarc.example.com"
}
],
"spf_records": [
{
"id": "e5bb46707a802688812d5d1c9f7977d4",
"content": "v=DMARC1; p=none; rua=mailto:rua@dmarc-reports.cloudflare.net",
"name": "_dmarc.example.com",
"resolved": [
"v=DMARC1; p=reject; rua=mailto:rua@dmarc-reports.cloudflare.net"
],
"ttl": 300,
"type": "TXT"
}
]
},
"rua_prefix": "9233c80fc89f43e3a7b749605f651868",
"skip_wizard": false,
"status": "missing-dmarc-report",
"tag": "023e105f4ecef8ad9ca31a8372d0c353",
"zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
}
}
```
##### Returns Examples
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"success": true,
"result": {
"approved_sources": [
{
"created": "2024-01-15T10:30:00.12345Z",
"created_at": "2024-01-15T10:30:00.12345Z",
"domain": "sendgrid.net",
"ips": [
"192.168.1.1",
"10.0.0.1"
],
"modified": "2024-01-15T11:45:00.12345Z",
"modified_at": "2024-01-15T11:45:00.12345Z",
"name": "SendGrid",
"slug": "sendgrid-net",
"tag": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415"
}
],
"created": "2024-01-15T10:30:00.12345Z",
"created_at": "2024-01-15T10:30:00.12345Z",
"enabled": true,
"modified": "2024-01-15T11:45:00.12345Z",
"modified_at": "2024-01-15T11:45:00.12345Z",
"records": {
"bimi_records": [
{
"id": "e5bb46707a802688812d5d1c9f7977d4",
"content": "v=DMARC1; p=none; rua=mailto:rua@dmarc-reports.cloudflare.net",
"name": "_dmarc.example.com",
"resolved": [
"v=DMARC1; p=reject; rua=mailto:rua@dmarc-reports.cloudflare.net"
],
"ttl": 300,
"type": "TXT"
}
],
"cname_dkim_records": [
{
"id": "e5bb46707a802688812d5d1c9f7977d4",
"content": "v=DMARC1; p=none; rua=mailto:rua@dmarc-reports.cloudflare.net",
"name": "_dmarc.example.com",
"resolved": [
"v=DMARC1; p=reject; rua=mailto:rua@dmarc-reports.cloudflare.net"
],
"ttl": 300,
"type": "TXT"
}
],
"cname_dmarc_records": [
{
"id": "e5bb46707a802688812d5d1c9f7977d4",
"content": "v=DMARC1; p=none; rua=mailto:rua@dmarc-reports.cloudflare.net",
"name": "_dmarc.example.com",
"resolved": [
"v=DMARC1; p=reject; rua=mailto:rua@dmarc-reports.cloudflare.net"
],
"ttl": 300,
"type": "TXT"
}
],
"cname_spf_records": [
{
"id": "e5bb46707a802688812d5d1c9f7977d4",
"content": "v=DMARC1; p=none; rua=mailto:rua@dmarc-reports.cloudflare.net",
"name": "_dmarc.example.com",
"resolved": [
"v=DMARC1; p=reject; rua=mailto:rua@dmarc-reports.cloudflare.net"
],
"ttl": 300,
"type": "TXT"
}
],
"dkim_records": [
{
"id": "e5bb46707a802688812d5d1c9f7977d4",
"content": "v=DMARC1; p=none; rua=mailto:rua@dmarc-reports.cloudflare.net",
"name": "_dmarc.example.com",
"resolved": [
"v=DMARC1; p=reject; rua=mailto:rua@dmarc-reports.cloudflare.net"
],
"ttl": 300,
"type": "TXT"
}
],
"dmarc_records": [
{
"id": "e5bb46707a802688812d5d1c9f7977d4",
"content": "v=DMARC1; p=none; rua=mailto:rua@dmarc-reports.cloudflare.net",
"name": "_dmarc.example.com",
"resolved": [
"v=DMARC1; p=reject; rua=mailto:rua@dmarc-reports.cloudflare.net"
],
"ttl": 300,
"type": "TXT"
}
],
"resolved_dmarc_records": [
{
"content": "v=DMARC1; p=reject; rua=mailto:rua@dmarc-reports.cloudflare.net",
"name": "_dmarc.example.com"
}
],
"spf_records": [
{
"id": "e5bb46707a802688812d5d1c9f7977d4",
"content": "v=DMARC1; p=none; rua=mailto:rua@dmarc-reports.cloudflare.net",
"name": "_dmarc.example.com",
"resolved": [
"v=DMARC1; p=reject; rua=mailto:rua@dmarc-reports.cloudflare.net"
],
"ttl": 300,
"type": "TXT"
}
]
},
"rua_prefix": "9233c80fc89f43e3a7b749605f651868",
"skip_wizard": false,
"status": "missing-dmarc-report",
"tag": "023e105f4ecef8ad9ca31a8372d0c353",
"zone_id": "023e105f4ecef8ad9ca31a8372d0c353"
}
}
```