Monitor a domain’s DMARC
POST/v1/dmarc/domains
Starts DMARC monitoring for a domain. We give you a report address; add it to your domain’s DMARC record as rua=mailto:… (the record field is a ready-made record for a domain with none). Mailbox providers such as Google, Microsoft and Yahoo then send a daily summary of the mail they saw using your domain, and we turn it into who is sending, whether it passes, and what to fix. The first reports usually arrive within a day or two. Reports are kept for 90 days. How many domains you can monitor depends on your plan.
Required scope: domains:manage
Request body
| Field | Type |
|---|---|
domainrequired | string |
Unknown fields are rejected, so a typo never silently does nothing.
Example
curl -X POST 'https://api.sendsend.email/v1/dmarc/domains' \
-H "Authorization: Bearer $SENDSEND_API_KEY" \
-H 'Content-Type: application/json' \
-d '{
"domain": "acme.com"
}'Response 201
{
"id": "dmd_3f9a…",
"object": "dmarc_domain",
"domain": "acme.com",
"report_address": "a1b2c3d4e5f60718293a@dmarc.sendsend.email",
"record": "v=DMARC1; p=none; rua=mailto:a1b2c3d4e5f60718293a@dmarc.sendsend.email",
"status": "waiting_for_reports",
"last_report_at": null,
"created_at": "2026-10-14T15:00:00.000Z"
}Errors
| Status | Code | When |
|---|---|---|
| 400 | validation_error | The request body or parameters are invalid. The message says which field. |
| 401 | unauthorized | The API key is missing, invalid or revoked. |
| 403 | forbidden | The key does not have the scope this endpoint needs. |
| 403 | plan_limit_reached | Your plan’s DMARC domains are all in use. |
| 409 | domain_already_registered | This domain is already monitored in the project. |
Every error has the same shape. See Errors.