curl --request POST \
--url https://api.iotools.cloud/v1/tool/spf-dkim-dmarc-record-generator \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"domain": "example.com",
"ttl": "3600",
"spfEnable": "true",
"spfGoogle": "true",
"spfAll": "-all",
"dkimEnable": "true",
"dkimSelector": "google",
"dkimKeyType": "rsa",
"dkimPublicKey": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQy3p+xQUz8mWvCgZJ7iWZxYJxL5n3X0sIVu0vJq5x2Y9wYJjJ2KhJk3l8xWzXvFq+8K+R4mPp1mZ7r4u3qC6vY0nQXk6mWdY+bN0L1JaTAGtO/8XPV2W2t3hZx0BUmQp4cYj7P2qJaXQwIDAQAB",
"dmarcEnable": "true",
"dmarcPolicy": "quarantine",
"dmarcSubdomainPolicy": "inherit",
"dmarcPct": "50",
"dmarcRua": "dmarc-reports@example.com"
}
'import requests
url = "https://api.iotools.cloud/v1/tool/spf-dkim-dmarc-record-generator"
payload = {
"domain": "example.com",
"ttl": "3600",
"spfEnable": "true",
"spfGoogle": "true",
"spfAll": "-all",
"dkimEnable": "true",
"dkimSelector": "google",
"dkimKeyType": "rsa",
"dkimPublicKey": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQy3p+xQUz8mWvCgZJ7iWZxYJxL5n3X0sIVu0vJq5x2Y9wYJjJ2KhJk3l8xWzXvFq+8K+R4mPp1mZ7r4u3qC6vY0nQXk6mWdY+bN0L1JaTAGtO/8XPV2W2t3hZx0BUmQp4cYj7P2qJaXQwIDAQAB",
"dmarcEnable": "true",
"dmarcPolicy": "quarantine",
"dmarcSubdomainPolicy": "inherit",
"dmarcPct": "50",
"dmarcRua": "dmarc-reports@example.com"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
domain: 'example.com',
ttl: '3600',
spfEnable: 'true',
spfGoogle: 'true',
spfAll: '-all',
dkimEnable: 'true',
dkimSelector: 'google',
dkimKeyType: 'rsa',
dkimPublicKey: 'MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQy3p+xQUz8mWvCgZJ7iWZxYJxL5n3X0sIVu0vJq5x2Y9wYJjJ2KhJk3l8xWzXvFq+8K+R4mPp1mZ7r4u3qC6vY0nQXk6mWdY+bN0L1JaTAGtO/8XPV2W2t3hZx0BUmQp4cYj7P2qJaXQwIDAQAB',
dmarcEnable: 'true',
dmarcPolicy: 'quarantine',
dmarcSubdomainPolicy: 'inherit',
dmarcPct: '50',
dmarcRua: 'dmarc-reports@example.com'
})
};
fetch('https://api.iotools.cloud/v1/tool/spf-dkim-dmarc-record-generator', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.iotools.cloud/v1/tool/spf-dkim-dmarc-record-generator",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'domain' => 'example.com',
'ttl' => '3600',
'spfEnable' => 'true',
'spfGoogle' => 'true',
'spfAll' => '-all',
'dkimEnable' => 'true',
'dkimSelector' => 'google',
'dkimKeyType' => 'rsa',
'dkimPublicKey' => 'MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQy3p+xQUz8mWvCgZJ7iWZxYJxL5n3X0sIVu0vJq5x2Y9wYJjJ2KhJk3l8xWzXvFq+8K+R4mPp1mZ7r4u3qC6vY0nQXk6mWdY+bN0L1JaTAGtO/8XPV2W2t3hZx0BUmQp4cYj7P2qJaXQwIDAQAB',
'dmarcEnable' => 'true',
'dmarcPolicy' => 'quarantine',
'dmarcSubdomainPolicy' => 'inherit',
'dmarcPct' => '50',
'dmarcRua' => 'dmarc-reports@example.com'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.iotools.cloud/v1/tool/spf-dkim-dmarc-record-generator"
payload := strings.NewReader("{\n \"domain\": \"example.com\",\n \"ttl\": \"3600\",\n \"spfEnable\": \"true\",\n \"spfGoogle\": \"true\",\n \"spfAll\": \"-all\",\n \"dkimEnable\": \"true\",\n \"dkimSelector\": \"google\",\n \"dkimKeyType\": \"rsa\",\n \"dkimPublicKey\": \"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQy3p+xQUz8mWvCgZJ7iWZxYJxL5n3X0sIVu0vJq5x2Y9wYJjJ2KhJk3l8xWzXvFq+8K+R4mPp1mZ7r4u3qC6vY0nQXk6mWdY+bN0L1JaTAGtO/8XPV2W2t3hZx0BUmQp4cYj7P2qJaXQwIDAQAB\",\n \"dmarcEnable\": \"true\",\n \"dmarcPolicy\": \"quarantine\",\n \"dmarcSubdomainPolicy\": \"inherit\",\n \"dmarcPct\": \"50\",\n \"dmarcRua\": \"dmarc-reports@example.com\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.iotools.cloud/v1/tool/spf-dkim-dmarc-record-generator")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"domain\": \"example.com\",\n \"ttl\": \"3600\",\n \"spfEnable\": \"true\",\n \"spfGoogle\": \"true\",\n \"spfAll\": \"-all\",\n \"dkimEnable\": \"true\",\n \"dkimSelector\": \"google\",\n \"dkimKeyType\": \"rsa\",\n \"dkimPublicKey\": \"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQy3p+xQUz8mWvCgZJ7iWZxYJxL5n3X0sIVu0vJq5x2Y9wYJjJ2KhJk3l8xWzXvFq+8K+R4mPp1mZ7r4u3qC6vY0nQXk6mWdY+bN0L1JaTAGtO/8XPV2W2t3hZx0BUmQp4cYj7P2qJaXQwIDAQAB\",\n \"dmarcEnable\": \"true\",\n \"dmarcPolicy\": \"quarantine\",\n \"dmarcSubdomainPolicy\": \"inherit\",\n \"dmarcPct\": \"50\",\n \"dmarcRua\": \"dmarc-reports@example.com\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.iotools.cloud/v1/tool/spf-dkim-dmarc-record-generator")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"domain\": \"example.com\",\n \"ttl\": \"3600\",\n \"spfEnable\": \"true\",\n \"spfGoogle\": \"true\",\n \"spfAll\": \"-all\",\n \"dkimEnable\": \"true\",\n \"dkimSelector\": \"google\",\n \"dkimKeyType\": \"rsa\",\n \"dkimPublicKey\": \"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQy3p+xQUz8mWvCgZJ7iWZxYJxL5n3X0sIVu0vJq5x2Y9wYJjJ2KhJk3l8xWzXvFq+8K+R4mPp1mZ7r4u3qC6vY0nQXk6mWdY+bN0L1JaTAGtO/8XPV2W2t3hZx0BUmQp4cYj7P2qJaXQwIDAQAB\",\n \"dmarcEnable\": \"true\",\n \"dmarcPolicy\": \"quarantine\",\n \"dmarcSubdomainPolicy\": \"inherit\",\n \"dmarcPct\": \"50\",\n \"dmarcRua\": \"dmarc-reports@example.com\"\n}"
response = http.request(request)
puts response.read_body{
"tool": "spf-dkim-dmarc-record-generator",
"tool_version": "1.0.1",
"outputs": {
"spfOutput": "━━━ SPF Record ━━━━━━━━━━━━━━━━━━\n Name: @ (or example.com.)\n Type: TXT\n TTL: 3600\n Value:\n v=spf1 include:_spf.google.com -all\n\n━━━ DNS Lookups ━━━━━━━━━━━━━━━━━\n ✓ OK - 1/10 lookups\n\n Breakdown:\n include:_spf.google.com (Google Workspace) - 1 lookup\n\n━━━ How to Add ━━━━━━━━━━━━━━━━━━\n Create a TXT record at your DNS provider with:\n Name: @ (root)\n Type: TXT\n TTL: 3600\n Value: the v=spf1 ... line above\n Only one SPF (v=spf1) record is allowed per domain - merge if you already have one.",
"dkimOutput": "━━━ DKIM Record ━━━━━━━━━━━━━━━━━\n Name: google._domainkey.example.com\n Type: TXT\n TTL: 3600\n Value:\n v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQy3p+xQUz8mWvCgZJ7iWZxYJxL5n3X0sIVu0vJq5x2Y9wYJjJ2KhJk3l8xWzXvFq+8K+R4mPp1mZ7r4u3qC6vY0nQXk6mWdY+bN0L1JaTAGtO/8XPV2W2t3hZx0BUmQp4cYj7P2qJaXQwIDAQAB\n\n━━━ Key Info ━━━━━━━━━━━━━━━━━━━━\n Selector: google\n Algorithm: RSA\n Key length: 192 base64 chars (~144 bytes)\n\n━━━ How to Add ━━━━━━━━━━━━━━━━━━\n Create a TXT record at your DNS provider with:\n Name: google._domainkey\n Type: TXT\n TTL: 3600\n Value: the v=DKIM1 ... line above\n Use selector \"google\" in your outgoing mail server's DKIM signing config.",
"dmarcOutput": "━━━ DMARC Record ━━━━━━━━━━━━━━━━\n Name: _dmarc.example.com\n Type: TXT\n TTL: 3600\n Value:\n v=DMARC1; p=quarantine; pct=50; rua=mailto:dmarc-reports@example.com\n\n━━━ Policy ━━━━━━━━━━━━━━━━━━━━━━\n Main (p): quarantine (failing mail goes to spam / quarantine)\n Subdomain (sp): inherits p=quarantine\n Enforced on: 50% of failing mail\n DKIM align: relaxed (adkim=r)\n SPF align: relaxed (aspf=r)\n\n━━━ Reporting ━━━━━━━━━━━━━━━━━━━\n Aggregate (rua): mailto:dmarc-reports@example.com\n Forensic (ruf): none\n\n━━━ Recommended Rollout ━━━━━━━━━\n 1. p=none + rua= -> collect reports for 2-4 weeks\n 2. p=quarantine pct=10 -> ramp pct 10 -> 25 -> 50 -> 100\n 3. p=reject pct=100 -> full enforcement\n Authenticate every legitimate sender (SPF + DKIM) before moving past step 1.\n\n━━━ How to Add ━━━━━━━━━━━━━━━━━━\n Create a TXT record at your DNS provider with:\n Name: _dmarc\n Type: TXT\n TTL: 3600\n Value: the v=DMARC1 ... line above"
},
"credits_used": 3,
"credits_remaining": null
}{
"type": "https://iotools.cloud/docs/errors/validation_error",
"title": "Invalid request",
"status": 400,
"code": "validation_error",
"detail": "One or more inputs are invalid — see `fields`.",
"request_id": "e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11",
"fields": {
"inputString": "Required"
}
}{
"type": "https://iotools.cloud/docs/errors/invalid_api_key",
"title": "Invalid API key",
"status": 401,
"code": "invalid_api_key",
"detail": "Provide 'Authorization: Bearer <key>'.",
"request_id": "e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11"
}{
"type": "https://iotools.cloud/docs/errors/insufficient_credits",
"title": "Insufficient credits",
"status": 402,
"code": "insufficient_credits",
"detail": "This call costs 1 credit and 0 remain in this month's allowance.",
"request_id": "e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11",
"credits_used": 0,
"credits_remaining": 0
}{
"type": "https://iotools.cloud/docs/errors/tool_not_allowed",
"title": "Tool not available over the API",
"status": 403,
"code": "tool_not_allowed",
"detail": "\"Background Remover\" is available on iotools.cloud but has no API endpoint.",
"request_id": "e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11"
}{
"type": "https://iotools.cloud/docs/errors/tool_not_found",
"title": "Tool not found",
"status": 404,
"code": "tool_not_found",
"detail": "No tool with that slug. See GET /v1/tools/list.",
"request_id": "e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11"
}{
"type": "https://iotools.cloud/docs/errors/payload_too_large",
"title": "Payload too large",
"status": 413,
"code": "payload_too_large",
"detail": "Request body exceeds this tool's size limit.",
"request_id": "e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11"
}{
"type": "https://iotools.cloud/docs/errors/rate_limited",
"title": "Rate limit exceeded",
"status": 429,
"code": "rate_limited",
"detail": "Too many requests. Retry in 30s.",
"request_id": "e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11",
"retry_after": 30
}{
"type": "https://iotools.cloud/docs/errors/processing_error",
"title": "Tool failed to run",
"status": 500,
"code": "processing_error",
"detail": "The tool failed to run. Please try again.",
"request_id": "e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11",
"credits_used": 0
}{
"type": "https://iotools.cloud/docs/errors/tool_disabled",
"title": "Tool temporarily disabled",
"status": 503,
"code": "tool_disabled",
"detail": "This tool is temporarily unavailable. Try again shortly.",
"request_id": "e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11"
}SPF / DKIM / DMARC Record Generator
Generate SPF, DKIM and DMARC DNS TXT records for your domain — pick email providers for SPF, count DNS lookups against the RFC 7208 limit, build a DKIM record from a public key, and set a DMARC rollout policy.
curl --request POST \
--url https://api.iotools.cloud/v1/tool/spf-dkim-dmarc-record-generator \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"domain": "example.com",
"ttl": "3600",
"spfEnable": "true",
"spfGoogle": "true",
"spfAll": "-all",
"dkimEnable": "true",
"dkimSelector": "google",
"dkimKeyType": "rsa",
"dkimPublicKey": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQy3p+xQUz8mWvCgZJ7iWZxYJxL5n3X0sIVu0vJq5x2Y9wYJjJ2KhJk3l8xWzXvFq+8K+R4mPp1mZ7r4u3qC6vY0nQXk6mWdY+bN0L1JaTAGtO/8XPV2W2t3hZx0BUmQp4cYj7P2qJaXQwIDAQAB",
"dmarcEnable": "true",
"dmarcPolicy": "quarantine",
"dmarcSubdomainPolicy": "inherit",
"dmarcPct": "50",
"dmarcRua": "dmarc-reports@example.com"
}
'import requests
url = "https://api.iotools.cloud/v1/tool/spf-dkim-dmarc-record-generator"
payload = {
"domain": "example.com",
"ttl": "3600",
"spfEnable": "true",
"spfGoogle": "true",
"spfAll": "-all",
"dkimEnable": "true",
"dkimSelector": "google",
"dkimKeyType": "rsa",
"dkimPublicKey": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQy3p+xQUz8mWvCgZJ7iWZxYJxL5n3X0sIVu0vJq5x2Y9wYJjJ2KhJk3l8xWzXvFq+8K+R4mPp1mZ7r4u3qC6vY0nQXk6mWdY+bN0L1JaTAGtO/8XPV2W2t3hZx0BUmQp4cYj7P2qJaXQwIDAQAB",
"dmarcEnable": "true",
"dmarcPolicy": "quarantine",
"dmarcSubdomainPolicy": "inherit",
"dmarcPct": "50",
"dmarcRua": "dmarc-reports@example.com"
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
domain: 'example.com',
ttl: '3600',
spfEnable: 'true',
spfGoogle: 'true',
spfAll: '-all',
dkimEnable: 'true',
dkimSelector: 'google',
dkimKeyType: 'rsa',
dkimPublicKey: 'MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQy3p+xQUz8mWvCgZJ7iWZxYJxL5n3X0sIVu0vJq5x2Y9wYJjJ2KhJk3l8xWzXvFq+8K+R4mPp1mZ7r4u3qC6vY0nQXk6mWdY+bN0L1JaTAGtO/8XPV2W2t3hZx0BUmQp4cYj7P2qJaXQwIDAQAB',
dmarcEnable: 'true',
dmarcPolicy: 'quarantine',
dmarcSubdomainPolicy: 'inherit',
dmarcPct: '50',
dmarcRua: 'dmarc-reports@example.com'
})
};
fetch('https://api.iotools.cloud/v1/tool/spf-dkim-dmarc-record-generator', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.iotools.cloud/v1/tool/spf-dkim-dmarc-record-generator",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'domain' => 'example.com',
'ttl' => '3600',
'spfEnable' => 'true',
'spfGoogle' => 'true',
'spfAll' => '-all',
'dkimEnable' => 'true',
'dkimSelector' => 'google',
'dkimKeyType' => 'rsa',
'dkimPublicKey' => 'MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQy3p+xQUz8mWvCgZJ7iWZxYJxL5n3X0sIVu0vJq5x2Y9wYJjJ2KhJk3l8xWzXvFq+8K+R4mPp1mZ7r4u3qC6vY0nQXk6mWdY+bN0L1JaTAGtO/8XPV2W2t3hZx0BUmQp4cYj7P2qJaXQwIDAQAB',
'dmarcEnable' => 'true',
'dmarcPolicy' => 'quarantine',
'dmarcSubdomainPolicy' => 'inherit',
'dmarcPct' => '50',
'dmarcRua' => 'dmarc-reports@example.com'
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.iotools.cloud/v1/tool/spf-dkim-dmarc-record-generator"
payload := strings.NewReader("{\n \"domain\": \"example.com\",\n \"ttl\": \"3600\",\n \"spfEnable\": \"true\",\n \"spfGoogle\": \"true\",\n \"spfAll\": \"-all\",\n \"dkimEnable\": \"true\",\n \"dkimSelector\": \"google\",\n \"dkimKeyType\": \"rsa\",\n \"dkimPublicKey\": \"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQy3p+xQUz8mWvCgZJ7iWZxYJxL5n3X0sIVu0vJq5x2Y9wYJjJ2KhJk3l8xWzXvFq+8K+R4mPp1mZ7r4u3qC6vY0nQXk6mWdY+bN0L1JaTAGtO/8XPV2W2t3hZx0BUmQp4cYj7P2qJaXQwIDAQAB\",\n \"dmarcEnable\": \"true\",\n \"dmarcPolicy\": \"quarantine\",\n \"dmarcSubdomainPolicy\": \"inherit\",\n \"dmarcPct\": \"50\",\n \"dmarcRua\": \"dmarc-reports@example.com\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.iotools.cloud/v1/tool/spf-dkim-dmarc-record-generator")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"domain\": \"example.com\",\n \"ttl\": \"3600\",\n \"spfEnable\": \"true\",\n \"spfGoogle\": \"true\",\n \"spfAll\": \"-all\",\n \"dkimEnable\": \"true\",\n \"dkimSelector\": \"google\",\n \"dkimKeyType\": \"rsa\",\n \"dkimPublicKey\": \"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQy3p+xQUz8mWvCgZJ7iWZxYJxL5n3X0sIVu0vJq5x2Y9wYJjJ2KhJk3l8xWzXvFq+8K+R4mPp1mZ7r4u3qC6vY0nQXk6mWdY+bN0L1JaTAGtO/8XPV2W2t3hZx0BUmQp4cYj7P2qJaXQwIDAQAB\",\n \"dmarcEnable\": \"true\",\n \"dmarcPolicy\": \"quarantine\",\n \"dmarcSubdomainPolicy\": \"inherit\",\n \"dmarcPct\": \"50\",\n \"dmarcRua\": \"dmarc-reports@example.com\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.iotools.cloud/v1/tool/spf-dkim-dmarc-record-generator")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"domain\": \"example.com\",\n \"ttl\": \"3600\",\n \"spfEnable\": \"true\",\n \"spfGoogle\": \"true\",\n \"spfAll\": \"-all\",\n \"dkimEnable\": \"true\",\n \"dkimSelector\": \"google\",\n \"dkimKeyType\": \"rsa\",\n \"dkimPublicKey\": \"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQy3p+xQUz8mWvCgZJ7iWZxYJxL5n3X0sIVu0vJq5x2Y9wYJjJ2KhJk3l8xWzXvFq+8K+R4mPp1mZ7r4u3qC6vY0nQXk6mWdY+bN0L1JaTAGtO/8XPV2W2t3hZx0BUmQp4cYj7P2qJaXQwIDAQAB\",\n \"dmarcEnable\": \"true\",\n \"dmarcPolicy\": \"quarantine\",\n \"dmarcSubdomainPolicy\": \"inherit\",\n \"dmarcPct\": \"50\",\n \"dmarcRua\": \"dmarc-reports@example.com\"\n}"
response = http.request(request)
puts response.read_body{
"tool": "spf-dkim-dmarc-record-generator",
"tool_version": "1.0.1",
"outputs": {
"spfOutput": "━━━ SPF Record ━━━━━━━━━━━━━━━━━━\n Name: @ (or example.com.)\n Type: TXT\n TTL: 3600\n Value:\n v=spf1 include:_spf.google.com -all\n\n━━━ DNS Lookups ━━━━━━━━━━━━━━━━━\n ✓ OK - 1/10 lookups\n\n Breakdown:\n include:_spf.google.com (Google Workspace) - 1 lookup\n\n━━━ How to Add ━━━━━━━━━━━━━━━━━━\n Create a TXT record at your DNS provider with:\n Name: @ (root)\n Type: TXT\n TTL: 3600\n Value: the v=spf1 ... line above\n Only one SPF (v=spf1) record is allowed per domain - merge if you already have one.",
"dkimOutput": "━━━ DKIM Record ━━━━━━━━━━━━━━━━━\n Name: google._domainkey.example.com\n Type: TXT\n TTL: 3600\n Value:\n v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQy3p+xQUz8mWvCgZJ7iWZxYJxL5n3X0sIVu0vJq5x2Y9wYJjJ2KhJk3l8xWzXvFq+8K+R4mPp1mZ7r4u3qC6vY0nQXk6mWdY+bN0L1JaTAGtO/8XPV2W2t3hZx0BUmQp4cYj7P2qJaXQwIDAQAB\n\n━━━ Key Info ━━━━━━━━━━━━━━━━━━━━\n Selector: google\n Algorithm: RSA\n Key length: 192 base64 chars (~144 bytes)\n\n━━━ How to Add ━━━━━━━━━━━━━━━━━━\n Create a TXT record at your DNS provider with:\n Name: google._domainkey\n Type: TXT\n TTL: 3600\n Value: the v=DKIM1 ... line above\n Use selector \"google\" in your outgoing mail server's DKIM signing config.",
"dmarcOutput": "━━━ DMARC Record ━━━━━━━━━━━━━━━━\n Name: _dmarc.example.com\n Type: TXT\n TTL: 3600\n Value:\n v=DMARC1; p=quarantine; pct=50; rua=mailto:dmarc-reports@example.com\n\n━━━ Policy ━━━━━━━━━━━━━━━━━━━━━━\n Main (p): quarantine (failing mail goes to spam / quarantine)\n Subdomain (sp): inherits p=quarantine\n Enforced on: 50% of failing mail\n DKIM align: relaxed (adkim=r)\n SPF align: relaxed (aspf=r)\n\n━━━ Reporting ━━━━━━━━━━━━━━━━━━━\n Aggregate (rua): mailto:dmarc-reports@example.com\n Forensic (ruf): none\n\n━━━ Recommended Rollout ━━━━━━━━━\n 1. p=none + rua= -> collect reports for 2-4 weeks\n 2. p=quarantine pct=10 -> ramp pct 10 -> 25 -> 50 -> 100\n 3. p=reject pct=100 -> full enforcement\n Authenticate every legitimate sender (SPF + DKIM) before moving past step 1.\n\n━━━ How to Add ━━━━━━━━━━━━━━━━━━\n Create a TXT record at your DNS provider with:\n Name: _dmarc\n Type: TXT\n TTL: 3600\n Value: the v=DMARC1 ... line above"
},
"credits_used": 3,
"credits_remaining": null
}{
"type": "https://iotools.cloud/docs/errors/validation_error",
"title": "Invalid request",
"status": 400,
"code": "validation_error",
"detail": "One or more inputs are invalid — see `fields`.",
"request_id": "e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11",
"fields": {
"inputString": "Required"
}
}{
"type": "https://iotools.cloud/docs/errors/invalid_api_key",
"title": "Invalid API key",
"status": 401,
"code": "invalid_api_key",
"detail": "Provide 'Authorization: Bearer <key>'.",
"request_id": "e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11"
}{
"type": "https://iotools.cloud/docs/errors/insufficient_credits",
"title": "Insufficient credits",
"status": 402,
"code": "insufficient_credits",
"detail": "This call costs 1 credit and 0 remain in this month's allowance.",
"request_id": "e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11",
"credits_used": 0,
"credits_remaining": 0
}{
"type": "https://iotools.cloud/docs/errors/tool_not_allowed",
"title": "Tool not available over the API",
"status": 403,
"code": "tool_not_allowed",
"detail": "\"Background Remover\" is available on iotools.cloud but has no API endpoint.",
"request_id": "e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11"
}{
"type": "https://iotools.cloud/docs/errors/tool_not_found",
"title": "Tool not found",
"status": 404,
"code": "tool_not_found",
"detail": "No tool with that slug. See GET /v1/tools/list.",
"request_id": "e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11"
}{
"type": "https://iotools.cloud/docs/errors/payload_too_large",
"title": "Payload too large",
"status": 413,
"code": "payload_too_large",
"detail": "Request body exceeds this tool's size limit.",
"request_id": "e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11"
}{
"type": "https://iotools.cloud/docs/errors/rate_limited",
"title": "Rate limit exceeded",
"status": 429,
"code": "rate_limited",
"detail": "Too many requests. Retry in 30s.",
"request_id": "e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11",
"retry_after": 30
}{
"type": "https://iotools.cloud/docs/errors/processing_error",
"title": "Tool failed to run",
"status": 500,
"code": "processing_error",
"detail": "The tool failed to run. Please try again.",
"request_id": "e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11",
"credits_used": 0
}{
"type": "https://iotools.cloud/docs/errors/tool_disabled",
"title": "Tool temporarily disabled",
"status": 503,
"code": "tool_disabled",
"detail": "This tool is temporarily unavailable. Try again shortly.",
"request_id": "e4042b29-8f1e-4c7a-9b52-6f0d1a3c7e11"
}Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Body
Domain
TTL
x >= 60Generate SPF record
Google Workspace (include:_spf.google.com)
Microsoft 365 (include:spf.protection.outlook.com)
SendGrid (include:sendgrid.net)
Mailchimp (include:servers.mcsv.net)
Mailgun (include:mailgun.org)
Amazon SES (include:amazonses.com)
Zoho Mail (include:zoho.com)
Postmark (include:spf.mtasv.net)
Authorize A records of this domain (a)
Authorize MX records of this domain (mx)
Extra IPv4
Extra IPv6
Extra includes
All Mechanism
~all, -all, ?all Generate DKIM record
Selector
Key Type
rsa, ed25519 Public Key (base64)
Generate DMARC record
Policy
none, quarantine, reject Subdomain Policy
inherit, none, quarantine, reject Percent (pct)
1 <= x <= 100Aggregate (rua)
Forensic (ruf)
DKIM Alignment
r, s SPF Alignment
r, s Response
Tool output
Show child attributes
Show child attributes
The tool's slug, echoing the {slug} in the request path.
Output-contract version for this tool.
Credits this call consumed, after any settlement refund. 0 when metering is disabled.
Credits left in the current monthly allowance, or null when metering is disabled.
Correlation id, also sent as x-request-id.
Was this page helpful?