DMARQ

Account and Access Milestone

Product readiness for authentication, workspace RBAC, billing ownership, provider lifecycle, enterprise provisioning, and audited support access.

Loading account readiness...

General

Basic application settings

DMARC Policy Defaults

Default values applied when adding a new domain

DNS Resolver

Choose how DMARQ resolves DNS records for domain lookups

DNS Provider Connectors

Connect provider accounts to verify domain ownership, import DNS zones, and feed safe repair previews. DNS write access remains a separate human-approved step.

Cloudflare OAuth

Connected with scoped access. Ready to connect with read-only zone and DNS access. Configure Cloudflare OAuth client credentials on the server to enable one-click connect.

Request scopes:

Cloudflare client permissions:

Granted scopes:

Provider Domain Discovery

Find DNS zones and import them into DMARQ before reports arrive.

Auth:
Provider setup docs

Mail Service Imports

Discover verified sender domains from mail delivery services before DMARC reports arrive. Postmark uses an account token with read-only sender-domain discovery in DMARQ.

Verified Sender Domains

Preview Postmark domains and import them into DMARQ for DNS linting and monitoring.

Forensic Reports

Control privacy for forensic report metadata

Notifications

Send alerts through Apprise-compatible targets

Alert Rules

Summary Notifications

Alert History

Configuration Audit

Webhooks

Send signed operational events to downstream systems

Name URL Events Status Last Result

Recent Deliveries

AI and Agent Automation

Opt-in summaries, read-only MCP access, and human-confirmed proposal controls

AI and MCP features are disabled by default. Safe context always redacts secrets and tokens before it can be shared with model or agent surfaces. PII redaction is controlled below.

Mail Sources

IMAP, POP3 and Gmail API inbox credentials are managed on the dedicated Mail Sources page.

Manage Mail Sources

Current release

v1.165.0 · 814725111bd2

Version
1.165.0
Environment
demo
Build
814725111bd2
Image tag
8147251
Ref
v1.165.0
Built
2026-07-07T13:51:49Z
Image
ghcr.io/christianlouis/dmarq:8147251

Release endpoint: /api/v1/health/release

What's changed

Full changelog

Faster domain pages

Domain list and domain detail views use precomputed database aggregates so report-heavy installs load with less waiting.

Sender intelligence

Sending sources now include provider detection, network context, first/last seen activity, and optional reputation feed checks.

Self-hosted demo focus

The default demo and navigation emphasize the single-user, multiple-domain self-hosted story.

Cloudflare rights profiles

The Cloudflare connector exposes read-only, read-only plus Radar context, and full DNS repair profiles so operators can choose the least privilege needed for the next action.

Safer DNS repair workflow

DNS changes remain human-approved, with provider imports, ownership verification, repair previews, and audit-friendly settings separated from automatic write actions.

In-product release visibility

The current version, build image, git ref, build date, and recent operator-facing fixes are available from the small release label in the app shell.

CSP hardening progress

Inline handlers and style bindings continue moving out of templates toward external scripts and CSS so strict CSP can become the default.

Actionable remediation groundwork

Domain and report detail views include clearer next steps, DNS lint evidence, source intelligence, and safer repair context for DMARC operations.