SPF & DMARC Record Lint

Runs the same checker as our npm package on a Node.js runtime that pip installs for you (nodejs-wheel-binaries) - no system Node.js needed. Your files are checked locally.

19 offline checks on the SPF, DMARC and DKIM records in your branch — including the DMARC rewrite of May 2026

Install

spf-dmarc-record-lint file

Node 18+. The same 19 rules as the VS Code extension, from a terminal or CI.

Free

• Checks the file you have open — every v=spf1, v=DMARC1 and v=DKIM1 string in it, against all 19 rules, with the RFC section and the fix on the exact line. Nothing limited, timed or watermarked.
• --rules lists every rule

With a licence ($29 once)

• Sweeps every *.zone, *.tf, *.yaml and *.txt in the whole workspace in one pass and writes one dated Markdown audit report you keep — the file you attach to the change ticket as evidence that the policy was enforced on that date.

spf-dmarc-record-lint --dir ./templates --report html --out report.html

A freelance email-deliverability specialist bills $50-$150 an hour, and the first hour goes on reading the records you already have.

Use from an AI agent (MCP)

Claude Code · Cursor · Windsurf · any MCP client - add to your MCP config:

{ "mcpServers": { "spf-dmarc-record-lint": { "command": "spf-dmarc-record-lint", "args": ["--mcp"] } } }

Tools: check_text and check_file (free) · check_dir (licence). The agent gets every finding with the line number.

Use in CI

- name: SPF & DMARC Record Lint
  run: pip install rulestamp-spf-dmarc-record-lint && spf-dmarc-record-lint --dir . --ci

The folder sweep, reports and CI mode need one licence — one payment, no subscription. Set READYSTACK_LICENSE=<key> or run --license <key> once.

Get a licence

Install (PyPI)

pip install rulestamp-spf-dmarc-record-lint
spf-dmarc-record-lint --help