EasyDMARC

Overview

EasyDMARC is a cloud platform for email authentication (DMARC, SPF, DKIM, BIMI) monitoring and management. MSPs use it to track domain deliverability, detect spoofing, and remediate misconfigured email sources.

The Bumblebee integration is read-only: the agent can list monitored domains, query DMARC aggregate (RUA) and failure (RUF) reports, run DNS record lookups and DNS Intelligence checks, and read the audit log — but it cannot create or modify any records. This integration is currently a research preview.

Prerequisites & Setup

Before setting up the EasyDMARC integration, you need:

• An EasyDMARC account with Public API access enabled (the feature is gated — contact the EasyDMARC sales team if you don't see it)
• A client_id and client_secret generated from the Public API section of the Admin Console

Generate API credentials

1. Sign in to app.easydmarc.com
2. Open the Admin Console menu in the top navigation and click Public API
3. On the APIs page, click Generate key
4. In the Generate API key dialog, enter a Key Name (e.g. "Bumblebee") and click Generate
5. Copy the Client ID and Client Secret (the secret is shown only once)

Vendor documentation:

• Setup guide: support.easydmarc.com — EasyDMARC Public APIs
• API reference: developers.easydmarc.com

Configure in Bumblebee

1. Go to the Integrations page in Bumblebee
2. Select EasyDMARC
3. Paste your Client ID and Client Secret
4. Save the configuration
5. Run a test request (e.g. list domains) from the validation card

Authentication

EasyDMARC uses OAuth2 client-credentials. Bumblebee exchanges your client_id / client_secret for a short-lived bearer token (5-minute lifetime, no refresh) and automatically re-mints it as needed. Many endpoints also require an organization id, which the agent supplies per request.

Available Tools

Domains

• list_domains — List monitored domains in an organization. Set include_details to enrich each domain with its configuration/compliance status.
• search_domains — Advanced server-side filtering and ordering of domains (beta).
• get_domain — Get a single domain; set include_setup to also return DNS setup and verification info.

DMARC Aggregate (RUA) Reports

• query_rua_reports — Query raw aggregate report rows, or a single report by id. Report types: dmarc-capable, non-compliant, threat-unknown, forwarded.
• get_rua_aggregations — Count/group reports by SPF, DKIM, or disposition outcome.
• get_rua_metrics — Email-volume and authentication-pass-rate metrics (volume, volume_history, pass_rates).
• get_rua_properties — Distinct values for a report property (use to discover filter values).

DMARC Failure (RUF) Reports

• list_failure_reports — List forensic/failure reports, or one by id, with source-IP / country / date filters.
• get_failure_report_aggregates — Top-N statistics over failure reports (e.g. by source IP or country).

DNS Lookup & Intelligence

• dns_lookup_record — Resolve a generic DNS record (a, aaaa, cname, mx, ns, ptr, txt); supports batch lookups.
• lookup_email_auth_record — Look up and parse an email-authentication record (dmarc, spf, dkim, bimi).
• list_dns_intelligence_checks — List available DNS Intelligence checks.
• run_dns_intelligence_check — Run a DNS Intelligence check against a domain.

Audit Log

• list_audit_logs — Read audit-log entries for an organization with user, action, entity-type, and date filters.

API Limits

EasyDMARC issues a bearer token that is valid for 5 minutes; Bumblebee re-mints it automatically. List and query tools support page (1-based) and pageSize pagination. Large report responses are trimmed automatically — the agent narrows its query (tighter date range or filters) when that happens.