Settings - DMARQ

General

Basic application settings

Application Name Display name shown in the navigation bar and page titles

Base URL Public URL used in OAuth2 redirect URIs and email links

Reports Per Page How many reports are shown per page

Session Lifetime (minutes) How long login sessions remain valid

DMARC Policy Defaults

Default values applied when adding a new domain

Default Policy

Default Percentage Percentage of messages to which the policy is applied (pct tag)

DKIM Alignment (adkim)

SPF Alignment (aspf)

DNS Resolver

Choose how DMARQ resolves DNS records for domain lookups

Cloudflare Integration

Provide a Cloudflare API token and Zone ID to enable automated DNS record management and DoH lookups. Obtain your token from Cloudflare API Tokens.

API Token

Stored securely; leave as-is to keep existing token

Zone ID Optional. Leave blank to discover all zones available to the token.

Domain Discovery

Find Cloudflare zones and import them into DMARQ.

Forensic Reports

Control privacy for forensic report metadata

Notifications

Send alerts through Apprise-compatible targets

Enable notifications

Minimum Send Interval

Redact email addresses in messages

Alert Rules

New sending sources

Missing reports

High DMARC failures

Compliance drops

Failure Threshold

Missing After Days

Drop Points

Summary Notifications

Daily summary

Weekly summary

Send Hour (UTC)

Weekly Day

Preview Period

Alert History

Configuration Audit

Webhooks

Send signed operational events to downstream systems

Name

Endpoint URL

Events

Max Attempts

Timeout Seconds

Name	URL	Events	Status	Last Result

Recent Deliveries

AI and Agent Automation

Opt-in summaries, read-only MCP access, and human-confirmed proposal controls

AI and MCP features are disabled by default. Safe context redacts secrets, tokens, long opaque values, and email local-parts before it can be shared with model or agent surfaces.

Enable AI assistance

Enable read-only MCP endpoint

Provider

Model

Redaction

Remote Base URL Credentials are not stored here; inject provider secrets through the deployment environment.

Allow human-confirmed action proposals

Mail Sources

IMAP, POP3 and Gmail API inbox credentials are managed on the dedicated Mail Sources page.

Manage Mail Sources