parse_dmarc_report
Parse DMARC aggregate XML reports into structured JSON with policy, per-source delivery, and SPF/DKIM alignment. Accepts raw XML or base64 gzip input for programmatic processing.
Instructions
Read-only parser for a DMARC aggregate (RUA) XML report (RFC 7489). Turns the raw XML that mailbox providers send into structured JSON: report metadata (org, report id, date range), the published policy (p/sp/adkim/aspf/pct), and one row per sending source with source IP, message count, evaluated disposition (none/quarantine/reject), aligned SPF/DKIM results, and pass/fail totals. Provide the report as xml (raw text) or gzipBase64 (a base64-encoded .gz attachment). Use to programmatically read DMARC reports an agent fetched from the rua@ mailbox; the report is parsed in-memory and not stored. No auth, no side effects.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| xml | No | Raw DMARC aggregate report XML (root <feedback>), max 5 MB | |
| gzipBase64 | No | Base64-encoded gzip of the report (.gz attachment); used when xml is omitted |