Spf Dkim Dmarc

What this skill does

This skill provides a detailed reference for implementing and troubleshooting the core email authentication protocols SPF, DKIM, and DMARC. It covers precise DNS record syntax, alignment requirements, common failure modes, and practical fixes. Users gain clarity on SPF’s 10-lookup limit, DKIM key management, and DMARC policy enforcement, enabling improved email deliverability and protection against spoofing.

Who it's for

This skill is designed for email deliverability specialists managing large-scale campaigns, agency strategists configuring client email flows, and technical marketers responsible for DNS setup and authentication monitoring. It suits scenarios where maintaining sender reputation and ensuring inbox placement require precise DNS record tuning and ongoing troubleshooting of authentication failures.

Key workflows

Practitioners start by authoring or reviewing SPF DNS records, counting DNS lookups to avoid permerrors, and applying flattening techniques when necessary. Next, they generate and publish DKIM keys per sending service with unique selectors, managing key rotation on a defined schedule to maintain security without downtime. Finally, they configure DMARC policies to enforce SPF and DKIM alignment, monitor aggregate and forensic reports for authentication results, and adjust policies from none to reject based on observed failures.

Common questions

What causes SPF permerrors and how to fix them? Exceeding 10 DNS lookups triggers permerrors; reduce includes or flatten the record. How do I troubleshoot DKIM failures? Check selector validity, DNS propagation, and ensure the signing domain matches the From domain. When should I enforce DMARC reject policies? Only after confirming SPF and DKIM pass rates are stable to avoid blocking legitimate mail.

How to use in Metaflow

Attach this skill to Metaflow agent tasks that involve DNS record configuration, email authentication audits, or deliverability troubleshooting. The agent will guide you through syntax validation, lookup counting, and alignment checks based on your domain setup. You can expect detailed, actionable insights to maintain authentication health and respond to failures proactively.

For broader context, see our roundup of claude marketing skills, and read best Claude skills for marketing agencies for related setup guidance.