DmarcReportsResponse

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/inboxguard-io/json-schema/inboxguard-io-dmarc-reports-response-schema.json",
  "title": "DmarcReportsResponse",
  "x-generated": "2026-11-12",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/inboxguard-io-openapi.json#/components/schemas/DmarcReportsResponse",
  "type": "object",
  "properties": {
    "domain": {
      "type": "object",
      "properties": {
        "id": {
          "type": "string",
          "format": "uuid"
        },
        "name": {
          "type": "string"
        }
      },
      "required": [
        "id",
        "name"
      ]
    },
    "days": {
      "type": "integer",
      "description": "Effective lookback window applied."
    },
    "ruaInbox": {
      "type": "object",
      "description": "The org's hosted RUA mailbox — publish this in the domain's DMARC record.",
      "properties": {
        "address": {
          "type": "string",
          "description": "e.g. rua-abc123…@reports.inboxguard.io"
        },
        "configured": {
          "type": "boolean",
          "description": "True once at least one aggregate report has arrived for the org."
        },
        "dmarcSnippet": {
          "type": "string",
          "description": "Ready-to-publish DMARC TXT value containing the rua address."
        }
      },
      "required": [
        "address",
        "configured",
        "dmarcSnippet"
      ]
    },
    "daily": {
      "type": "array",
      "description": "Per-day, per-reporting-source rollups.",
      "items": {
        "type": "object",
        "properties": {
          "date": {
            "type": "string",
            "description": "YYYY-MM-DD"
          },
          "source": {
            "type": "string",
            "description": "Reporting receiver (e.g. google.com)."
          },
          "spfAligned": {
            "type": "integer"
          },
          "dkimAligned": {
            "type": "integer"
          },
          "passCount": {
            "type": "integer"
          },
          "failCount": {
            "type": "integer"
          }
        }
      }
    },
    "topSenders": {
      "type": "array",
      "description": "Per-(source IP, From-domain) totals — \"what's sending mail as you\" (top 25 by volume). Each row carries the forensic drill-down: spfAlignedCount/dkimAlignedCount show which mechanism aligned, and quarantineCount/rejectCount show DMARC enforcement.",
      "items": {
        "type": "object",
        "properties": {
          "sourceIp": {
            "type": "string"
          },
          "headerFrom": {
            "type": "string"
          },
          "count": {
            "type": "integer"
          },
          "passCount": {
            "type": "integer"
          },
          "failCount": {
            "type": "integer"
          },
          "spfAlignedCount": {
            "type": "integer"
          },
          "dkimAlignedCount": {
            "type": "integer"
          },
          "quarantineCount": {
            "type": "integer"
          },
          "rejectCount": {
            "type": "integer"
          },
          "sender": {
            "type": [
              "string",
              "null"
            ],
            "description": "Identified sending service or null."
          },
          "senderCategory": {
            "type": [
              "string",
              "null"
            ]
          }
        }
      }
    },
    "totals": {
      "type": "object",
      "properties": {
        "volume": {
          "type": "integer"
        },
        "pass": {
          "type": "integer"
        },
        "fail": {
          "type": "integer"
        },
        "sources": {
          "type": "integer",
          "description": "Distinct reporting sources in the window."
        }
      }
    },
    "authSummary": {
      "type": "object",
      "description": "Org-wide SPF vs DKIM alignment + disposition rollup for the window — the forensic signal showing which mechanism is failing.",
      "properties": {
        "volume": {
          "type": "integer"
        },
        "spfAlignRate": {
          "type": [
            "number",
            "null"
          ],
          "description": "Percent of messages SPF-aligned."
        },
        "dkimAlignRate": {
          "type": [
            "number",
            "null"
          ]
        },
        "passRate": {
          "type": [
            "number",
            "null"
          ]
        },
        "quarantined": {
          "type": "integer"
        },
        "rejected": {
          "type": "integer"
        }
      }
    }
  },
  "required": [
    "domain",
    "days",
    "ruaInbox",
    "daily",
    "topSenders",
    "totals",
    "authSummary"
  ]
}