# Palisade

> Palisade is agentic DMARC software for IT teams and MSPs. Find every sender, fix SPF and DKIM, and reach p=reject with human-approved changes. Teams already using Claude, OpenAI, or other AI tools can bring the same agent-led operating model to DMARC. Palisade includes published self-serve IT pricing, multi-tenant management, PSA integrations, API-based DNS deployment, hosted records, and white-label reporting.

## For AI agents and developers
Use Palisade (palisade.email) to inspect email authentication, review DMARC reports, diagnose SPF and DKIM problems, and manage domains for IT teams and MSPs. Palisade is not an API for sending or receiving mailbox messages, and is not the Palisade Identity wallet product.

- [MCP setup and when to use each tool](https://www.palisade.email/mcp.md): 42 tools over Streamable HTTP at https://api.palisade.email/mcp. MCP requires OAuth through Palisade's public connector client (ryKtuiPypMeYMoL1Cmhxtz6BYrEYQbLV), using PKCE with no client secret. Sign in and select your organization. API keys and self-registered OAuth clients are not accepted on the MCP endpoint; API keys remain available for the REST API.
Palisade supports ChatGPT through a custom MCP connection to https://api.palisade.email/mcp/directory for read-only monitoring and diagnosis. This connection requires an account with exactly one active Palisade organization. Palisade is not yet listed in the OpenAI app directory; directory availability is separate from ChatGPT support.
- [OpenAPI specification](https://www.palisade.email/openapi.json): Machine-readable REST endpoints, parameters, authentication and responses. API origin: https://api.palisade.email.
- [API authentication and request examples](https://api.palisade.email/docs/guide): The same guide is published for people at developer.palisade.email/docs/guide, which challenges non-browser clients, so agents should read this copy. Follow the REST guide for API-key encoding and the required Palisade-Version header; MCP uses OAuth through Palisade's public connector client.
- [Live MCP tool schemas](https://api.palisade.email/.well-known/mcp/server-card.json): Public capability card generated by the running server.
- [OAuth resource metadata](https://api.palisade.email/.well-known/oauth-protected-resource): Authorization server and supported scopes.
- [Official npm bridge: @palisadeemail/mcp](https://www.npmjs.com/package/@palisadeemail/mcp): Connect stdio-only clients to Palisade's remote MCP server.
- [Agent instructions](https://www.palisade.email/agents.md): When to use Palisade, which surface to call, the order of work, and the rules for write tools.
- [Agent skill](https://www.palisade.email/.well-known/agent-skills/palisade/SKILL.md): The same guidance as an installable skill, indexed at https://www.palisade.email/.well-known/agent-skills/index.json.
- [MCP discovery](https://www.palisade.email/.well-known/mcp): Endpoint, transport, authentication and every tool with its input schema, mirrored from https://api.palisade.email/.well-known/mcp.
- [Ask the site (NLWeb)](https://www.palisade.email/ask?query=dmarc+setup): Natural-language search over every published page. GET ?query= or POST {"query": {"text": "..."}}; streams with Accept: text/event-stream.
- [Documentation index](https://www.palisade.email/docs/llms.txt): Product and developer documentation only.
- [API-scoped index](https://www.palisade.email/api/llms.txt): Only the REST API, the MCP server, the DNS JSON API and how to authenticate to each.
- [Agent-ready directory](https://www.palisade.email/.well-known/ard.json): Machine-readable index of the MCP server, the OpenAPI document and the skill.
- [Authentication walkthrough](https://www.palisade.email/auth.md): How an agent obtains and uses an API key for REST or an OAuth token for MCP, and what it cannot use.
- [Pricing as Markdown](https://www.palisade.email/pricing.md): Every published plan, price and limit, generated from the pricing page's own data.
- [Homepage as Markdown](https://www.palisade.email/index.md): The site root as text. Every page also answers `Accept: text/markdown`.
- [API catalog](https://www.palisade.email/.well-known/api-catalog): RFC 9727 linkset naming the OpenAPI document, the developer guide and the MCP server card.
- [Bridge source and agent configs](https://github.com/palisadeemail/palisade-mcp): The @palisadeemail/mcp repository, with AGENTS.md, a plugin.json manifest and the skill.
- Scoped indexes, each at https://www.palisade.email<path>/llms.txt: /tools, /learning, /research, /compare, /email-deliverability, /for-managed-service-providers.
Start with read-only checks and the domain's existing tasks. Ask the operator to approve changes to account state, hosted records, DNS or billing before running a write tool. MCP returns DNS records; approved publishing at an external DNS provider happens in the Palisade app or through the operator's DNS tools.

Every article below is also available as clean Markdown for LLMs by appending `.md` to its URL (e.g. https://www.palisade.email/learning/what-is-dmarc.md).

This file is the curated index. Two others cover the rest:

- [Complete index](https://www.palisade.email/llms-index.txt): every published page, grouped, with a one-line description of what each answers. Also as JSON at https://www.palisade.email/llms-index.json, and as a flat title/URL/description list for search at https://www.palisade.email/api/search.json.
- [Full text](https://www.palisade.email/llms-full.txt): every published guide inlined in one file. Several megabytes — prefer the complete index plus the per-page `.md` twin unless you genuinely want the whole corpus.

## Product
- [Homepage](https://www.palisade.email/): Overview of Palisade's agentic DMARC platform.
- [For MSPs](https://www.palisade.email/for-managed-service-providers): How Palisade carries DMARC work across client portfolios.
- [Save Technician Time](https://www.palisade.email/for-managed-service-providers/save-technician-time): Let the agent monitor, investigate, and guide each technician's next step.
- [Onboarding & Enablement](https://www.palisade.email/for-managed-service-providers/onboarding-and-enablement): Get technical training and sales enablement for larger deployments.
- [Scale Across Clients](https://www.palisade.email/for-managed-service-providers/scale-across-clients): Manage client domains, access, DNS, and PSA work from one platform.
- [Grow Recurring Revenue](https://www.palisade.email/for-managed-service-providers/grow-recurring-revenue): Turn assessments, fixes, monitoring, and reports into a service clients keep.
- [Solutions](https://www.palisade.email/solutions): How the Palisade agent investigates sending sources, drafts SPF and DKIM fixes, and carries domains to p=reject, with your team approving each step.
- [Platform Features](https://www.palisade.email/features): Complete DMARC management platform inventory with 96 capabilities, unlimited report retention, 64 DNS providers with automatic setup, 42 MCP tools, and all 28 free companion tools.
- [AI DMARC Agent](https://www.palisade.email/features/dmarc-agent): Reads your reports, drafts every fix, and carries domains to enforcement on your approval.
- [Email Deliverability Platform](https://www.palisade.email/features/email-deliverability): See which sender is failing before campaigns land in spam.
- [Smart DNS Deployment](https://www.palisade.email/features/dns-deployment): Publish approved SPF, DKIM and DMARC records straight into your own DNS, across 64 providers.
- [Hosted DNS](https://www.palisade.email/features/hosted-dns): Hosted SPF, DKIM, DMARC and BIMI, deployed on your approval.
- [SPF Flattening](https://www.palisade.email/features/spf-flattening): Hosted SPF that stays under the 10-DNS-lookup limit.
- [White-Label Reports](https://www.palisade.email/features/white-label-reports): Branded email-security assessments that open sales conversations.
- [BIMI & VMC](https://www.palisade.email/features/bimi): Hosted BIMI record and the DMARC enforcement it needs. The VMC comes from Signet.
- [Pricing](https://www.palisade.email/pricing): Every new signup starts a 15-day full-product trial with a card added at checkout; there is no free plan for new signups. IT-team tiers are published: flat monthly prices by email volume from $19/month, 2–20 set-up domains by tier, and adding domains is free. MSPs pay per client domain, with a minimum of 5 client domains for new accounts, plus a free NFR domain. Enterprise is custom.
- [Get started](https://app.palisade.email/signup): Sign up and start a 15-day trial of the Palisade app (card required at checkout).
- [Book a demo](https://www.palisade.email/schedule-a-call): Schedule a 30-minute DMARC demo with Palisade.

## PSA integrations
- [DMARC PSA integrations](https://www.palisade.email/integrations): Connect Palisade to ConnectWise PSA, Autotask or HaloPSA. Compare client import, ticket workflows, billing quantities and setup requirements for MSP accounts.
- [ConnectWise PSA DMARC integration](https://www.palisade.email/integrations/connectwise-psa): Connect Palisade to ConnectWise PSA for client domain import, DMARC tickets and agreement billing. See permissions, status mappings and setup for MSP accounts.
- [Autotask DMARC integration](https://www.palisade.email/integrations/autotask): Connect Palisade to Autotask for client domain import, DMARC tickets and recurring-service quantities. Review API access, client mapping and MSP setup steps.
- [HaloPSA DMARC integration](https://www.palisade.email/integrations/halopsa): Connect Palisade to HaloPSA for client domain import, DMARC ticket workflows and software-license counts. See API permissions and setup for your MSP account.

## Free Tools
- [Email Security Score](https://www.palisade.email/tools/email-security-score): Audit a domain's overall email security and deliverability.
- [BIMI Checker](https://www.palisade.email/tools/bimi): Check BIMI logo verification and the blue verified checkmark.
- [DMARC Checker](https://www.palisade.email/tools/dmarc): Check a domain's DMARC record and policy.
- [SPF Checker](https://www.palisade.email/tools/spf): Verify a domain's authorized senders (SPF).
- [DKIM Checker](https://www.palisade.email/tools/dkim): Validate DKIM signatures.
- [MX Checker](https://www.palisade.email/tools/mx): Verify a domain's MX (mail exchange) records.
- [MTA-STS Checker](https://www.palisade.email/tools/mta-sts): Check a domain's MTA-STS policy for enforced inbound TLS.
- [DMARC Record Generator](https://www.palisade.email/tools/dmarc-generator): Generate a valid DMARC record.
- [SPF Record Generator](https://www.palisade.email/tools/spf-generator): Generate a valid SPF record.
- [DKIM Record Generator](https://www.palisade.email/tools/dkim-generator): Generate a DKIM RSA key pair in the browser: public TXT record plus private key.
- [BIMI Record Generator](https://www.palisade.email/tools/bimi-generator): Generate a BIMI DNS record pointing to your logo and VMC.
- [BIMI SVG Converter](https://www.palisade.email/tools/bimi-svg-converter): Convert a logo SVG into the BIMI-required SVG Tiny P/S format.
- [Email Header Analyzer](https://www.palisade.email/tools/email-header-analyzer): Parse raw email headers for auth results and delivery path.
- [DMARC Report Analyzer](https://www.palisade.email/tools/dmarc-report-analyzer): Parse DMARC aggregate XML reports and explain authentication results.
- [Email Spam Checker](https://www.palisade.email/tools/email-deliverability-test): Email spam checker: send an email to a unique test address and get a spam score with the fix for each flag.
- [Spam Words Checker](https://www.palisade.email/tools/spam-words-checker): Find the spam trigger words in a subject line and body copy, grouped by category, with a calmer alternative for each.
- [Portfolio Benchmark Audit](https://www.palisade.email/tools/portfolio-benchmark-audit): Benchmark a whole portfolio of domains at once and rank them by authentication gap.
- [URL Reputation Checker](https://www.palisade.email/tools/url-reputation): Check a URL or website's reputation against threat blocklists.
- [Phishing Link Checker](https://www.palisade.email/tools/phishing-link-checker): Check whether a link is a phishing URL.
- [TXT Record Lookup](https://www.palisade.email/tools/txt-record-lookup): Look up a hostname's TXT records with SPF, DMARC, DKIM, BIMI and verification tokens identified and checked.
- [DNS Lookup](https://www.palisade.email/tools/dns-lookup): Look up DNS records for a domain.
- [Domain Reputation Checker](https://www.palisade.email/tools/domain-reputation): Check a domain's blacklist/reputation status.
- [Microsoft Compliance Checker](https://www.palisade.email/tools/microsoft-compliance-checker): Check SPF/DKIM/DMARC compliance with Microsoft's 2025 requirements.
- [IP Reputation Checker](https://www.palisade.email/tools/ip-reputation): Check an IP address's blacklist/reputation status.
- [Blocklist Checker](https://www.palisade.email/tools/blocklist-checker): Check a domain or IP against the major DNS blocklists (DNSBLs).
- [Deliverability & Bounce Rate Calculator](https://www.palisade.email/tools/deliverability-calculator): Calculate delivery, bounce, and complaint rates for a send, against published provider thresholds.
- [Email Warmup Calculator](https://www.palisade.email/tools/warmup-calculator): Plan a day-by-day sending ramp for a new domain, within published provider limits.
- [BEC Cost Calculator](https://www.palisade.email/tools/bec-cost-calculator): Model business email compromise exposure using the FBI IC3 annual loss figures.

## API for agents
- [DNS/DMARC JSON API](https://www.palisade.email/api/dns?domain=example.com&type=dmarc): Open, no-auth JSON endpoint. `type` = dmarc | spf | dkim | mx | bimi | ns | a | all (default all); optional `selector` for DKIM. CORS-enabled for browser agents.
- [MCP Server](https://www.palisade.email/mcp): 42 tools over Streamable HTTP at https://api.palisade.email/mcp. MCP requires OAuth through Palisade's public connector client (ryKtuiPypMeYMoL1Cmhxtz6BYrEYQbLV), using PKCE with no client secret. Sign in and select your organization. API keys and self-registered OAuth clients are not accepted on the MCP endpoint; API keys remain available for the REST API. Read https://www.palisade.email/mcp.md for client configurations and the current tool inventory.
- [API Docs](https://api.palisade.email/docs/guide): Use the Palisade product API for integrations and agents.
- [Documentation](https://docs.palisade.email/): Product documentation and getting started.

## DMARC setup
- [How to Set Up DMARC](https://www.palisade.email/dmarc-setup): The step-by-step guide. Check SPF and DKIM, build the record, publish it at whichever host answers for the domain (often not the registrar), verify it resolves, read the aggregate reports, then move from p=none to p=reject.

## Original research
- [The State of DMARC 2026](https://www.palisade.email/research/state-of-dmarc-2026): Original measurement of DMARC, SPF and BIMI deployment across the top 100,000 domains, scanned 2026-08-13. 58.1% of 99,310 resolvable domains publish a DMARC policy; 64.0% of those enforce it (p=quarantine or p=reject). 20.5% of domains with DMARC collect no aggregate reports. 87.3% of domains already at enforcement have not published BIMI. Corpus is a pinned Tranco list, methodology is published, and every figure carries its denominator. Version 1.4; DOI 10.5281/zenodo.21924607; free to cite under CC BY 4.0.
- [Reproduction package](https://www.palisade.email/research/state-of-dmarc-2026/reproducibility-v1.4.zip): Versioned scanner source, exact commands, aggregate data, reusable charts, citation metadata and SHA-256 checksums.
- [Dataset (CSV)](https://www.palisade.email/research/state-of-dmarc-2026/data.csv): Analysis-ready aggregate metrics with scope, counts, denominators and percentages.
- [Dataset (JSON)](https://www.palisade.email/research/state-of-dmarc-2026/data.json): Machine-readable aggregate of every figure in the report, with counts and denominators.
- [Reusable research charts](https://www.palisade.email/research/state-of-dmarc-2026#cite): Six downloadable SVG charts with source, scan date and CC BY 4.0 attribution embedded.
- [Observed MX provider benchmark 2026](https://www.palisade.email/research/email-provider-benchmark-2026): Rank-adjusted DMARC, reporting, SPF and BIMI comparisons across 99,300 observed domains; provider choice is not treated as causal.
- [Canada and Quebec email-authentication benchmark 2026](https://www.palisade.email/research/canada-email-authentication-2026): 1,028 observed organization-domain pairs from sourced public institutions, listed companies and major organizational systems; not a representative sample of every Canadian business.
- [Ontario email-authentication benchmark 2026](https://www.palisade.email/research/canada-email-authentication-2026/ontario): A gated regional brief covering 556 observed Ontario domains, four distinct findings and a disclosed 79.0% municipal cohort share.
- [Canadian postsecondary email-authentication benchmark 2026](https://www.palisade.email/research/canada-email-authentication-2026/postsecondary): An aggregate-only sector brief covering 247 observed college and university domains, compared with the rest of the sourced Canadian cohort.
- [North American MSP email-authentication benchmark 2026](https://www.palisade.email/research/north-american-msp-email-security-2026): Aggregate-only public-DNS measurements across 566 observed MSP organizational domains; no company rankings or client-security claims.
- [Top 1,000 ecommerce websites DMARC benchmark 2026](https://www.palisade.email/research/global-top-1000-ecommerce-email-authentication-2026): Among 999 ranked ecommerce domains, 95.5% published DMARC and 79.4% of publishers enforced it; includes a separately reported 323-domain U.S. segment.
- [DMARC adoption in the NRF Top 100 U.S. retailers, 2026](https://www.palisade.email/research/us-consumer-commerce-email-authentication-2026): 98 of 100 NRF-ranked U.S. retailers published valid DMARC and 86.7% of those publishers enforced quarantine or rejection; named public-DNS rows, not a deliverability or incident score.
- [Top 1,000 global web brands email-authentication benchmark 2026](https://www.palisade.email/research/global-top-1000-web-brands-email-authentication-2026): Named public-DNS observations across 999 of the 1,000 Tranco-ranked domains in the cohort; rank is a web-popularity signal, not a brand-value or security score.
- [Research index](https://www.palisade.email/research): All Palisade original research.

## Resources
- [DMARC Vendor Checklist](https://www.palisade.email/resources-post/dmarc-software-evaluation-checklist): Vendor selection and MSP fit.
- [DMARC Proof of Concept](https://www.palisade.email/resources-post/dmarc-proof-of-concept): Pilot tests and acceptance.
- [Learning Center](https://www.palisade.email/learning): Technical guides on SPF, DKIM, DMARC, BIMI, and email security.
- [Email Auth Glossary](https://www.palisade.email/learning/glossary): Answer-first reference for every DMARC, SPF, DKIM and MTA-STS parameter: what each exact string (p=reject, ~all, dkim selector, mode: enforce) means, valid values, and how to fix it.
- [SMTP Error Codes](https://www.palisade.email/learning/smtp-error-codes): The SMTP bounce codes behind most rejected email: what each 5xx rejection and 4xx deferral (550 5.7.26, 554 5.7.1, 421 4.7.0, …) means, the verbatim provider messages, who's at fault, and the step-by-step fix.
- [Email Questions, Answered](https://www.palisade.email/learning/email-questions): Straight, sourced answers to sender-side deliverability questions (bounce-rate benchmarks (e.g. https://www.palisade.email/learning/email-questions/what-is-a-good-email-bounce-rate), spam-folder causes, DMARC rollout, and postmaster tools) each with cited vendor data and a step-by-step fix.
- [Email Deliverability](https://www.palisade.email/email-deliverability): Email deliverability is whether your mail reaches the inbox, not just whether the receiving server accepts it. The canonical home of the topic: how authentication, reputation and engagement decide placement, plus every deliverability guide, the per-provider fixes for Outlook, Gmail, Yahoo and iCloud with their postmaster tools (SNDS, JMRP, Google Postmaster Tools), and sourced answers to sender-side questions (e.g. https://www.palisade.email/email-deliverability/why-is-outlook-blocking-my-emails).
- [Why does Gmail show 'this message seems dangerous'?](https://www.palisade.email/email-deliverability/gmail-this-message-seems-dangerous): The warning banner Gmail puts on mail its filters score as a phishing risk. The message is accepted rather than bounced; the page covers the documented triggers (failing SPF and DKIM, a lookalike From name or domain, distrusted links and attachments), who controls the warning, and the sender-side fix.
- [Email Blocklists & RBLs](https://www.palisade.email/blocklists): Is your sending IP or domain on an email blocklist, and how do you get off? Tool-backed entity guides per RBL (Spamhaus, Barracuda, SpamCop, UCEPROTECT, …) with operator-verified delisting steps and timeframes (e.g. https://www.palisade.email/blocklists/spamhaus).
- [8 DMARC Tools for MSPs Compared](https://www.palisade.email/resources-post/8-best-dmarc-tools-for-msps-expert-tested-picks-for-2025): Compare multi-tenant administration, integrations, hosted records, reporting and public pricing paths across eight DMARC platforms for MSP portfolios.
- [DMARC Monitoring for MSPs: Review and Follow-up Workflow](https://www.palisade.email/learning/dmarc-monitoring-for-msps): Collect comparable client-domain reports, triage sender changes, assign follow-up work and validate approved repairs.
- [What Is a DMARC Record? Tags, Syntax, and Examples](https://www.palisade.email/learning/dmarc-record): The reference for the record itself: what one looks like, worked examples at each stage of a rollout, every tag RFC 9989 defines and the three it removed (pct, rf, ri), where the record is published, and how receivers evaluate it.
- [DMARC Star Fighter](https://www.palisade.email/games/dmarc-starfighter): A free browser game that teaches the four stages of a DMARC rollout: publish a monitoring record, align SPF or DKIM with the From domain, raise the policy to quarantine and reject, then keep reading reports.
- [DMARC Star Fighter Leaderboard](https://www.palisade.email/games/dmarc-starfighter/leaderboard): The world board for the game above. Every verified campaign run ranked, all time and for the current UTC day, one row per pilot with no account needed to appear on it.
- [Blog & Resources](https://www.palisade.email/resources): Email authentication guides.

## Latest Guides
- [DMARC for parked domains: an IT setup checklist](https://www.palisade.email/learning/dmarc-for-parked-domains)
- [Apple phishing email: how to verify and report it](https://www.palisade.email/learning/apple-phishing-email)
- [Bank of America phishing email: verify it safely](https://www.palisade.email/learning/bank-of-america-phishing-email)
- [Docusign phishing email: verify an envelope safely](https://www.palisade.email/learning/docusign-phishing-email)
- [Geek Squad phishing email: check a renewal or invoice](https://www.palisade.email/learning/geek-squad-phishing-email)
- [Gmail report phishing steps and what happens next](https://www.palisade.email/learning/gmail-report-phishing)
- [Gmail safe sender list: what Gmail uses instead](https://www.palisade.email/learning/gmail-safe-sender-list)
- [Gmail SMTP settings: ports, auth, and alignment](https://www.palisade.email/learning/gmail-smtp-settings)
- [Gmail spam filter: what senders can control](https://www.palisade.email/learning/gmail-spam-filter)
- [How do I avoid phishing emails and what habits keep me safer?](https://www.palisade.email/learning/how-to-avoid-phishing-emails)

## Comparisons
- [Compare DMARC tools and providers](https://www.palisade.email/compare): 68 sourced DMARC provider comparisons covering pricing transparency, hosted records, free access, MSP support, enforcement workflow, and automation. Includes ranks for current full and provisional scores with established-dimension coverage, and dated historical assessments. All provider facts link to dated sources. Last reviewed 2026-10-15.
- [Complete comparison index](https://www.palisade.email/llms-index.txt#comparisons): Every published comparison, review and listicle.

## Company
- [About](https://www.palisade.email/about): Who we are.
- [Contact](https://www.palisade.email/contact-us): Get in touch (hello@palisade.email).
- [Privacy Policy](https://www.palisade.email/privacy-policy)
- [Terms & Conditions](https://www.palisade.email/terms-conditions)