BIMI,
letter by letter
Brand
Your logo, published by you.
Indicators
Shown next to your name in the inbox.
Message
On every email you send.
Identification
Only on mail that passes DMARC.
Why use BIMI
for your domain
Up to 2.5x more opens
Your logo appears next to every authenticated message, so recipients recognize you instantly and open rates can increase by up to 2.5x.
Trust that fights phishing
The logo only shows on mail that passes DMARC, making spoofed lookalikes obvious and your brand harder to impersonate.
DMARC enforcement included
BIMI requires DMARC at quarantine or reject, so adopting it hardens your whole domain against spoofing and improves deliverability.
Free brand impressions
Every email you already send becomes a branded impression in supporting inboxes, lifting opens and recall at no per-send cost.
What the BIMI
DNS record looks like
One TXT record with four parts. Each color points to the box that explains it.
Selector
Requireddefault._bimiWhere the record lives. No TXT record at this name means no logo, even if everything else is ready.
Version
Requiredv=BIMI1;Must come first and match exactly. A missing or wrong version fails the whole record.
Logo
Requiredl=….svg;HTTPS link to your SVG logo. Square, with no scripts, animation, or remote images.
Certificate
Needed for Gmaila=….pemHTTPS link to your VMC or CMC. Gmail and Apple Mail need it; other inboxes show the logo without one.
Also required: DMARC at enforcement
DMARC must be at quarantine or reject. With p=none, no inbox shows your logo.
_dmarc TXT "v=DMARC1; p=quarantine; pct=100;"Integrate today
in your code
One request checks the BIMI record, DMARC enforcement and the SVG logo. No API key or account needed.
Body
domainstringrequired- A sending domain to check (e.g. paypal.com). We trim, lowercase, and strip URL schemes before looking up default._bimi.
Request
// No SDK, no API key: it is a plain POST.const res = await fetch( "https://reloop.sh/api/tools/v1/bimi-check", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ domain: "paypal.com" }), },);
const result = await res.json();{ "domain": "paypal.com", "queryName": "default._bimi.paypal.com", "verdict": "pass", "bimiRecord": "v=BIMI1; l=https://www.paypalobjects.com/marketing/ua/logos/paypal-bimi.svg; a=https://www.paypalobjects.com/marketing/ua/certs/paypal-vmc.pem", "logoUrl": "https://www.paypalobjects.com/marketing/ua/logos/paypal-bimi.svg", "authorityUrl": "https://www.paypalobjects.com/marketing/ua/certs/paypal-vmc.pem", "dmarcRecord": "v=DMARC1; p=reject; pct=100; rua=mailto:d@rua.agari.com", "dmarcPolicy": "reject", "dmarcPct": 100, "dmarcEnforced": true, "logo": { "fetched": true, "contentType": "image/svg+xml", "tinyPsOk": true, "issues": [] }, "checks": [ { "id": "bimi-present", "label": "BIMI TXT", "status": "pass", "detail": "Found BIMI record at default._bimi.paypal.com.", "record": "v=BIMI1; l=https://www.paypalobjects.com/marketing/ua/logos/paypal-bimi.svg; a=https://www.paypalobjects.com/marketing/ua/certs/paypal-vmc.pem" }, { "id": "bimi-version", "label": "v=BIMI1", "status": "pass", "detail": "Version tag is BIMI1." }, { "id": "bimi-logo", "label": "Logo URL (l=)", "status": "pass", "detail": "logo URL is HTTPS. https://www.paypalobjects.com/marketing/ua/logos/paypal-bimi.svg" }, { "id": "bimi-authority", "label": "VMC / CMC (a=)", "status": "pass", "detail": "authority certificate URL is HTTPS. https://www.paypalobjects.com/marketing/ua/certs/paypal-vmc.pem" }, { "id": "dmarc", "label": "DMARC enforcement", "status": "pass", "detail": "DMARC is at enforcement (p=reject, pct=100).", "record": "v=DMARC1; p=reject; pct=100; rua=mailto:d@rua.agari.com" } ], "recommendations": []}Check BIMI
from your AI agent
Connect Claude, Cursor, or any MCP client to Reloop and let your agent check a domain's inbox logo on its own.
MCP Server
Connect Reloop to your AI agent. Let Claude, Cursor, or Codex check a domain's BIMI record and tell you what to fix.
- 1Add to Claude
Open Connectors
In Claude, go to Settings → Connectors and click Add custom connector. On Team and Enterprise plans an owner adds it under Organization settings first.
- 2
Paste the server URL
Name it Reloop and use this URL. Leave the advanced OAuth fields empty; Reloop registers the client automatically.
https://reloop.sh/mcp - 3
Connect
Click Connect, sign in to Reloop and approve the workspace. Then turn Reloop on from the tools menu in any chat.
Developer CLI
Send email from your terminal. Test deliveries and fix configuration without a dashboard.
v0.4.2 · Send email from your terminal
$ reloop emails send \
--to user@example.com \
--subject "Welcome to Reloop" \
--json
✓ queued → sent → delivered (78ms)
{ "id": "msg_01jh8q...", "to": "user@example.com", "status": "delivered" }
$ reloop emails send --to dev@company.com █
Explore all free email
& developer tools
More free utilities for checking deliverability, DNS records, and email authentication before you hit send.
Free Email Validator & List Cleaner
Verify syntax, disposable domains, and active MX records to keep your email list clean.
Email Deliverability & Spam Tester
Send a test email to analyze inbox placement, spam score, and SPF/DKIM alignment.
Email Spoofing & Phishing Checker
Test whether unauthorized senders can forge your domain to deliver phishing emails.
IP & Domain DNS Blocklist Checker
Check your sending IP address and domain against 50+ public DNS blocklists in real time.
DNS Lookup & Record Analyzer
Inspect MX, SPF, DKIM, DMARC, and A records with syntax validation and live diagnostics.
Domain Age Calculator
See exactly how old any domain is, with its registration date, expiry date and registrar.
Domain Warmup Checker
Check a domain's warmup stage and SPF, DMARC and MX readiness before you start sending.
Domain ESP & Email Sender Lookup
Identify all third-party email service providers authorized to send from your domain.
SPF, DKIM & DMARC Checker
Validate email authentication records to guarantee proper sender alignment and security.
Temp & Disposable Email Checker
Detect throwaway inboxes and burner addresses before they bounce or skew signup metrics.
Domain Reputation & Health Checker
Evaluate your domain health score, spam placement risk, and mail configuration flaws.
Lookalike Domain & Phishing Scanner
Detect registered typosquats and lookalike domains impersonating your brand online.
Email Spam Words & Subject Checker
Scan subject lines and body copy for spam trigger words that hurt inbox deliverability.
Email HTML Template Editor
Design, edit, and preview responsive HTML email templates across mobile and desktop.
Show your logo in every inbox.
Let's talk.
Reloop checks your BIMI record, DMARC enforcement, and SVG logo in one lookup. Start with the free checker, then enforce DMARC.
FAQ
Frequently asked questions.
Brand Indicators for Message Identification lets supporting mailbox providers show your logo next to authenticated mail. It sits on top of DMARC; it does not replace SPF, DKIM, or DMARC. Paste your sending domain into Reloop's free BIMI checker to see the record we find at default._bimi.
Enter your sending domain (e.g. paypal.com, not a full URL). We look up default._bimi.{domain}, validate v=BIMI1 and the l= logo URL, check a= for a certificate, confirm DMARC is at enforcement, and fetch the SVG to inspect Tiny PS rules. The page explains each check and what to fix.
BIMI requires a DMARC policy of quarantine or reject, applied to 100% of mail (pct=100 or omitted). p=none is not enough for the logo to appear. That is why DMARC enforcement is a hard fail in this checker, not a warning.
The assertion record is a TXT record at default._bimi.{domain}, for example default._bimi.paypal.com. An empty l= (v=BIMI1; l=;) is a valid assertion that asks receivers not to show a logo.
BIMI logos must be SVG Tiny Portable/Secure: version 1.2, baseProfile tiny-ps, square, no scripts, no animation, no external references. We fetch the l= URL over HTTPS and flag content-type, scripting, animation, and remote href issues.
A Verified Mark Certificate (or Common Mark Certificate) is published in a=. Gmail generally requires one before it shows the logo. Other providers may show the logo from a valid BIMI record alone, which is why a missing a= is a warning here rather than a fail.
Usually the l= URL is not publicly reachable over HTTPS, returns the wrong content type, or the SVG breaks Tiny PS rules (scripts, animation, external refs, non-square canvas). The check detail names the exact issue and the fix to apply.
The BIMI record exists and DMARC passes, but something needs attention, typically a missing VMC or a logo fetch issue. Fail means the logo cannot show: no record, bad version, bad logo URL, or DMARC not at enforcement.
The auth checker validates each authentication record in depth. This BIMI checker answers one question: will supporting inboxes show my logo? It combines the BIMI assertion, DMARC enforcement, and live SVG inspection into a single verdict.
Nothing is written to a database or used for marketing. Request logs may include the domain and verdict for rate limiting. The tool is free and needs no account.
Yes. POST https://reloop.sh/api/tools/v1/bimi-check with JSON {"domain":"paypal.com"} with no API key, rate limited to 60 requests per minute per IP. Reloop is open-source email infrastructure, so you can also self-host the whole stack.