Guide to the CredMail CLI
Run full domain health checks from your terminal — no account, no login, no browser needed. This guide covers install, usage, real output, and exactly what gets checked.
Quick start
The fastest way to check a domain, no installation required (needs Node.js 18+):
npx credmail check example.comYou'll get a terminal-friendly report with an overall health score, a PASS/WARN/FAIL status for every check, and exact DNS record values you can act on. See Example output below.
Install
The CLI is published to npm as credmail. Requires Node.js 18+. Run it directly without installing:
npx credmail check example.comOr install globally:
npm install -g credmail
credmail check example.comUsage
Usage: credmail check <domain>
Run a full domain health check.
Options:
--help, -h Show help
--version, -v Show version
Examples:
credmail check credmail.com
npx credmail check example.comThe CLI accepts a bare domain (example.com). URLs, www. prefixes, and paths are stripped automatically (https://www.example.com/blog is treated as example.com). No API key or account is required.
What's checked
Each check produces a PASS, WARN, or FAIL status:
- SPF — record present,
allmechanism, policy strictness - DKIM — signing key at a common
selector._domainkeyrecord - DMARC — policy record, enforcement policy, aggregate report address
- MX records — mail exchange records and priorities
- BIMI — record and HTTPS logo
- MTA-STS — DNS record and policy file
- TLS-RPT — reporting record and report URI
- Blacklists — 107 DNS-based blacklists with delisting URLs
- Reputation — estimated score across Gmail, Outlook, and Yahoo
- WHOIS — registrar, dates, nameservers
- DNS propagation — cross-resolver consistency
Example output
$ npx credmail check credmail.com
Domain Health Report — credmail.com
────────────────────────────────────────────────────────────
Running checks... done (38.2s)
Overall Score 83/100 Excellent
██████████████████░░
✓ SPF PASS
Record Present: Yes
All Mechanism: Strict (-all)
Includes: _spf.porkbun.com
✓ DKIM PASS
Found: Yes
Selector: resend
✓ DMARC PASS
Present: Yes
Policy: quarantine
Rua: mailto:hello@credmail.com
✓ MX Records PASS
Count: 2
MX Records:
10 fwd1.porkbun.com
20 fwd2.porkbun.com
⚠ BIMI WARN
Present: Yes
Logo Url: https://credmail.com/bimi-logo.svg
Https: Yes
→ No Verified Mark Certificate (VMC) authority URL. Most inbox providers require VMC for BIMI logo display.
⚠ MTA-STS WARN
Dns Present: Yes
Policy File: Yes
Mode: testing
→ MTA-STS is in testing mode. Upgrade to 'enforce' for full TLS protection once you've confirmed configuration.
✓ TLS-RPT PASS
Present: Yes
Report Uri: mailto:chris@snagdomain.com
⚠ Blacklists WARN (1/107 listed · 84/107 confirmed clean · 22 unmeasured)
⚠ 22 blacklist zone(s) unmeasured (resolver refused or timed out) — not counted as clean
✗ Listed on:
✗ HOSTKARMA Black — delist: https://www.junkemailfilter.com/spam/ (hours)
✓ Reputation 95/100
✓ Gmail: Likely to reach inbox with proper authentication
✓ Outlook / Microsoft 365: Good deliverability expected
✓ Yahoo / AOL: Should pass Yahoo's authentication checks
✓ WHOIS PASS
Registrar: Porkbun LLC
Expires: 2027-09-06T18:30:18Z
Created: 2024-09-06T18:30:18Z
────────────────────────────────────────────────────────────
Checked at 2026-08-26T18:34:20.740ZWhat the CLI doesn't do
The CLI covers the free, public domain health check only. For everything else, use the full web app:
- Email verification — single and bulk address verification with deliverability scoring and list hygiene
- AI agents — Fix, Verification, Pre-Ship, and Warmup agents that analyze your reports and write step-by-step remediation plans
- Saved history & reports — account-based report history, saved reports, and trend tracking
- Tools suite — record generators, SPF flattening, DMARC simulator, and header analyzer
Exit codes
0— check completed (regardless of score)1— invalid domain, unknown command, or unexpected error
The CLI shares its check logic with the website, so results are identical to credmail.com/check.