BIMI Check

What It Does

Queries the default._bimi.<domain> TXT record for the BIMI record, validates the v=BIMI1 syntax, checks the SVG Tiny PS logo URL (l= tag) for accessibility, correct content type (image/svg+xml), HTTPS requirement, and file size limit (32KB max). Verifies the VMC/CMC certificate URL (a= tag) if present. Checks the domain's DMARC policy as a prerequisite — BIMI requires p=quarantine or p=reject to function. Reports which email clients will display the logo based on VMC/CMC status.

Why It's Useful

BIMI increases email engagement by displaying your verified brand logo directly in the inbox — studies show 10-20% higher open rates with brand indicators. It also provides anti-phishing benefits since only properly authenticated domains with enforced DMARC can use BIMI. Gmail requires a VMC (Verified Mark Certificate) or CMC (Common Mark Certificate) from DigiCert or Entrust for logo display. CMC is a lower-cost alternative that does not require a registered trademark. Apple Mail supports BIMI via Apple Business Connect, while Yahoo Mail and Fastmail display logos without requiring VMC.

Use Cases

Parameters

Response Fields

Code Examples

curl "https://api.edgedns.dev/v1/security/bimi" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -d "domain=cnn.com"

const response = await fetch(
  'https://api.edgedns.dev/v1/security/bimi?domain=cnn.com',
  {
    headers: {
      'Authorization': 'Bearer YOUR_API_KEY'
    }
  }
);

const data = await response.json();
console.log(data);

import requests

response = requests.get(
    'https://api.edgedns.dev/v1/security/bimi',
    headers={'Authorization': 'Bearer YOUR_API_KEY'},
    params={
    'domain': 'cnn.com'
    }
)

data = response.json()
print(data)

Related Endpoints

External References

Learn more about the standards and protocols behind this endpoint.