BIMI record parser
Reads one BIMI assertion record as the BIMI check does: v=BIMI1, l= and a= tags, repeated and missing tags, HTTPS and the .svg logo path, and a missing mark certificate. Nothing is fetched: the logo, the certificate and DMARC are not checked.
Updated 2026-10-27
What this tool checks
The record is read with the reader of the BIMI record check:
- Version and tags:
v=BIMI1, thel=anda=tags, and repeated or missing tags. - URLs: both must use HTTPS (
BIMI_INSECURE_URL), and the logo path must end in.svg(BIMI_LOGO_NOT_SVG). - Certificate: a record without
a=getsBIMI_NO_VMC.
How to read the result
The tags are shown as written. One pair of surrounding double quotes, as DNS tools show TXT records, is removed and noted.
Limitations
- The logo, the mark certificate and DMARC enforcement are not checked: they need DNS or downloads.
Use it from code
API reference for BIMI record parser
curl -i -X POST https://api.lookproof.dev/v1/mail/bimi-parse \
-H 'content-type: application/json' \
-d '{"record": "v=BIMI1; l=https://example.com/brand/logo.svg; a=https://example.com/brand/vmc.pem"}'A request without payment is answered with 402 Payment Required and the exact price. See the API reference.
Limits
| Input | BIMI record |
|---|---|
| Deadline | 2 seconds |
| Freshness | Computed from the input; nothing is looked up |
| Price | $0.002 per check |
Findings this tool can report
BIMI (4)
- Warning
BIMI_INSECURE_URLA BIMI URL does not use HTTPS. - Error
BIMI_INVALID_RECORDThe BIMI record is not valid. - Warning
BIMI_LOGO_NOT_SVGThe BIMI logo URL does not point to an SVG file. - Info
BIMI_NO_VMCThe BIMI record has no mark certificate (a= tag).
Frequently asked questions
What does a BIMI record need?
It starts with v=BIMI1 and has an l= tag with the HTTPS URL of an SVG logo. Most mail clients also want a= with the URL of a mark certificate. A missing l= tag or a repeated tag is BIMI_INVALID_RECORD.
What does l= with an empty value mean?
v=BIMI1; l=; a= declines BIMI for the domain: it tells mail clients not to show a logo. The tool reports it as declined and checks no URLs.
Does the tool check my logo or certificate?
No. It reads only the text. The BIMI record check looks up the published record and whether DMARC is enforced, which BIMI requires; neither tool downloads the logo.