"It's an older email, sir, but it checks out."

A comprehensive email authentication checker that validates SPF, DKIM, and DMARC records to ensure your emails pass through the shields of modern email systems.

• 🛡️ Full Authentication Check - SPF, DKIM, DMARC validation
• 🌍 DNS Propagation Status - Check across 10+ global DNS providers
• 🎯 Smart Recommendations - Personalized fixes based on your setup
• ⚡ Quick & Verbose Modes - From rapid checks to detailed analysis
• 🏢 Provider Detection - Auto-detects Google, Microsoft, Zoho, and more
• 📊 Propagation Tracking - See DNS propagation percentage in real-time
• 🔍 Blacklist Checking - Verify IP reputation across major providers

# Check a domain
tydirium example.com

# Check an email address
tydirium user@example.com

# Quick mode (3 DNS servers only)
tydirium -q example.com

# Verbose mode (detailed analysis)
tydirium -v example.com

# Show version
tydirium -V

brew install agentstation/tap/tydirium

That's it! Homebrew will handle installation and updates automatically.

What's included:

• 🚀 Main tydirium command
• 📘 Man page (man tydirium)
• 🔧 Shell completions for bash, zsh, and fish
• 📚 Documentation and examples
• 🔄 Automatic updates via brew upgrade

curl -sSL https://raw.githubusercontent.com/agentstation/tydirium/master/install.sh | bash

# Clone and install
git clone https://github.com/agentstation/tydirium.git
cd tydirium
./install.sh

Or download directly:

curl -O https://raw.githubusercontent.com/agentstation/tydirium/master/tydirium
chmod +x tydirium
./tydirium example.com

• dig command (part of dnsutils or bind-utils package)
• Bash 3.2+ (macOS/Linux)

See CHANGELOG.md for the latest features and updates.

• ✅ Mail server configuration
• ✅ Redundancy verification
• ✅ Port 25 connectivity (verbose mode)
• ✅ Provider auto-detection

• ✅ Record syntax validation
• ✅ Policy strictness analysis
• ✅ Include chain verification
• ✅ Redirect handling

• ✅ Auto-discovery of selectors
• ✅ Key strength estimation
• ✅ DNS propagation tracking
• ✅ Multiple selector support

• ✅ Policy enforcement level
• ✅ Reporting configuration
• ✅ Subdomain policy
• ✅ Percentage deployment

• ✅ Blacklist status (Spamhaus, Barracuda, SpamCop)
• ✅ BIMI record detection
• ✅ MTA-STS configuration (verbose mode)
• ✅ TLS reporting setup (verbose mode)

=== Email Authentication Check for example.com ===
Generated: Thu Jul 17 11:30:00 CDT 2025

✅ SPF: Properly configured
✅ DKIM: 1 selector(s) found
⚠️  DMARC: Present but weak (p=none)
✅ MX: Mail servers configured

DNS Propagation Status:
✅ Cloudflare (one.one.one.one)
✅ Google (dns.google)
✅ OpenDNS (resolver1.opendns.com)
⚠️  Quad9 (dns.quad9.net) - Not propagated yet
❌ DNS.WATCH (resolver2.dns.watch) - Server unreachable
Propagation: 60% (3/5 servers)

=== Recommended Testing Steps ===

Your email authentication looks good! Here's how to verify:

1. Quick Test:
   → Send an email to a Gmail account
   → Click ⋮ (three dots) → 'Show original'
   → Look for these authentication results:
     • SPF: PASS
     • DKIM: PASS
     • DMARC: PASS

tydirium gmail.com

tydirium you@company.com

tydirium -q example.com

tydirium -v example.com

tydirium -h

tydirium -V

man tydirium

Tab completion is available for all supported shells:

# Add to ~/.bashrc or ~/.bash_profile
source $(brew --prefix)/etc/bash_completion

Automatically loaded if you're using Homebrew's completions directory.

Automatically loaded from vendor completions.

Just as the shuttle Tydirium needed proper authentication codes to pass through the Death Star's shield in Return of the Jedi, your emails need proper SPF, DKIM, and DMARC records to pass through modern email authentication systems.

The tool ensures your emails won't be stopped by saying "It's an older email, sir, but it checks out."

Contributions are welcome! Please feel free to submit a Pull Request. See CONTRIBUTING.md for guidelines.

# Clone the repo
git clone https://github.com/agentstation/tydirium.git
cd tydirium

# Make your changes
vim tydirium

# Test your changes
./tydirium example.com

This project is licensed under the MIT License - see the LICENSE file for details.

• Inspired by the need for simple, comprehensive email authentication checking
• Built with love for the command line
• May the Force be with your email deliverability

• 🐛 Report bugs
• 💡 Request features
• 🌟 Star the project

Made with ❤️ by AgentStation