Set up your sending domain with an AI agent

Verifying a sending domain means adding three DNS records, which usually means logging into your DNS provider and copying values across by hand. If you work with an AI agent such as Claude, Claude Code or Cursor, it can do that part for you: it gets the records from Pombo, writes them at your DNS provider, and checks they went live.

This guide uses Cloudflare, because Cloudflare publishes its own MCP server. The same approach works for any DNS provider your agent can reach.

What you need

• Pombo connected to your agent. See connecting an agent.
• Your DNS provider connected to the same agent. For Cloudflare, add the Cloudflare API MCP server, https://mcp.cloudflare.com/mcp, as a remote MCP server in your client. When you connect it you are sent to Cloudflare to sign in and choose what the agent may touch.

Give the agent the least it needs: DNS edit on the one zone you are setting up. You can disconnect it again once the domain is verified.

Ask for it

Tell the agent which domain you send from, for example:

Set up mail.yourcompany.com as my sending domain in Pombo. My DNS is on Cloudflare.

What happens next:

1. The agent calls add_sending_domain in Pombo. That registers the domain and returns its records. Three DKIM CNAMEs are marked required: those are all Pombo needs before you can send.
2. It shows you the records it is about to add and asks before writing to your DNS; Pombo's instructions to agents say to ask first. Check the names and values match.
3. It adds the three CNAMEs at Cloudflare with the proxy turned off (DNS only). A proxied record never verifies.
4. It looks the records up to confirm they are live, then calls check_sending_domain in Pombo. DNS usually propagates within minutes; if it is slower, the agent checks again later rather than in a tight loop.
5. Once DKIM verifies, it offers the optional records (MAIL FROM, SPF and DMARC), which help your email reach the inbox. If you already have an SPF or DMARC record, it updates yours rather than adding a second.

None of this sends any email. Verifying the domain, together with your mailing address, is what starts Pombo's review of your account; see sending gates.

If your agent cannot reach your DNS

Some DNS providers have no MCP server or API your agent can use, and sometimes someone else manages the DNS. Either way, ask the agent for the share link. add_sending_domain returns one: a page with the same records, copy buttons and live status that whoever manages your DNS can open without a Pombo account. There is a Copy link button for it on the domain's page under Settings, Domains too.

Check it yourself

To see what the world sees for your domain, run it through the free email authentication checker, or open the domain under Settings, Domains. The full list of records and what each is for is in verify your sending domain.