aid: makebimi
name: makeBIMI
description: >-
  makeBIMI is a free web tool for preparing and validating brand logos for BIMI (Brand Indicators
  for Message Identification). It converts supported image inputs to SVG Tiny P/S, checks SVG
  suitability, audits a domain's DMARC configuration, and suggests a BIMI DNS TXT record. It does
  not issue certificates and does not guarantee mailbox-provider logo display. The public API is a
  single unauthenticated endpoint, GET /api/validate, for validating a remotely hosted SVG in an
  automated workflow. Operated alongside veriBIMI, an independent BIMI certificate-brokerage and
  implementation-support service, and DMARCSwiss, a Swiss-hosted DMARC monitoring service.
type: Index
url: https://raw.githubusercontent.com/api-evangelist/makebimi/refs/heads/main/apis.yml
created: '2026-08-21'
modified: '2026-08-21'
specificationVersion: '0.23'
tags:
- BIMI
- Email Authentication
- DMARC
- Email Deliverability
- SVG
- Brand Indicators
- Validation
tags_raw:
- BIMI
- DMARC
- email authentication
- SVG
- brand indicators
- SVG validation
apis:
- aid: makebimi:makebimi-validation-api
  name: makeBIMI SVG Validation API
  description: >-
    Single unauthenticated endpoint that validates a remotely hosted SVG for BIMI suitability
    (SVG Tiny P/S). Described by the provider's own llms.txt as "the unauthenticated SVG
    validation endpoint", contract GET /api/validate.
  humanURL: https://makebimi.com/api-docs
  baseURL: https://makebimi.com
  tags:
  - BIMI
  - Validation
  - Email Authentication
  properties:
  - type: Documentation
    url: https://makebimi.com/api-docs
  - type: OpenAPI
    url: https://makebimi.com/public/openapi.yaml
  - type: APIsJSON
    url: https://makebimi.com/public/apis.json
common:
- type: LLMsTxt
  url: llms/makebimi-llms.txt
- type: SecurityPolicy
  url: security/makebimi-security.txt
- type: Website
  url: https://makebimi.com
- type: Documentation
  url: https://makebimi.com/standard
- type: Support
  url: https://veribimi.com/services/
- type: PrivacyPolicy
  url: https://veribimi.com/privacy
maintainers:
- FN: Simon
  email: simon@veribimi.com
  url: https://veribimi.com
x-provenance:
  added: '2026-08-21'
  method: searched
  source: https://makebimi.com/llms.txt
  note: >-
    Submitted via apis.io/add on 2026-08-14 (submission 6982bc11) from simon@veribimi.com.
    THIS PROFILE IS DELIBERATELY THIN, AND NOT BECAUSE THE PROVIDER PUBLISHES LITTLE.
    Every substantive artifact makeBIMI publishes is unreachable to any non-browser client.
    makebimi.com sits behind a Cloudflare MANAGED CHALLENGE: /, /public/apis.json,
    /public/openapi.yaml, /api-docs, /sitemap.xml and the /api/validate endpoint itself all
    return HTTP 403 with `cf-mitigated: challenge` and a "Just a moment..." interstitial. This
    was tested with a default client and with a desktop Chrome user-agent; both are refused, so
    it is not user-agent filtering. Only the three paths Cloudflare exempts by default get
    through: robots.txt, llms.txt and .well-known/security.txt.
    Everything recorded here is drawn from those three first-party documents. The OpenAPI and
    APIs.json pointers are recorded as the provider DECLARES them in llms.txt; neither has been
    fetched, so neither is verified. The artifacts are HIDDEN, not absent.
    Note the contradiction, which is the provider's to resolve: robots.txt says `Allow: /` for
    every user-agent and advertises a sitemap that is itself 403.