Connect OpenClaw to Suped to investigate DMARC reports and SPF or DKIM failures, inspect domains, and onboard MSP clients. The Suped DMARC plugin includes the MCP connection and a skill that guides OpenClaw through these tasks.
Install the plugin
You need OpenClaw 2026.10.7 or newer and a Suped account with access to the organizations you want to use. Install and enable the plugin from your OpenClaw environment:
openclaw plugins install clawhub:@suped/dmarc
openclaw plugins enable suped-dmarcFollow OpenClaw's installation and reload prompts. The plugin source and additional setup instructions are available in the Suped OpenClaw repository.
Connect your Suped account
- With your OpenClaw Gateway running, open its Control UI using the Gateway's own HTTPS address or a local address such as
http://127.0.0.1:18789. - Go to Settings → Plugins → Suped DMARC → Accounts and select Connect.
- Sign in to Suped, review the requested access, and select Allow access. New accounts can complete onboarding in OpenClaw after connecting.
- Return to OpenClaw, start a new conversation, and ask “List my Suped organizations” to check the connection.
OpenClaw handles OAuth sign-in and stores the connection. You do not need a Suped API key or client secret. Use the same Gateway for the Control UI and the connection so it can receive the sign-in callback.
What you can do
- List your organizations, MSP clients, and monitored domains.
- Review authentication issues and analyze DMARC records for a date range, including the original report XML.
- Add domains to Suped or restore archived domains.
- Create client organizations under an MSP you administer.
For example, ask “Analyze DMARC failures for example.com over the last seven days and compare them with its open issues.” Specify the Suped organization when you have access to more than one.
For onboarding, ask “Create a client named Example Client under my Suped MSP, then add example.com to that client.” After adding the domain, ask OpenClaw for the DMARC DNS changes and apply them at your DNS provider. OpenClaw can then verify that DMARC reporting is configured.
Permissions and limits
Suped checks the connected user's current permissions on every request. Reading domain data and adding domains require user or administrator access; a billing-only role is insufficient. Creating an MSP client requires administrator access to its parent MSP, and that tool may be absent for other accounts.
The connection supports reading data and creating domains or clients. It cannot edit DNS, resolve or dismiss issues, delete domains or clients, or change account permissions. Each successful client creation makes a new organization, so check the result before repeating a request.
This setup uses the Gateway's shared operator connection. For an OpenClaw deployment where people need separate Suped accounts, follow OpenClaw's MCP authorization guidance.
Standalone skill and troubleshooting
The standalone Suped DMARC skill is also available on ClawHub. It provides task instructions and needs a Suped MCP connection configured separately; follow the setup in its listing. You do not need to install it separately when using the plugin above.
If sign-in succeeds but the tools are missing, check that the plugin is enabled and start a new conversation. If access has expired, reconnect through the plugin's Accounts page. An empty report result can mean the selected organization has no DMARC data yet; it does not necessarily mean the connection failed. See the MCP server documentation for tool details and authentication troubleshooting.
