Features
Built for the messages that have to arrive
Password resets, receipts, alerts and notifications — sent through infrastructure we run, with every step recorded.
Sending
REST email API
JSON API with idempotency keys, cc/bcc, reply-to, custom headers, attachments (malicious types blocked), tags and metadata.
SMTP submission
Port 587 with STARTTLS (465 implicit TLS optional). Per-application credentials, optional domain restrictions, From-header authorization.
Templates
Versioned templates with drafts, publishing, duplication, safe server-side rendering and HTML escaping of every variable.
Visibility
Message timeline
Submission, queue, hand-off, deferrals, acceptance and bounces — with the recipient server's actual SMTP response.
Usage analytics
Accepted, deferred, failed and bounced trends, response-code distribution, and usage by domain and API key.
Signed webhooks
HMAC-SHA256 signatures with timestamps, exponential retries, test events, payload previews and redelivery.
Deliverability
Domain verification
Ownership TXT, SPF, 2048-bit DKIM, DMARC and return-path checks resolved server-side, with continuous re-validation.
DKIM rotation
Rotate signing keys safely: the old key keeps signing until the new record verifies.
Suppression lists
Hard bounces, repeated soft bounces and complaints are suppressed automatically, with the reason shown.
Teams & security
Roles
Owner, Admin, Developer, Billing and Read-only roles with invitations and an organization audit log.
Scoped API keys
Fine-grained scopes, expiry dates, IP allowlists, rotation and last-used tracking. Secrets are stored hashed.
Account security
TOTP two-factor authentication, recovery codes, device sessions with revocation, and lockout after repeated failures.