A real mailbox for every customer

How it works

1. 01Provision a mailbox per customer

   Create a mailbox for each end-customer on your managed domain as they onboard.

2. 02Scope a key to each mailbox

   Issue a per-inbox sm_live_ key with the role each customer's agent needs and an optional expiry; revoke a single customer without touching the rest.

   Shell

   Show example

   # Keys are issued from the dashboard, not over REST - the issuance surface is
   # deliberately not agent-callable, so a leaked key can never mint or revoke
   # another. To get one: Dashboard → API keys → pick the mailbox + a role
   # (read / read_write / management) + an optional expiry → copy the sm_live_…
   # secret (it is shown ONCE). Then set it for your agent and pass it as the
   # Bearer token on every REST + MCP call:
   export SAIRAPH_MAIL_KEY="sm_live_…"

3. 03Keep tenants isolated

   Each mailbox is encrypted per customer, and suppression and limits are isolated per mailbox, so one tenant can't affect another.

4. 04Administer across the fleet

   Use a management (sm_mgmt_) key for tenant-wide operations spanning the mailboxes you own, while each customer's agent stays scoped to its own.

5. 05Grow without re-architecting

   Add mailboxes as you add customers; the per-mailbox model is the same at one or many.