Managed Email
Managed Email
Section titled “Managed Email”Managed Email provisions a real mail server — send, receive, store, and a webmail inbox — for your organization’s domain in one click, then lets you run all of mail administration (domains, mailboxes, aliases, DNS, deliverability) from the ShipSquares UI — never from the mail server’s own console.
The mail engine is Stalwart (a single lean Rust server speaking SMTP, IMAP, JMAP, and
more), deployed as a per-organization catalog app. ShipSquares is the single pane of
glass, driving it over its management API; the webmail inbox lives on its own subdomain
(inbox.<domain>) fronted by Caddy with automatic HTTPS.
What you get
Section titled “What you get”- One-click provision. Deploy the mail engine, create a domain, generate DKIM, and wire the inbox subdomain — without touching the mail server, editing a config file, or learning SMTP.
- Guided + automatic DNS. Either the platform publishes and keeps in sync the
required MX/SPF/DKIM/DMARC/MTA-STS records (via your DNS provider’s credentials), or it
shows them as copy-paste hints with live verification (
pending → verifying → verified). - Deliverability preflight. Checks for port-25 egress, reverse DNS (PTR), and blocklist membership before you go live — with an optional smarthost/relay for hosts where port 25 is blocked.
- Mailbox lifecycle. Create, list, update, and delete mailboxes and aliases, with quotas and password management.
Safe by design
Section titled “Safe by design”- Driven by API, never the engine’s own admin UI. Every admin action re-enters the ShipSquares API — the same posture as Database Studio and the MCP server.
- Sealed credentials, RBAC, and audit on every mail operation; each org gets its own isolated instance.
- Licensing: ShipSquares (Apache-2.0) runs the unmodified Stalwart image as a separate service and talks to it over the network — an arm’s-length integration, so the platform’s license is unaffected.