Overview
Expose a minimal, signed API to compose/send from your workspace accounts.
Problem
Other apps need to send through your domain without exposing credentials or bypassing policies.
Solution
Grant scoped access and require timestamped HMAC signatures with IP allowlists; all calls are logged with latency and status.
How it works
Use actions accounts.suggest and compose.send. Rotate secrets; enforce replay windows, rate limits, and event hooks for sent/bounced.
Who is this for
Platform Engineer
Developer
Expected outcomes
- Central policy enforcement
- No shared passwords across apps
Key metrics
Unauthorized attempts blocked
Baseline
95 %
Target
99.9 %
Gallery
Downloads & templates
Security impact
- Message payloads; connection metadata/logs · PII: business email content
Compliance
- GDPR
- SOC2
Availability & next steps
Enterprise