Every layer of production email.
CeyMail bundles the entire mail stack: SMTP, IMAP, DKIM, spam filtering, observability, and a dashboard: into a single install.
Sending & receiving
SMTP + submission
Postfix on ports 25 and 587, with STARTTLS and SASL auth.
Full IMAP
Dovecot mailboxes on port 993 for real inboxes: not just send-only.
Inbound routing
Deliver inbound to mailboxes or forward to your app via SMTP hooks.
Mailbox quotas
Enforce per-mailbox storage limits from the dashboard.
Deliverability
DKIM automation
2048-bit key generation, rotation, and DNS record verification per domain.
SPF / DMARC / MTA-STS
One-click DNS record generation with per-provider setup guides.
Blacklist monitoring
Continuous checks against major RBLs with alerts.
SMTP relay routing
Route outbound through Amazon SES, SendGrid, Mailgun or Postmark during IP warm-up.
Intelligence
AI spam screening
99.2% detection. Gemini in the cloud or DistilBERT locally: you choose.
AI log analysis
Continuous Gemini review of Postfix, Dovecot, OpenDKIM and Fail2ban logs.
Prometheus metrics
Native exposition endpoint for CPU, memory, queue, and service health.
Self-heal recovery
Automated service restart with email alerts only when recovery fails.
Operations
REST API
Full CRUD for domains, users, aliases, DKIM keys. Scoped API keys.
RBAC + audit log
Role-based access control, delegated admins, and searchable audit trail.
IP restrictions + 2FA
Lock the dashboard to specific CIDRs and enforce TOTP for admins.
Scheduled backups
Daily or weekly backups of config, DKIM keys and mailboxes.
Records generated. Records verified.
CeyMail publishes SPF, DKIM, DMARC and MTA-STS records per domain, then re-checks them on a schedule. When a record drifts or a key rotates, the dashboard tells you before recipients do.
| Host | Type | Value | |
|---|---|---|---|
| acme.com | TXT | v=spf1 include:_spf.ceymail... | 200 OK |
| default._domainkey | TXT | v=DKIM1; k=rsa; p=MIIBIj... | 200 OK |
| _dmarc | TXT | v=DMARC1; p=quarantine; rua=... | 200 OK |
| _mta-sts | TXT | v=STSv1; id=20260127T093012 | 200 OK |
For any operation.
Every dashboard action has a matching endpoint. Scoped tokens, JSON bodies, HMAC-signed webhooks. If you've integrated Resend or Mailgun, you already know how to talk to CeyMail.
1curl https://mc.acme.com/api/v1/users \2 -H "Authorization: Bearer ceymail_..." \3 -H "Content-Type: application/json" \4 -d '{5 "email": "alice@acme.com",6 "password": "Str0ng$ecure!",7 "quota_mb": 20488 }'Complete visibility of every message.
Logs, live events, and Prometheus-native metrics: no external log aggregator required.
Detailed Postfix, Dovecot and DKIM logs with search, filters and follow mode: no SSH required.
Live stream of sent, delivered, deferred, bounced and complaint events with per-message trace.
Native /metrics endpoint for queue depth, TLS handshake counts, DKIM verify rate and service health.