This article walks through adding a new relay client. The exact fields vary by provider, but the pattern is the same: pick a provider, supply credentials, validate, set defaults.
Step-by-Step
- Go to Architect Panel → Email Relay Clients and click Add Relay.
- Select the provider type from the dropdown.
- Enter the credentials:
- SMTP: host, port, encryption (TLS / STARTTLS), username, password.
- SendGrid / Postmark / SES API: API key (and AWS region for SES).
- List the sender domains this relay is authorised for (e.g.
yourcompany.com). Outgoing mail from other domains will route via a different relay if available. - Set the daily and per-minute send limits if you want a safety cap.
- Click Send Test Email — choose a recipient and observe delivery.
- If everything looks good, tick Make default for the relevant scope (global, tenant or per-template).
DNS Records to Set
For reliable deliverability, regardless of provider, publish:
- SPF: Authorises the relay's IPs to send for your domain.
- DKIM: Cryptographic signing — the relay gives you a public key to publish.
- DMARC: Tells receiving servers what to do with unauthorised mail. Start with
p=noneand graduate top=quarantineonce you've verified all traffic.
Examples
- Office 365 SMTP relay: host smtp.office365.com, port 587, STARTTLS, mailbox credentials. Limited to 30 messages/minute.
- SendGrid API: API key, supports tagged events for marketing dashboards.
- AWS SES sandbox: Only sends to verified recipients until production access is granted by AWS Support.
Warning: Test the relay before setting it as default for production. A misconfigured relay can dump every outbound notification into spam folders for days while the IP reputation recovers.