Domains
Add your own domain to send and receive as you@yourcompany.com. Custom domains are included in the free plan.
Add a domain
curl -X POST https://api.mailbay.dev/v1/domains \
-H "Authorization: Bearer $MAILBAY_API_KEY" \
-H "Content-Type: application/json" \
-d '{"name": "acme.com"}'Sukhovei Mail detects your DNS host from the domain's nameservers and answers with the records it needs. Agents can do the same with the MCP tool add_domain.
DNS records
| Type | Name | Value |
|---|---|---|
| MX | acme.com | 10 mx1.mailbay.dev, 20 mx2.mailbay.dev |
| TXT | mb1._domainkey.acme.com | v=DKIM1; k=rsa; p=MIIBIjANBgkq… |
| TXT | _dmarc.acme.com | v=DMARC1; p=none; rua=mailto:… |
| MX | bounce.acme.com | 10 feedback-smtp.us-east-1.amazonses.com |
| TXT | bounce.acme.com | v=spf1 include:amazonses.com ~all |
The root MX records receive mail. DKIM authenticates mail sent through Amazon SES, and DMARC tells receivers what to do when authentication fails. The MX and SPF records on bounce.acme.comcreate a custom MAIL FROM domain so SES can report delivery events and SPF can align with your From domain. You normally do not add Sukhovei Mail to the SPF record at acme.com; keep that record for services that actually use the root domain as their envelope sender.
Large receivers refuse mail from domains without them: Gmail with 550 5.7.26 for unauthenticated mail, and Outlook.com with 550 5.7.515 for high volume senders missing SPF, DKIM or DMARC. Reverse DNS for the sending IP, behind 550 5.7.25, belongs to the sending server rather than your domain.
One click setup
If your domain is on Vercel or Cloudflare, Sukhovei Mail writes the records for you with a token you provide, used once and never stored. Everywhere else, copy the records and the dashboard checks each one live.
Verify
curl -X POST https://api.mailbay.dev/v1/domains/{id}/verify \
-H "Authorization: Bearer $MAILBAY_API_KEY"We check each record against your authoritative nameservers. A domain is pending until every record matches, then verified. If a record later disappears, it becomes failing and the fix names the record. Pending domains are rechecked every 30 seconds for 10 minutes, then hourly for 72 hours.
Verified records are half the story; receivers judge each message. Send one to the free email deliverability test to see SPF, DKIM and DMARC results, blocklists and a spam score for real mail from your domain.
Domains that already receive mail
agents.acme.com instead and keep your current mail untouched.