SMTP Credentials

For integrations that speak SMTP rather than the HTTP API — e.g. WordPress, SendGrid-style mail-merge tooling, or anything that expects an SMTP relay.

SMTP credentials are distinct from API keys. They are single-use in the sense that the password is shown once at creation and cannot be retrieved later.

POST /v1/smtp-credentials

Generate a fresh SMTP username/password pair for the current tenant.

Response — 201 Created

{
  "username": "finn_smtp_…",
  "password": "…",
  "host": "localhost",
  "port": "587",
  "note": "password shown once — save it now"
}

In production the host field reflects the deployed SMTP endpoint. STARTTLS is required (the service refuses unauthenticated plaintext in production).

Use these credentials from any SMTP client. All the usual pipelines apply (moderation, rate limiting, domain/sender verification, suppression) — SMTP is just a different transport to the same backend.