Dashboard
Live platform state from the control-plane API.
Mail authentication across domains
Domains →Recent tenants
All tenants →All figures are live from /admin/api. Operations without a control-plane endpoint (queue, usage, deliverability) are marked as such on their pages.
Tenants
Organizations homed in this cell.
| Tenant | Plan | Home cell | Created | Status |
|---|
Deprovision is refused while a tenant still owns a domain or a mailbox, and there is deliberately no cascade: a tenant is every mailbox a customer has, and one keystroke between an operator and that is not a feature. Accounts go first, one at a time, so each mailbox is purged in the ordering that settles blob refcounts and quota together.
Domains
Onboarding, DNS, and mail-authentication status.
| Domain | Tenant | Status | Auth records | DKIM |
|---|
Auth records are verified live against public DNS. Use Verify to re-check a domain after publishing records.
Accounts
Mailboxes within a tenant.
| Address | Display name | Quota | Status |
|---|
Sharing opens the shared-mailbox panel for that account: who it has given access to, and what has been shared with it. Rights are the RFC 4314 letters IMAP uses, so an ACL set here and read by a mail client are the same thing. Sharing never crosses a tenant.
Distribution groups
One address that reaches many mailboxes.
| Address | Members | Owner | Posting |
|---|
A group is not a mailbox: it holds no mail of its own. Mail arriving with a null sender — a bounce, or another automatic message — goes to the owner rather than to the members, and the owner is the envelope sender on copies sent to members outside this platform. Copies carry a List-Id header so recipients' clients and auto-responders can tell it is a list.
Delegated administration
Scoped RBAC grants — every grant is bound to a subject and audit-logged.
| Subject | Scope | Created |
|---|
Health & Security
What is switched on, what this node is counting, and what is firing.
Deep observability lives on the private network: Grafana 10.36.140.15:3000 (dashboards, traces, logs), Prometheus :9090, Alertmanager :9093 — reachable from the operator network only. The public status page stays the out-of-band signal. Alert email goes to the operator address via alerts@zephyrab.com; a blocklist listing, a failed self-check unit, or a firing SLO rule all land there.
Mail Queue
Distributed outbound queue — sharded by next-hop, leased by any worker.
Trace a message
queue id, or the accept id the SMTP session was toldAn RFC 5322 Message-ID cannot be resolved and is refused by name: this server keeps no index from one to a delivery, and building it would mean a blind write per message into a global index of identifiers strangers choose. Trace by the internal id instead.
Jobs
Asynchronous work: bulk provisioning, mailbox restores, DKIM rotation, tenant deprovisioning.
Plans
Class-of-service bundles. Versions are immutable; a change publishes a new one.
| Plan | Version | Status | Mailbox quota | Included |
|---|
Usage
What a tenant metered in a period, and how it scores against its plan.
Deliverability
Reputation and feedback loops.
Settings
What this server does at the protocol boundary, and the live mail-authentication posture per domain.
Protocol switches
Mail-authentication posture
| Domain | MX | SPF | DKIM | DMARC | MTA-STS | At-rest |
|---|
Resolved live from public DNS at each request. At-rest encryption policy is the domain layer of the platform → domain → account resolution.