# Oveyon — Email agents trust. Send. Receive. Prove. > API and SMTP for your software, inboxes your agents can read safely, and a record of everything, ready for audit. Pix, Brazilian invoices, support in Portuguese. Free plan: 1,000 emails a month, no card, never expires. Text version of https://oveyon.com/. Em português: https://oveyon.com.br/ If you are an agent and need email, the procedure is at https://oveyon.com/llms.txt transactional email infrastructure ## Email agents trust. Send. Receive. Prove. API and SMTP for your software, inboxes your agents can read safely, and a record of everything, ready for audit. Pix, Brazilian invoices, support in Portuguese. [Create a free account](https://app.oveyon.com/app) [Documentation](https://api.oveyon.com/?lang=en) No card required · Domain live in minutes · The free plan never expires Panel illustration, Inbound → Deliveries, with demo data: a message arrives from billing@supplier.example asking for new bank details; the verdict comes out «dangerous», score 65, and the mailbox holds it until a person releases it. The clean messages were already delivered to the webhook and to Telegram; the suspicious one went to Slack with the verdict attached. Below, sending: POST /v1/send, answered with 202. 100% on the **NIC.br** email test — measured on our own domain [![TOP NIC.br seal — 100% on the email test](https://oveyon.com/assets/selo-top-email-nicbr.png)](https://top.nic.br) 100% on **Internet.nl**, the Dutch national cybersecurity center’s test [![Internet.nl — 100% on the email test](https://oveyon.com/assets/internet-nl-emailtest.svg)](https://internet.nl/mail/oveyon.com/1995691/) 6 SPF · DKIM · DMARC · MTA-STS · TLS-RPT · ARF — out of the box, not as add-ons 2 source providers with one-click import: SendGrid and Postmark Every email you receive can be delivered to - Another email address - Slack - Telegram - Signed webhook - Discord _coming soon_ How it works ### Infrastructure that tells the truth. You do not need one more pretty dashboard. You need to know, right now, what happened to that message. 1 Send #### One request. One outcome per recipient. API or SMTP, same domain, same quota. Five recipients are five outcomes, never one flattened field. Illustration: the POST /v1/send request with three recipients, answered with 202 Accepted, and the panel showing one outcome for each — delivered over TLS 1.3, deferred with a retry scheduled, bounced with 550 5.1.1 and suppressed. 2 Receive #### Every message arrives with a verdict. Before your agent reads it, the verdict says whether it carries instructions written for the machine. A dangerous one waits for a person to release it. [See inbound](https://oveyon.com/inbound) Diagram: the message arrives through your domain’s MX, with SPF, DKIM and DMARC checked; gets the verdict (clean, suspicious or dangerous); enters the agent@ mailbox; and is delivered to the channels — signed webhook, Telegram, Slack or another email. A dangerous one, in a mailbox that holds, branches off: it is kept without firing the channels until a person releases it. 3 Prove #### Proof of every send, and of who changed what. Each message’s timeline, with TLS and authentication, and an audit trail that does not expire. Panel illustration, with demo data: the timeline of a delivered message — accepted by the API at 14:02:11, signed with DKIM on the customer’s domain, delivered to mx.customer.example over TLS 1.3 with 250 OK — and, in front, the account’s trail: who turned on holding on a mailbox, who created a key through the API, and the support read, recorded and without the body. Platform ### What comes with the account. What production email asks for, with no separate module and no spreadsheet on the side. Panel illustration, Domains, with demo data: the domain yourdomain.com with sending authenticated and inbound receiving; the six records — SPF, the three DKIM keys ovy1 to ovy3, the return path and DMARC — verified, checked just now. #### Domain live in minutes The wizard says what to publish and checks the DNS live, on every visit. Panel illustration, Credentials, with demo data: three credentials, each with a tile whose color tells its use — green for the agent-prod key, created by ana@yourdomain.com, used 2 minutes ago with 1,284 uses in the last 30 days; amber for the SMTP credential erp-legacy, unused for 41 days, with the hint to deactivate it if no longer needed; neutral for the reports key, created through the API. #### Every key with an owner and a use Who created it, when it was last used, and the color that gives away an idle key. Panel illustration, API logs, with demo data: three API calls — a send accepted with 202, a send refused with 422 domain_not_verified and a read with 200 — and, open over the refused call, the «Help me fix» drawer, which explains the error, says how to fix it and offers «Copy for AI». #### API errors with the fix beside them Every call with its request and response, and «Help me fix» on the ones that failed. #### Send policies Block a destination, allow a list, force transactional — at send time, with a simulator. #### Suppressions with compliance Bounced, complained, unsubscribed: each with its source. A complaint can never be deleted. #### Reputation as routine Warmup that counts the days you actually sent; a dedicated IP when it makes sense. #### Signed webhooks Accepted, delivered, bounced, complaint — HMAC-SHA256 with a timestamp, retries and idempotency. #### NPS and CSAT surveys The score is the click, inside the message. Bots and link scanners do not vote. #### DMARC and TLS-RPT reports From Business up, the aggregate XML becomes a page you read in a minute. #### Audit trail Who did it, when and what changed — our support included. #### Migration with a way back Suppressions, domains and webhooks from SendGrid or Postmark, by reading. [Provider by provider](https://oveyon.com/migrate). #### MCP server Claude, Cursor, VS Code and other clients call the API as tools, within the key’s scopes. [Connect your agent](https://oveyon.com/mcp). Solutions ### For senders whose email the recipient is waiting for. We are not a campaign platform: only messages people open because they need them go through here. #### Fintech & payments Access codes, receipts, payment notices — with a dedicated IP and the outcome of each one. #### Healthcare Appointments, exam prep, results — and the patient’s reply comes back through the same channel. #### B2B SaaS Invites, password resets, alerts, invoices — API and SMTP on one base, a webhook per event. #### Logistics Confirmations, tracking, delivery windows — predictable pricing at high volume. Pricing ### Infrastructure pricing, not marketing-platform pricing. In US dollars, per month, on sent volume. No fee per tracking event and **no free plan that expires**. 20% below the big providers’ equivalent tier from 250,000 a month — **$199 for a quarter million**. The receipt is in the table below. $0 forever: a thousand emails a month, no card — **our free plan never expires**. #### Free $0 **1,000 emails/mo, forever.** · 1 domain · API and SMTP · inbound included · 3-day logs · no card required [Start free](https://app.oveyon.com/auth/login?plan=free) #### Starter $15/mo 50,000/mo - 5 domains - Overage $1.20/1k - 15-day logs - Webhooks and templates - Send policies [Get started](https://app.oveyon.com/auth/login?plan=starter) most popular #### Plus $69/mo 100,000/mo - 10 domains - Overage $0.95/1k - 20-day logs - Provider migration - NPS and CSAT surveys [Get started](https://app.oveyon.com/auth/login?plan=plus) #### Growth $199/mo 250,000/mo - 25 domains - Overage $0.88/1k - 30-day logs - Provider migration - NPS and CSAT surveys - Priority support [Get started](https://app.oveyon.com/auth/login?plan=growth) **Want more? We have it.** **500K and 1M emails a month.** · Business $359 · Scale $599 · dedicated IP · lower overage See the plans Hide #### Business $359/mo **500,000/mo.** · unlimited domains · overage $0.76/1k · 45-day logs · 1 dedicated IP with warmup · DMARC and TLS-RPT reports [Talk to us](mailto:support@oveyon.com?subject=Business%20plan) #### Scale $599/mo **1,000,000/mo.** · unlimited domains · overage $0.60/1k · 60-day logs · dedicated IP + pool · deliverability oversight [Talk to us](mailto:support@oveyon.com?subject=Scale%20plan) #### Enterprise custom **Above 1 million a month.** · IPs as agreed · 365-day logs · custom contract · sub-operators and org accounts [Talk to us](mailto:support@oveyon.com?subject=Enterprise%20plan) **Everything each plan includes: limits, retention, Pix and invoice, support, region** | | Free | Starter | Plus | Growth | Business | Scale | Enterprise | | --- | --- | --- | --- | --- | --- | --- | --- | | Emails per month | 1,000 | 50,000 | 100,000 | 250,000 | 500,000 | 1,000,000 | custom | | Per day | 100 | 5,000 | 10,000 | 25,000 | 50,000 | 100,000 | custom | | Per minute | 60 | 600 | 1,200 | 3,000 | 6,000 | no cap | no cap | | Sending domains | 1 | 5 | 10 | 25 | unlimited | unlimited | unlimited | | Readable sending record | 3 days | 15 days | 20 days | 30 days | 45 days | 60 days | 365 days | | Received messages kept | 30 days, on every plan — and received messages do not count against the sending quota | | | | | | | | Inbound with a safety verdict, quarantine and per-mailbox policies | on every plan | | | | | | | | API and SMTP | on every plan, with credentials restricted by domain and by IP | | | | | | | | Audit trail | on every plan, never purged, visible in the panel | | | | | | | | Pix and boleto, with a Brazilian invoice | — | on paid plans contracted in Brazil (automatic NFS-e); outside Brazil, card, in US dollars | | | | | | | Support in Portuguese | on every plan, by email, Monday to Friday, 09:00–18:00 (UTC−3) — and in English too | | | | | | | | Region | processing and main storage in the United States; sending nodes in the United States and Romania — the [sub-processor list](https://oveyon.com/sub-processors) says who runs what, and where | | | | | | | Are you an agent? [See the prices in plain text](https://oveyon.com/pricing.md). the same volume, across providers Public prices, August 2026 — the same volume priced at each provider’s published tier. | You send | SendGrid | Mailgun | Postmark | Oveyon | | --- | --- | --- | --- | --- | | 1,000 | 60-day trial (no free tier) | 100/day free | 100/mo free | free, no expiry | | 10,000 | $19.95 | $15 | $15 | $15 (50k included) | | 50,000 | $19.95 | $35 | contact sales | $15 | | 100,000 | $89.95 | $90 | contact sales | $69 | | 250,000 | ~$249 (300K tier) | contact sales | contact sales | $199 | | 500,000 | ~$449 (700K tier) | contact sales | contact sales | $359 | | 1,000,000 | ~$749 (1.5M tier) | contact sales | contact sales | $599 | Entry prices as published; tiers above 100K from secondary sources (marked ~). Mailgun and Postmark from their public pricing pages; both hide higher volumes behind sales. questions from whoever integrates #### How are sends counted? Per recipient: one message to five people counts as five. The daily and monthly quotas apply the same way to the API and to SMTP, and the response to a batch says how many recipients you asked for when the balance does not cover them all. A draft a person rejected before it left gives the quota back. #### And received messages, how are they counted? They do not count against the sending quota. Each received message is delivered at acceptance through the mailbox channels — signed webhook, Telegram, Slack or forwarding — and kept for 30 days, readable through the API (`GET /v1/inbound/{uid}`) and in the panel. Then it is deleted. #### What happens when I hit the daily limit? On the API, `429 quota_exceeded` with `window` (daily or monthly), `used`, `limit`, `retryAfter` in UTC and the `Retry-After` header: back off until then, the window turns on its own. On SMTP, the RCPT is refused with `5.7.1` stating the window, the usage and when it resets — a refusal that holds for the day, so your MTA does not retry blindly. Nothing is queued above the cap. #### Can I have one key per domain? Yes. Every credential, API or SMTP, can be restricted to domains of the account: a sender outside them is refused on the spot (`domain_not_allowed_for_credential` on the API, `550 5.7.1` on SMTP). An API key also has scopes (`send`, `read:inbound`, `approve:holds`…), restriction by IP or CIDR and rotation with a 72-hour window. #### SMTP and API on the same account? Yes: same domain, same quota, same suppressions, same record. SMTP at `smtp.oveyon.com`, port 587 with STARTTLS or 465 with TLS — the credential is generated by the server and shown once. API at `https://api.oveyon.com/v1`, with `Authorization: Bearer`. #### What is kept, and for how long? The sending record — who, when, the outcome per recipient — stays readable for your plan’s window, from 3 to 365 days; the metadata is purged after 400 days. The content of what you send is archived only if you turn the archive on, and for 30 days. Received messages are kept for 30 days. The audit trail does not expire. #### How do I pay, and is there an invoice? Contracting in Brazil, Pix or boleto, with an NFS-e issued for each payment. Outside Brazil, card, in US dollars. The free plan asks for no card and never expires. ### Send, today, the first email you can prove arrived. Start with the domain you already have — or bring over what lives there: migration is pure reading and **rolls back in one click**. [Create a free account](https://app.oveyon.com/app) [Read the API docs](https://api.oveyon.com/?lang=en) A thousand emails a month, no card, no expiry date. Panel illustration, with demo data: the first send of a new account, «Hello from yourdomain.com», accepted by the API at 09:00:01 and delivered to mx.example.com at 09:00:02, over TLS 1.3 with 250 OK. --- First email today. No card. — https://app.oveyon.com/app