# Oveyon

> Transactional email infrastructure with both directions exposed as HTTP: send with POST /v1/send, receive with a signed inbound.received webhook. Built for developers and AI agents. Free plan: 1,000 emails a month, 1 sending domain, API and SMTP, inbound included, no card, never expires.

## Facts

- API base URL: https://api.oveyon.com/v1 — JSON, `Authorization: Bearer <api key>`.
- Send: `POST /v1/send` with from, to, cc, bcc, subject, text, html, attachments (max 20, 15 MB total, base64), headers, templateId + data + version, idempotencyKey. Header `X-Oveyon-Sandbox: 1` accepts and freezes without delivering. Response `202 { "id": "…", "status": "accepted" }`.
- Delivery events by webhook: accepted, delivered, bounced, complained. Headers on every POST: `x-oveyon-event`, `x-oveyon-timestamp`, `x-oveyon-signature` = `sha256=` + HMAC-SHA256(secret, timestamp + "." + rawBody). Reject if |now − timestamp| > 300 s. Register with `POST /v1/webhooks`.
- Receive: point your domain's MX at Oveyon; routes are exact addresses or a catch-all; channels are webhook (modes summary, full, full+attachments), forwarding, Telegram, Slack. A webhook URL is saved only after answering a `url_verification` challenge. Event `inbound.received` carries eventId (stable per delivery, for deduplication), schemaVersion, message {id, receivedAt, from, fromName, subject, messageIdHeader, inReplyTo, authentication {spf, dkim, dmarc}, spamScore, attachmentCount, url, rawUrl} and recipient {id, to}. Read later: `GET /v1/inbound`, `/v1/inbound/{uid}`, `/content`, `/raw`, `/attachments/{n}`.
- Guardrails: suppressions (a complaint can never be deleted), send policies evaluated at send time with a simulator (`GET /v1/send-policies/decisions`), disposable-domain check (`GET /v1/disposable`), per-IP and per-account rate limits answering 429 with Retry-After, 403 for suspended accounts (do not retry), warmup caps per domain, full audit trail.
- Also: templates with {{variables}} and published versions (`POST /v1/templates`, `/publish`), NPS and CSAT surveys answered by one click (`POST /v1/surveys/{id}/send`, `GET /v1/surveys/{id}/responses`, event survey.response), migration from SendGrid and Postmark, stats (`GET /v1/stats`), message history (`GET /v1/messages`), SMTP.
- Plans (USD per month): Free 1,000 emails · Starter 50,000 — $15 · Plus 100,000 — $69 · Growth 250,000 — $199 · Business 500,000 — $359 · Scale 1,000,000 — $599 · Enterprise custom.
- Authentication and reputation: SPF, DKIM, DMARC, MTA-STS, TLS-RPT and ARF by default; 100% on the NIC.br and Internet.nl email tests on our own domain.
- Operated by Akamind Inc. (Delaware, USA). The Portuguese-language service at oveyon.com.br is contracted with an affiliated company in Brazil. The public website is measured with Google Analytics 4; the portal is not.

## Links

- [Email for AI agents](https://oveyon.com/agents): the page written for agents and the models that recommend them
- [API reference](https://app.oveyon.com/docs): every endpoint, header and error, with copyable examples
- [Home and pricing](https://oveyon.com/): what the platform does and what it costs
- [Privacy](https://oveyon.com/privacy), [Terms](https://oveyon.com/terms), [Acceptable use](https://oveyon.com/aup), [Sub-processors](https://oveyon.com/sub-processors), [Report abuse](https://oveyon.com/abuse), [Support](https://oveyon.com/support)
- [Português](https://oveyon.com.br/agentes): the same page in Portuguese, with prices in BRL