Skip to content

Features Overview

Mailyte packs a lot into one box. This page gives you a bird's-eye view of every feature, where it lives, and how ready it is for production use. Ports listed are the host-published ports from docker-compose.yml; in production every non-mail port is bound to loopback and public traffic goes through Traefik on 443.

In this section

  • Email Tracking

    Pixel opens and click tracking injected by a Postfix content filter — know what happens after you hit send.

    Email tracking

  • Anti-Spam Protection

    Rspamd scoring, Bayesian + neural filtering, greylisting, phishing feeds, postscreen DNSBLs.

    Anti-spam

  • SMTP API Keys

    Domain-scoped sending credentials with IP allowlists, expiry, rotation, and instant revocation.

    SMTP API keys

  • Webhooks

    Signed event delivery with Mailgun-style retries, delivery logs, and a replayable dead-letter queue.

    Webhooks

  • Client Auto-Setup

    Thunderbird autoconfig, Outlook autodiscover, and MTA-STS for every hosted domain.

    Autoconfig

  • AI-Powered Search

    Qdrant vector DB, semantic search over indexed email content.

    AI search

Feature Status Legend

Badge Meaning
Stable Working in production
Beta Working and usable, still being refined
Deployed, not enabled Code is deployed but a wiring/config step is still missing

Feature Matrix

Feature Status Service / Port Description
Email Tracking Stable Tracking / 8086 + Postfix filter Open/click tracking injected at submission; functional since 2026-08-22
Anti-Spam Protection Stable Rspamd / 11332 milter, 11334 UI Scoring, Bayes, neural, greylisting, phishing feeds. ClamAV not deployed by default
Rate Limiting Stable Rate Limiter / 8082 Org/domain/mailbox/credential limits across six windows, enforced at Postfix DATA
Storage & Quotas Stable Storage Usage / 8092 + Dovecot Usage roll-ups and alerts; hard enforcement by Dovecot quota
Webhooks Beta Shared dispatcher + Webhooks / 8081 Delivers all events to one global URL; per-endpoint fan-out not yet implemented
SMTP API Keys Stable API + Dovecot passdb Shipped 2026-08-27; rotation, revocation, IP allowlists, per-key limits
Client Auto-Setup Stable Autoconfig / 8100 Autoconfig/autodiscover/MTA-STS, publicly routed since 2026-08-27
Analytics Stable Analytics / 8087 + API Volume/engagement/deliverability from mail_logs + tracking events (producer live since 2026-08-22)
Archiving Stable Archiver / 8089 Every accepted message age-encrypted to S3 within seconds; retention + legal holds
Encryption Beta Encryption / 8093 PGP/S/MIME key management API + WKD; not wired into the mail flow. Mail at rest is already encrypted (Dovecot mail_crypt)
ActiveSync Deployed, not enabled Z-Push / 8084 Real Z-Push 2.7.4 (mail-only IMAP backend), but no public Traefik route yet
Backup & Restore Stable Host systemd timers Full daily + hourly incremental, age-encrypted, S3 offsite via secrets/dr.env
Deliverability Stable Delivery Optimizer / 8094 + Rspamd DKIM signing, DNS verification, ISP throttling on the live send path, reputation, IP warming
AI-Powered Search Beta RAG / 8091 + Qdrant Semantic search; indexing is API-driven, not automatic
Auto-Healing Stable Monitoring / 8085 5-minute health sweeps; container restarts via a scoped docker-proxy
Multi-Tenant Support Stable All services Organization-scoped isolation for data, config, and quotas

Capabilities at a glance

Category Capabilities
Mail protocols SMTP (25, 587, 465), IMAP (143, 993), POP3 (110, 995), Sieve/ManageSieve (4190), JMAP, CalDAV/CardDAV
Spam defense Postscreen weighted DNSBLs, Rspamd scoring, Bayes + neural, greylisting, fuzzy hashing, phishing feeds
Sending SMTP API keys, sender-login enforcement (587/465), DKIM signing, per-ISP throttling, IP warming
Tracking Open pixels, click wrapping, unsubscribes, bounce + complaint recording
Analytics Delivery/engagement/deliverability metrics from real mail logs and tracking events
Storage Per-mailbox/domain/org usage, Dovecot quota enforcement, alerts
Durability Continuous encrypted mail archive (S3 + spool), full/incremental backups, legal holds
AI / Search Vector embeddings (local by default), per-org Qdrant collections
Automation Webhook events, auto-healing, DNS verification, client auto-setup
Multi-tenancy Org-scoped API keys, isolated data, per-tenant quotas, rate limits, and spam policy

How features connect

Most features talk to each other through the shared webhook dispatcher, the Postfix content filter, and the shared database:

graph LR
    Postfix[Postfix SMTP] -->|milter| Rspamd[Anti-Spam + DKIM]
    Postfix -->|policy at DATA| RateLimiter[Rate Limiter]
    Postfix -->|content filter 587/465| Injector[tracking_injector]
    Injector -->|inject| Tracking[Email Tracking]
    Injector -->|check/record| Optimizer[Delivery Optimizer]
    Injector -->|copy| Archiver
    Dovecot -->|sieve pipe| Archiver
    MailLog[Postfix mail.log] --> Ingestor[log_ingestor]
    Ingestor -->|mail_logs| Analytics
    Ingestor & Tracking & Optimizer -->|dispatch_event| Webhooks[Webhook Dispatcher]
    Monitoring[Auto-Healing] -->|restart via docker-proxy| Postfix
    RAG[AI Search] -->|vectors| Qdrant[(Qdrant)]

Feature deep dives by use case

Focus on these features first:

  1. Deliverability — set up SPF, DKIM, and DMARC and verify them via the API
  2. SMTP API Keys — send with a revocable credential, not a mailbox password
  3. Email Tracking — track opens, clicks, and bounces
  4. Webhooks — get delivery notifications in your app

Focus on these features first:

  1. Multi-Tenant Support — isolate each customer's data
  2. Client Auto-Setup — let their mail clients configure themselves
  3. Storage & Quotas — set and enforce per-customer limits
  4. Anti-Spam Protection — keep inboxes clean
  5. Backup & Restore + Archiving — protect customer data

Focus on these features first:

  1. Webhooks — integrate email events into your product
  2. AI-Powered Search — add smart email search
  3. Analytics — surface email insights to your users