Run Mail Hosting for your customers

Every Mail Hosting or SMTP Relay service a customer orders from your organization runs as a mail tenant: its own domains, mailboxes, credentials and sending reputation. The Mail Services page lists your tenants and shows which ones need attention. To work inside a tenant, your team opens it in the staff console, or uses the API on this page, which offers the same operations the customer has on their own service.

• Any member of the organization can open the Mail Services page and call the two list routes.
• Opening or changing a single tenant takes the owner, admin or support_tier3 role. Other roles get 403 Staff access required. Roles and permissions lists who holds which role.

1. Go to Organizations, open your organization, then Hosting, then Mail Services.

2. Read the four figures at the top:

   • Tenants counts every tenant that has not been terminated, with how many are Mail Hosting and how many SMTP Relay.
   • Sending frozen counts the tenants whose outgoing mail we have paused.
   • Under review counts the tenants flagged for a look at their sending.
   • Domains pending counts the domains still waiting for their MX, SPF or DKIM records to verify.

   Select Sending frozen or Under review to list only those tenants, and select it again to list them all.

3. Read the Mail tenants table. Each row is one tenant:

   • Tenant shows its name, its product and its domains.
   • Customer shows the customer who owns it.
   • Status shows where the service stands, with a Sending frozen or Under review badge when its reputation needs attention.
   • Reputation shows its sending tier with its bounce and complaint rates.
   • Usage shows its mailboxes against the plan's limit, its aliases and its storage, or for SMTP Relay its credentials and the messages a month it may send.
   • Since shows the date the tenant was created.

4. To find a tenant, type part of its name, one of its domains, its customer's name, email or company, or the tenant's or the customer's number in the search box. Beside it, choose a product in place of Both products, or a state in place of Any state: a status, Sending frozen or Under review. Each choice says how many tenants it would show. The table shows 50 tenants to a page, newest first, and the search and the choices cover every tenant, not only the page on screen. The search, the choices, the page and the column you sort by stay in the page's address, so a reload or a shared link keeps them. The column headers sort the table while every tenant fits on one page. Select Refresh to load the latest figures.

5. Select a row to open the service the customer bought. The menu at the end of the row also has Open the customer and Open in the staff console.

A tenant that we have flagged or frozen shows the reason under its row.

We check each tenant's bounce and complaint rates over a recent window of its sending:

• A tenant whose rates cross the review threshold is flagged, and the table shows Under review. It keeps sending.
• A tenant whose rates cross the freeze threshold stops sending, and the table shows Sending frozen. The note under the row gives the rates that caused it.
• Only Coritan can lift a freeze. Clean up the list the tenant sends to, add the addresses that bounced to its suppression list, then contact support.

The tier decides which pool of sending addresses carries the tenant's mail. New tenants start on probation; the other tiers are established and dedicated. A review once a day promotes a tenant from probation after 14 clean days or 5,000 clean messages. A tenant under review cannot leave probation, and an established one goes back to it at the next daily review. Your customers do not see tiers or pools. Sending reputation and deliverability explains what they see, and when their sending pauses.

You know which tenants are frozen, under review or waiting on DNS records, and which customer owns each one.

403 Staff access required

Your role can read the tenant list but cannot open a tenant. Ask an owner or an admin to do the work, or to change your role.

404 Mail service not found in this organization

The tenant ID does not belong to this organization. Take the id from the tenant list.

A domain stays in Domains pending

Read the records the domain needs with GET .../domains/{domain_id}/records, publish them at the domain's DNS host, then call POST .../domains/{domain_id}/verify. Mail DNS records explains each record.

• How Mail Hosting works
• How SMTP Relay works
• Mail DNS records
• Customer services
• Let customers use Mail Hosting and SMTP Relay

Every call takes a member's access token as Authorization: Bearer $CORITAN_TOKEN.

curl "https://api.coritan.com/api/v1/orgs/acme/mail/tenants?kind=relay&q=example.com" \
  -H "Authorization: Bearer $CORITAN_TOKEN"

The answer is {"items": [...], "total": n, "limit": 100, "offset": 0, "counts": {...}, "kinds": {...}}. total is how many tenants match, however many pages that is. counts has all, frozen, review and one number for each status, for the other filters, and kinds has hosting and relay, so each choice can say how many tenants it holds. Terminated tenants are not listed. Each item carries the tenant's id, kind, status, tier, bounce_rate_pct, complaint_rate_pct, sending_frozen, review_flag, reputation_note and plan limits, plus domains, the owning customer (id, email, name), the linked org_service (id, status, hostname) and counts of mailboxes, aliases, groups, relay credentials and domains.

GET /api/v1/orgs/acme/mail/overview answers the counts behind the figures, over the tenants the list shows: tenants, sending_frozen, under_review, domains_pending and kinds (hosting and relay).

Every route below starts with /api/v1/orgs/acme/mail/tenants/{tenant_id} and needs the owner, admin or support_tier3 role. GET on that path alone answers the tenant's summary.

POST /limits/increase-request exists on this path too, but it answers 400 for staff. A customer asks for a higher hourly limit from their own portal, and only Coritan can raise it; see Pass on a request for a higher limit.

A password reset with no password in the body sets a random password and returns it in the answer. For a mailbox it also turns off two-factor authentication and signs out every webmail session. For example, to add a mailbox:

curl -X POST "https://api.coritan.com/api/v1/orgs/acme/mail/tenants/42/mailboxes" \
  -H "Authorization: Bearer $CORITAN_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"domain_id": 7, "local_part": "alex", "display_name": "Alex"}'

Each area behaves as it does for the customer, so the mail pages explain the details: mailboxes, aliases, moving mail in, SMTP credentials, suppressions and webhooks. The full request and response shapes are in the API reference.