Receiving email
Received email is available in Email > Emails > Receiving, through the inbound-messages API, and in email.received webhooks. Choose between two setup methods based on the address you want to receive mail at.
- A forwarding address is a mailbox we generate for you, like mfzxq2lom5uxi3lb@inbound.eu.bird.com. No domain, no DNS: you point an existing inbox's forwarding rule at it, and we receive every message it forwards.
- Receiving on your own domain publishes MX records for a subdomain you control (say inbound.acme.com), after which mail sent to any address at that subdomain arrives as an inbound message.
Start with a forwarding address if you want to try receiving, or to forward an existing support inbox's mail. Set up domain receiving when you want mail addressed directly to your own domain.
Forwarding addresses
In Email > Domains > Forwarding, select Add forwarding address and enter a name such as Support inbox. We generate a fixed, random address. You can rename its label later. Deleting one forwarding address stops mail to that address without affecting the others.
Programmatically, POST /v1/email/inbound-addresses does the same thing (CLI: bird email inbound-addresses create). The response has the generated address, its id, and your label.
Then set that address as the forwarding target wherever the mail lives today: a Gmail or Google Workspace forwarding rule, an Outlook rule, or your helpdesk's forwarding setting. We receive whatever is forwarded, parse it, and store it as an inbound message.
Receiving on your own domain
Domain receiving is a capability of a sending domain, so the domain must be registered and DKIM-verified first. Use a dedicated subdomain (inbound.acme.com), never your apex: receiving is enabled on the domain's own registration, and apex MX records would capture your corporate mail.
Open Email > Domains, then select your domain. In Receiving (Optional), turn on receiving and publish the listed MX records. You cannot enable receiving until DKIM is verified. A domain that already receives mail for another organization is also unavailable.
Once enabled, the receiving status moves through the same lifecycle as the sending records: pending while we check DNS for the MX records, then verified once they resolve correctly. From that point, mail sent to any local-part at the domain (support@, orders@, anything) is delivered as an inbound message. Turning the toggle off stops delivery of inbound mail. The MX records stay listed on the domain as a reference, with their status back at pending.
Inbound message size
Bird supports inbound messages up to 20 MB, attachments included, on every receiving domain in every region. Larger messages are outside the supported limit, even if the sending server receives an SMTP acceptance response. Do not rely on their delivery.
An oversized message can be refused during the SMTP transaction with 552 5.3.4 message size limit exceeded. The sending server receives this refusal and can notify its sender. Bird never truncates a message to fit a size limit.
Reading what you receive
The Receiving tab lists received messages newest first, with sender, recipient, subject, and received time. Search by exact sender address or filter by date. Select a row to open Rendered, Text, Details, and Raw views. The header shows the SPF, DKIM, and DMARC results recorded when the message arrived.
Received emails are retained for 30 days.
The same data is available over the API (CLI: bird email inbound-messages):
- GET /v1/email/inbound-messages lists messages, filterable by sender, inbound address, and received time.
- GET /v1/email/inbound-messages/{id} returns one message's parsed metadata: addressing, subject, threading references, authentication results, and attachment metadata.
- GET /v1/email/inbound-messages/{id}/body returns the HTML and plain-text bodies.
- GET /v1/email/inbound-messages/{id}/attachments lists attachments; each can be downloaded individually.
- GET /v1/email/inbound-messages/{id}/raw returns the original message exactly as received, in RFC 5322 (MIME) format.
Reacting to received mail: the email.received webhook
To process mail as it arrives (route support requests, ingest replies, trigger an agent), subscribe a webhook endpoint to the email.received event. We fire it after receiving and parsing each message. The payload includes the inbound_message_id, sender from the message’s From header, recipients, subject, and in_reply_to reference. It also includes an overall authentication verdict (pass, fail, or unknown) and the individual SPF, DKIM, and DMARC results. This information supports routing and triage without a follow-up call. When you need the body or attachments, fetch them with the inbound-messages API using the inbound_message_id from the event. The message is stored before the event is sent, so that id resolves as soon as the event reaches you: fetch /raw or /body straight from your handler, with no wait and no polling.
Using authentication results
The receiving provider checks SPF and DKIM during SMTP receipt. Bird reads the receiver's results from the authenticated relay. Sender-supplied Authentication-Results headers do not establish these results.
The authentication field is a string: pass, fail, or unknown. It follows dmarc_pass. The separate spf_pass, dkim_pass, and dmarc_pass fields are each true, false, or null; they do not expose detailed result tokens, signing domains, selectors, or nested verdict objects. Treat unknown, null, and missing values as unverified. If your routing requires DMARC verification, require dmarc_pass === true before acting.
SPF and DKIM reflect the results reported by the receiving provider. A passing DKIM signature makes dkim_pass true even when another signature fails. Missing results and verification errors remain null. The receiving provider currently supplies no DMARC result or spam score, so dmarc_pass and spam_score are null and authentication is unknown. SPF and DKIM results alone do not establish alignment with the visible sender.
DMARC checks alignment with the domain in the message's From header. The from field in email.received contains that header address, with the relay's parsed sender and then the envelope sender as fallbacks when the header cannot be read. In email_mailbox.message_received, from contains the envelope sender, which may be a different bounce address. For mailbox routing that uses the visible sender, fetch the received message's metadata using the event's message_id. A DMARC pass authenticates a domain; it does not establish that a particular person sent the message.
Next steps
- Sending domains: register and verify the domain you want to receive on.
- Webhooks: endpoints, signatures, and retries for email.received.
- Email log: the sending side of the Emails page.
Risorse correlate
Prosegui con la documentazione, le guide e gli esempi per questo argomento. Le risorse sono in inglese.