Sluice Docs

Outbound providers

Sluice receives your email (via REST API or SMTP), runs it through your guardrails, and then forwards approved emails through your configured outbound provider. You bring your own email infrastructure — Sluice never owns your sending domain or affects your IP reputation.

Configure your outbound provider in Settings > Outbound.

Supported providers

ProviderTypeNotes
ResendAPIRecommended for AI-native stacks
SendGridAPIPopular for established SaaS products
PostmarkAPIStrong deliverability, transactional focus
GmailSMTP/OAuthGood for low-volume or personal accounts
Outlook / Microsoft 365Graph APIEnterprise Microsoft environments
Custom SMTPSMTPAny SMTP relay, maximum flexibility

API providers

Resend

  1. In your Resend dashboard, go to API Keys and create a key (or use an existing one)
  2. In Sluice, go to Settings > Outbound and select Resend
  3. Paste your Resend API key
  4. Click Test Connection

Verified sender required. The from address must be verified in your Resend account. Sluice always sends from the address configured in your outbound settings, regardless of what the agent specifies in the API call.

SendGrid

  1. In your SendGrid dashboard, go to Settings > API Keys and create a key with "Mail Send" permissions
  2. In Sluice, go to Settings > Outbound and select SendGrid
  3. Paste your SendGrid API key
  4. Click Test Connection

Verified sender required. You must have a verified sender identity in SendGrid that matches the from address configured in Sluice.

Postmark

  1. In your Postmark dashboard, find your Server API Token under the server's API Tokens tab
  2. In Sluice, go to Settings > Outbound and select Postmark
  3. Paste your Postmark Server API Token
  4. Click Test Connection

Verified sender required. Your sender signature must be verified in Postmark.

SMTP providers

Gmail

SettingValue
Hostsmtp.gmail.com (auto-filled)
Port587 (auto-filled)
UsernameYour Gmail address
PasswordA Gmail app password (not your regular password)

You need to enable 2-factor authentication on your Google account before you can create an app password.

Microsoft Outlook / Microsoft 365

Sluice supports two connection methods for Microsoft email:

OAuth2 (recommended)

  1. Click Connect with Microsoft in the outbound settings
  2. Sign in with your Microsoft account and grant Sluice permission to send email on your behalf
  3. Choose your transport: Microsoft Graph API (recommended) or Legacy SMTP
  4. If sending from a shared mailbox, enter the User Principal Name

Token refresh is handled automatically — you won't need to re-authenticate.

SMTP with password

SettingValue
Hostsmtp.office365.com (auto-filled)
Port587 (auto-filled)
UsernameYour Microsoft email address
PasswordYour Microsoft password or app password

Custom SMTP

For any other SMTP server (AWS SES, Mailgun, or your own relay):

SettingValue
HostYour SMTP server hostname
PortYour SMTP server port (usually 587 or 465)
UsernameYour SMTP username
PasswordYour SMTP password

Common custom SMTP configurations:

ProviderHostPortUsernamePassword
AWS SESemail-smtp.{region}.amazonaws.com587SES SMTP username (from IAM)SES SMTP password (from IAM)
Postmark (SMTP)smtp.postmarkapp.com587Server API tokenServer API token
Mailgunsmtp.mailgun.org587Mailgun SMTP usernameMailgun SMTP password
SendGrid (SMTP)smtp.sendgrid.net587apikeyYour SendGrid API key

Testing your connection

After entering your credentials, click Test Connection to verify everything works. Sluice will attempt to authenticate with your provider and report any errors.

Common issues:

  • Gmail: Make sure you're using an app password, not your regular Google password
  • Microsoft: If using SMTP, check that SMTP AUTH is enabled for your account in the Microsoft 365 admin center
  • AWS SES: Make sure your SES SMTP credentials are different from your regular IAM credentials — and that your SES account is out of the sandbox for sending to unverified addresses
  • Firewall: Ensure outbound connections on port 587 are allowed

Security

  • Outbound credentials (API keys, SMTP passwords, OAuth2 tokens) are encrypted at rest
  • Credentials are decrypted only at send time when forwarding an approved email
  • You can update or rotate credentials at any time from the dashboard

On this page