{
  "schema_version": "v1",
  "name_for_human": "rail",
  "name_for_model": "rail_email",
  "description_for_human": "Transactional email server with mTLS authentication, DKIM signing, and webhook-based inbound delivery.",
  "description_for_model": "Send and receive transactional email. Outbound: POST JSON to /api/v1/send with mTLS client certificate (from address must match cert email SAN). Inbound: rail POSTs JSON webhook payloads to client webhook URLs (type inbound/reply/bounce/complaint). Reply tracking via VERP; hard bounces of sent mail POST a type-bounce webhook and auto-suppress the recipient; verified spam complaints (ARF feedback reports MAC-verified against the message's VERP tags) POST a type-complaint webhook and auto-suppress the recipient. All outbound mail is DKIM-signed. Public form submissions (opt-in): POST HTML form fields to /f/{token} to deliver them as email to a pre-configured form target, no certificate required; spam-likely submissions may answer 403 challenge_required with a Turnstile site_key and signed nonce - render the widget, then re-POST the same fields plus _challenge (nonce) and cf-turnstile-response (widget token); clients manage their own form targets via POST/GET /api/v1/forms and GET/PATCH/DELETE /api/v1/forms/{token} (mTLS; PATCH is a partial update - absent fields keep their value, from/token/client_id are immutable and ignored if sent); every accepted submission is persisted and readable via GET /api/v1/forms/{token}/submissions and GET /api/v1/forms/{token}/submissions/{id} (mTLS, owner-scoped). Auth: mTLS client certificates, no API keys.",
  "api": {
    "type": "openapi",
    "url": "https://smtp.ataca.io/openapi.yaml"
  },
  "auth": {
    "type": "none"
  },
  "logo_url": "https://smtp.ataca.io/logo.png"
}