MailFlatDocs
Documentation/Using MailFlat/Reading & sending mail

Reading & sending mail

What happens when a message arrives, how to read it safely, and how to reply from your address.

Where an incoming message goes

Mail is delivered to our own mail server, with no third-party provider in the path. The OTP is extracted as the message is stored, which is why agents can read a code without parsing HTML.

OTP codes

Verification codes are detected automatically and shown as a chip on the message. Click it to copy. No need to open the mail or hunt through the body. The same value is available to code as otp_code on the API.
Encryption turns this off
With end-to-end encryption on, our servers only hold ciphertext, so there is nothing to scan: the chip disappears and otp_code comes back empty. That is the trade-off, and it is why agent inboxes are always plain text.

The four views of a message

  1. 1
    Preview
    The rendered message, exactly as a normal mail client would show it. HTML runs in a sandboxed frame, so it cannot touch your account.
  2. 2
    Plain Text
    The text part only. Fastest way to find a code or a link without any layout noise.
  3. 3
    HTML
    The raw HTML source, useful when you are debugging your own outgoing templates.
  4. 4
    Raw
    Headers plus body in RFC822 shape, for checking who really sent it.
Why is my mail in spam?score · threshold · the rule that cost you
Every incoming message is scored by SpamAssassin and the result rides along on the message as spam: the score, the threshold it was judged against, and every rule that fired with its own weight. When your own test mail scores badly, the rule names say why — DKIM_INVALID or a missing SPF_PASS point straight at your sending setup, not at the message text.
Nothing is filtered here: a high score never stops a message from reaching the inbox. And null means the message was not scanned — which is not the same as clean. The score stays readable on encrypted inboxes, because rule names carry no message content.
Block trackersAddress settings → Privacy
Marketing mail is full of 1×1 pixels that report when you opened it and from where. With Block trackers on, those images are stripped before the message is rendered, so opening a mail tells the sender nothing. Turn it off only if a message genuinely looks broken.

Sending and replying

Every inbox can send, not just receive. Mail leaves from your own address and is DKIM-signed by our mail server, so it passes SPF/DKIM/DMARC and lands in the inbox rather than in spam.
Reply from an open message, and the recipient and subject are filled in for you.
Compose a new message from the inbox header.
• Sent mail is kept alongside received mail; the Sent filter in the message viewer shows what left the inbox and whether delivery succeeded.
Quota, not rate
Outgoing mail counts against your plan's monthly email allowance, the same pool as incoming. When it runs out, sending is rejected with a clear error until the next month.