Mailboxes (Gmail and Microsoft 365)

SignalDock sends outreach from your own mailboxes, never from a shared pool. Connect them under Settings → Mailboxes. Owners and admins only.

ConnectingCopy Anchor Link

1. Choose Connect Google Workspace or Connect Microsoft 365.
2. Grant consent. SignalDock asks for:
   • Google: gmail.send, gmail.readonly (reply detection), calendar.events and calendar.freebusy (meeting booking).
   • Microsoft: Mail.Send, Mail.ReadWrite, Calendars.ReadWrite, and offline_access.
3. You return to the settings page. The refresh token is stored in Supabase Vault and never returned by the API. Disconnecting deletes the token.

Reconnecting the same address keeps its warm-up progress.

Warm-up, caps, and send windowsCopy Anchor Link

Sequences wait for the next window instead of sending at night or at the weekend, and move on to another mailbox when one reaches its cap.

DNS healthCopy Anchor Link

On connect and on Re-check DNS, SignalDock looks up the sending domain:

• SPF: exactly one record, ending in -all or ~all.
• DKIM: a key for the provider's default selector (google, or selector1 / selector2 for Microsoft).
• DMARC: p=quarantine or p=reject passes; p=none is a warning.
• MX: required so replies arrive.

A mailbox is only used for sending once SPF, DKIM, and MX pass.

Reply detectionCopy Anchor Link

Each mailbox is checked for replies every 15 minutes. With push notifications configured, replies are picked up within seconds:

• Microsoft 365: SignalDock creates a Graph subscription on the inbox pointing at https://<api host>/api/webhooks/microsoft, and renews it before it expires. Each notification carries a signed clientState that is checked before syncing.
• Gmail: create a Pub/Sub topic, grant gmail-api-push@system.gserviceaccount.com the Publisher role on it, and add a push subscription to https://<api host>/api/webhooks/gmail?token=<push token>. The push token is the hex HMAC-SHA256 of gmail-push keyed with MAILBOX_WEBHOOK_SECRET.

Only answers to SignalDock outreach are stored; see replies.

Microsoft limitationsCopy Anchor Link

Microsoft Graph only accepts custom headers that start with x-, so List-Unsubscribe headers are not set for Microsoft 365 mailboxes. The unsubscribe link in the footer is always included.

Self-hostingCopy Anchor Link

Set these on the API service:

Register the redirect URI with both providers, and make sure the SaaS origin is listed in API_ALLOWED_ORIGINS: the callback only returns to allowed origins.