AccountPassword
Password-based authentication credential.
AccountSettings
Configures default account settings for locale and encryption.
Account
Defines a user or group account for authentication and email access.
AcmeProvider
Defines an ACME provider for automatic TLS certificate management.
Action
Defines server management actions such as reloads, troubleshooting and cache operations.
AddressBook
Configures address book and contact storage settings.
AiModel
Defines an AI model endpoint for LLM-based features.
Alert
Defines an alert rule triggered by metric conditions.
AllowedIp
Defines an allowed IP address or network range.
ApiKey
API key credential for programmatic access.
AppPassword
App password credential for programmatic access.
Application
Defines a web application served by the server.
ArchivedItem
Represents an archived item that can be restored.
ArfExternalReport
Stores an ARF feedback report received from an external source.
Asn
Configures ASN and geolocation data sources for IP address lookups.
Authentication
Configures authentication settings including password policies and default roles.
BlobStore
Configures the blob storage backend for messages and files.
BlockedIp
Defines a blocked IP address or network range.
Bootstrap
Initial setup shown the first time Stalwart starts. Configures the server's identity, storage, user accounts, logging, and DNS management.
Cache
Configures in-memory cache sizes for data, DNS records, and authorization tokens.
CalendarAlarm
Configures calendar alarm email notifications.
CalendarScheduling
Configures calendar scheduling, iTIP messaging, and HTTP RSVP settings.
Calendar
Configures calendar settings including iCalendar limits and default names.
Certificate
Defines a TLS certificate and its associated private key.
ClusterNode
Represents a node in the cluster
ClusterRole
Defines a cluster node role with enabled tasks and listeners.
Coordinator
Configures the cluster coordinator for inter-node communication.
DataRetention
Configures data retention policies, expunge schedules, and archival settings.
DataStore
Configures the primary data store backend.
Directory
Defines an external directory for account authentication and lookups.
DkimReportSettings
Configures DKIM authentication failure report generation.
DkimSignature
Defines a DKIM signature used to sign outgoing email messages.
DmarcExternalReport
Stores a DMARC aggregate report received from an external source.
DmarcInternalReport
Stores an outbound DMARC aggregate report pending delivery.
DmarcReportSettings
Configures DMARC aggregate and failure report generation.
DnsResolver
Configures the DNS resolver used for domain lookups.
DnsServer
Defines a DNS server for automatic record management.
Domain
Defines an email domain and its DNS, DKIM, and TLS certificate settings.
DsnReportSettings
Configures Delivery Status Notification (DSN) report generation.
Configures email message limits, encryption, compression, and default folder settings.
Enterprise
Configures enterprise licensing and branding settings.
EventTracingLevel
Defines a custom logging level override for a specific event type.
FileStorage
Configures file storage limits.
HttpForm
Configures the contact form submission endpoint.
HttpLookup
Defines an HTTP-based lookup list.
Http
Configures HTTP server settings including rate limiting, CORS, and security headers.
Imap
Configures IMAP protocol settings including authentication, timeouts, and rate limits.
InMemoryStore
Configures the in-memory cache and lookup store.
Jmap
Configures JMAP protocol limits for requests, uploads, and push notifications.
Log
Represents a server log entry.
MailingList
Defines a mailing list that distributes messages to a group of recipients.
MaskedEmail
Defines a masked email address for privacy protection.
MemoryLookupKeyValue
Defines an in-memory lookup key-value pair.
MemoryLookupKey
Defines an in-memory lookup key for fast data access.
Metric
Stores a collected server metric data point.
MetricsStore
Configures the storage backend for metrics data.
Metrics
Configures metrics collection and export via OpenTelemetry and Prometheus.
MtaConnectionStrategy
Defines a connection strategy for outbound message delivery.
MtaDeliverySchedule
Defines retry and notification intervals for message delivery.
MtaExtensions
Configures SMTP protocol extensions offered to clients.
MtaHook
Defines an MTA hook endpoint for message processing.
MtaInboundSession
Configures inbound SMTP session timeouts and transfer limits.
MtaInboundThrottle
Defines an inbound rate limit rule for SMTP connections.
MtaMilter
Defines a Milter filter endpoint for message processing.
MtaOutboundStrategy
Configures outbound message delivery routing, scheduling, and TLS strategies.
MtaOutboundThrottle
Defines an outbound rate limit rule for message delivery.
MtaQueueQuota
Defines a quota rule for message queues.
MtaRoute
Defines a routing rule for outbound message delivery.
MtaStageAuth
Configures SMTP authentication requirements and error handling.
MtaStageConnect
Configures SMTP connection greeting and hostname settings.
MtaStageData
Configures message processing rules for the SMTP DATA stage.
MtaStageEhlo
Configures EHLO command requirements and validation.
MtaStageMail
Configures MAIL FROM stage processing and sender validation.
MtaStageRcpt
Configures RCPT TO stage processing and recipient validation.
MtaSts
Configures the MTA-STS policy for the server.
MtaTlsStrategy
Defines a TLS security strategy for outbound connections.
MtaVirtualQueue
Defines a virtual queue for organizing outbound message delivery.
NetworkListener
Defines a network listener for accepting incoming connections.
OAuthClient
Defines a registered OAuth client application.
OidcProvider
Configures the OAuth and OpenID Connect provider settings.
PublicKey
Defines a public key for email encryption (OpenPGP or S/MIME).
QueuedMessage
Represents a queued email message pending delivery.
ReportSettings
Configures inbound report analysis and outbound report settings.
Role
Defines a named set of permissions that can be assigned to accounts, groups, or tenants.
SearchStore
Configures the full-text search backend.
Search
Configures full-text search indexing for emails, calendars, contacts, and tracing.
Security
Configures automatic IP banning rules for abuse, authentication failures, and port scanning.
SenderAuth
Configures sender authentication verification including DKIM, SPF, DMARC, and ARC.
Sharing
Configures sharing settings for calendars, address books, and files.
SieveSystemInterpreter
Configures the system-level Sieve script interpreter settings and limits.
SieveSystemScript
Defines a system Sieve script executed by the server.
SieveUserInterpreter
Configures the user-level Sieve script interpreter settings and limits.
SieveUserScript
Defines a global Sieve script available for user imports.
SpamClassifier
Configures the spam classifier model, training parameters, and auto-learning settings.
SpamDnsblServer
Defines a DNSBL server used for spam filtering lookups.
SpamDnsblSettings
Configures DNSBL query limits for spam filtering.
SpamFileExtension
Defines a file extension classification rule for spam filtering.
SpamLlm
Configures the LLM-based spam classifier.
SpamPyzor
Configures the Pyzor collaborative spam detection service.
SpamRule
Defines a spam filter rule for message classification.
SpamSettings
Configures global spam filter thresholds, greylisting, and trust settings.
SpamTag
Defines a score or action assigned to a spam classification tag.
SpamTrainingSample
Stores an email sample used for spam classifier training.
SpfReportSettings
Configures SPF authentication failure report generation.
StoreLookup
Defines an external store used for lookups.
SystemSettings
Configures core server settings including hostname, thread pool, and network services.
TaskManager
Configures task execution settings including retry strategies.
Task
Represents a background task scheduled for execution.
Tenant
Defines a tenant for multi-tenant environments with isolated resources and quotas.
TlsExternalReport
Stores a TLS aggregate report received from an external source.
TlsInternalReport
Stores an outbound TLS aggregate report pending delivery.
TlsReportSettings
Configures TLS aggregate report generation.
Trace
Stores a message delivery trace with associated events.
Tracer
Defines a logging and tracing output method.
TracingStore
Configures the storage backend for tracing data.
WebDav
Configures WebDAV protocol settings including property limits and locking.
WebHook
Defines a webhook endpoint for event notifications.