Skip to main content

Principals

📄️ Overview

Principals are the entities that represent individuals, groups, resources, or other organizational elements within Stalwart Mail Server. They play a key role in managing access, permissions, and interactions with the mail system. Principals in Stalwart Mail Server follow the JMAP Sharing specification (as outlined in the RFC), which provides a standardized way to define and share resources among users. Each principal type represents a different category of entity and serves a distinct function within the system.

📄️ Group

The Group principal type in Stalwart Mail Server represents a collection of individual users and potentially other groups. Groups function similarly to regular accounts in that they can receive emails, but they differ in a few important ways: group accounts cannot log in to the mail server using IMAP, POP3, or JMAP. Instead, groups are designed to organize users and share resources. When an individual is added as a member of a group, they gain access to the group’s inbox, which appears as a shared folder in their email client when using IMAP or JMAP.

📄️ Mailing List

A Mailing List principal in Stalwart Mail Server represents a group of recipients—both individuals and groups—who are subscribed to receive emails sent to a common email address. Mailing lists are commonly used for distributing messages to multiple users at once, simplifying communication with a large group of people. While similar to groups, mailing lists are designed primarily for one-way communication, where messages are sent to all members of the list, rather than shared access to an inbox like group principals.

📄️ API Key

The API Key principal type is used to grant external applications access to the management REST API or to register OAuth clients using the OAuth Dynamic Client Registration protocol. API keys allow secure, programmatic interaction with the management interface of the mail server, enabling external tools and applications to automate administrative tasks or integrate with the system's management features. However, it’s important to note that API keys cannot be used with JMAP, IMAP, POP3, or other mail server services for authentication or accessing user mailboxes.