OPERATIONS

Domains, DNS, and email

Each Organization can add custom domains, manage the DNS zone via console or API, and operate mailboxes and aliases under those domains. BIND zonefile export is supported.

Add a domain

In App → Domains, click "Add domain" and enter the FQDN (e.g. acme.com).
Point the domain name servers to ns1.tesserra.io and ns2.tesserra.io (shown in the console). Tesserra detects delegation automatically.
Alternative: keep current DNS and create a TXT _tessera-verify.acme.com with the generated token.

Verification is retried periodically until propagation completes. You can trigger a new attempt from the console if needed.

DNS zone

Once verified, the domain receives a zone pre-populated with managed NS and SOA. Supported record types: A, AAAA, CNAME, MX, TXT, SRV, CAA, NS.

Default TTL is 300 seconds. For fast failover, lower values (60 s) are appropriate; for stable zones, higher values (3600 s) reduce queries.

BIND export

curl https://tesserra.io/api/dominios/$ID/zonefile \
  -H "Authorization: Bearer $TESSERRA_TOKEN" -o acme.zone

The file follows the BIND standard and can be imported into any authoritative DNS server.

Corporate email

Before creating mailboxes, the platform adds the appropriate MX, SPF, and DKIM records to the zone. Confirmation is done in the console.

Create a mailbox

curl -X POST https://tesserra.io/api/emails \
  -H "Authorization: Bearer $TESSERRA_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "dominio_id": "...",
    "localpart": "contato",
    "nome": "Atendimento Acme",
    "senha": "<senha forte>",
    "quota_mb": 5120
  }'

Multi-destination aliases

curl -X POST https://tesserra.io/api/emails/aliases \
  -H "Authorization: Bearer $TESSERRA_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "dominio_id": "...",
    "localpart": "vendas",
    "destinos": "ana@acme.com.br, joao@acme.com.br"
  }'

Mailbox access

SMTP: smtp.tesserra.io:587 (STARTTLS, AUTH PLAIN or LOGIN).
IMAP: imap.tesserra.io:993 (TLS).
Webmail at webmail.tesserra.io.

Mailbox passwords use the same bcrypt (cost 12) hashing as the platform. Password reset is available in the console.

Plan limits

Verified domains: 2, 10, and 50 (Starter, Pro, Business respectively).
Mailboxes: 10, 50, and 500.
Aliases: unlimited on all plans.

Multi-region

Observability