Skip to content
Early access: send from your own mailbox today. What works

Give the whole team access, not the keys.

Roles decide who can send money out the door. Single sign-on, SCIM, two-factor sign-in and an IP allowlist decide who gets in. The audit log shows who did what.

Start freePricing

Roles

OwnerAdminManagerSDRAEViewer
Launch request · Sam (SDR) asks to launch “Q4 logistics”. Approve / Decline

Sign-in

  • SSO (SAML / OIDC)acme.com verified by TXT
  • SCIMOkta · Entra ID
  • Two-factorRequired
  • IP allowlist2 ranges
Who can do what: six roles, an SDR’s launch request waiting for a manager, and the sign-in controls in front of it all.

What it does

  • Six roles

    Owner, Admin, Manager, SDR, AE and Viewer, enforced on the server for every action.

  • Launch approvals

    SDRs can build campaigns but not launch them; they request launch and a manager approves or declines with a note.

  • Reply approvals

    Drafts can wait for a manager before they send.

  • Single sign-on

    SAML 2.0 or OpenID Connect, with your email domains proven by a DNS TXT record and re-checked daily.

  • SCIM provisioning

    Create, update and remove people from Okta or Microsoft Entra ID.

  • Two-factor sign-in

    Authenticator-app codes with recovery codes. Owners can require it for everyone in the workspace.

  • IP allowlist

    Up to 100 address ranges; you can’t save a list that would lock yourself out.

  • Audit log

    Launches, approvals, settings changes and other actions, per workspace, with who did them.

How it works in Inboxed

  1. Invite and assign roles

    Give each person the least they need.

  2. Verify your domain

    Add the TXT record, then turn on SSO and SCIM.

  3. Lock it down

    Require two-factor sign-in for the workspace and set the IP allowlist.

Honest limits

What this doesn’t do, and what it needs from you.

  • SSO sign-ins only reach accounts that are already members of the workspace, or new people as viewers, so no identity provider can claim someone else’s account.
  • If a verified domain’s TXT record disappears, it keeps working for 7 days, then is unverified and owners are emailed.

Questions

Do SSO and SCIM cost extra?

No. There are no plans or seats; you pay only for emails that send.

Who can launch a campaign?

Managers, admins and owners. SDRs request a launch and a manager approves it, which is recorded in the audit log.

Works with the rest of Inboxed

All features · Pricing: $1 per 1,000 emails sent

Warm up today. Launch when you’re ready. Pay only for emails that send.

No subscription, no card to start. Connect a mailbox and warmup begins in under a minute.

Start freeSee how pricing works