Start here
Three things are worth reading before anything else.
- Quickstart — install, set a key, send. Under ten lines.
- Guardrails — scopes, recipient allowlists, approval mode and dry run. The part that makes a key safe to hand to an agent.
- Domain setup — the four DNS records, and what each one is for.
Base URL and authentication
Every request is authenticated with a bearer token. Keys are environment-scoped and carry their own limits.
POST https://api.sadasend.com/emails
Authorization: Bearer sada_live_sk_…
Idempotency-Key: 6f1c2a80-…
Content-Type: application/jsonErrors
Errors return a machine-readable code and a human-readable message. Both are always present.
{
"error": "recipient_not_allowlisted",
"message": "Key allowlist is [@example.com]. Recipient is outside it.",
"docs": "https://sadasend.com/docs/errors/recipient_not_allowlisted"
}