Cloudflare DNS setup
The fastest route. An API token adds the records in one click, with no manual typing.
- Where to find it
- Cloudflare dashboard → your domain → DNS → Records
Follow these steps
- One-click: on the domain setup page in mailsi, choose Cloudflare and paste an API token with Zone:DNS:Edit permission. One click adds every record.
- Manual: in Cloudflare, open DNS → Records, choose "Add record", and add each record from the table below.
- Keep the DKIM CNAME set to DNS only (grey cloud).
- Back in mailsi, press "Check". DNS changes can take minutes to hours.
Records to add
These records follow the same rules as the setup wizard in the app. MX is required. SPF, DKIM and DMARC are recommended. After you add the domain, mailsi shows your own MX value.
- Type
- MX
- Host
- @
- Value
- <your-unique-host>.mx.mailsi.dev
- Priority
- 10
- Purpose
- Inbound MX. This record alone proves you own the domain.
- Type
- TXTrecommended
- Host
- @
- Value
- v=spf1 include:spf.mailsi.dev ~all
- Purpose
- SPF: include spf.mailsi.dev so replies land in the inbox more often.
- Type
- CNAMErecommended
- Host
- mailsi1._domainkey
- Value
- mailsi1._domainkey.mailsi.dev
- Purpose
- DKIM CNAME: on Cloudflare set it to DNS only (grey cloud).
- Type
- TXTrecommended
- Host
- _dmarc
- Value
- v=DMARC1; p=none
- Purpose
- DMARC: no policy exists yet; start with p=none to monitor.
<your-unique-host>.mx.mailsi.dev is a placeholder. Your real value is unique and appears in mailsi after you add the domain.
Common mistakes
- Remove old MX records. If the domain pointed at another mail service, leftover MX records can send mail there.
- Only one SPF record is allowed. If you already have a v=spf1 TXT record, add include:spf.mailsi.dev to it instead of creating a second record.
- Keep the DKIM CNAME as DNS only (grey cloud) if your provider is Cloudflare.
- The default TTL from your provider is fine, for example 300 seconds or one hour.
- DNS changes can take minutes to hours. mailsi checks automatically and shows the result in the app.
- The token is used only for this one operation. It is deleted after use, and mailsi does not store or log it.
- MX records have no orange-cloud proxy option, but the DKIM CNAME must stay grey-cloud.
Add your domain first
Add the domain in mailsi to see your unique MX value and check each record.