Panel and account
Account, team and billing
Inviting your team and their roles, two-step verification, API keys, billing and invoices, and the audit log — keeping your Meghly account safe.
Adding your team
Give each colleague a sign-in of their own — never share one password between several people. On the Users page, click Invite someone and give an email, a name and a role. The invitation link works for 7 days.
| Role | What they can do |
|---|---|
| Administrator | Everything — users, billing, API keys and the audit log included |
| Operator | The day-to-day work — creating domains and mailboxes, sending mail, templates and other changes; but not creating API keys or inviting users |
| Read only | Look, but change nothing |
Administrators can send an invitation again, mail a password reset link, and disable or remove someone.
A panel password has at least 12 characters, with at least one capital letter, one digit and one symbol (such as ! or #).
Two-step verification
Keep two-step verification on, so a stolen password alone cannot open your account. On your account's Security page, scan the QR code with any authenticator app (Google Authenticator, Microsoft Authenticator …); from then on, signing in also needs the app's 6-digit code.
Turning it on gives you 10 recovery codes. They sign you in if you lose your phone, so write them down somewhere safe. Make new codes makes a fresh set. If you lose both phone and codes, an administrator on your team can turn your two-step verification off from the Users page.
The same page's Where you are signed in lists the devices signed in to your account, and signs out any you do not recognise.
API keys
To send mail or manage data from your website or another system, you need an API key. On the API keys page, click Create API key and fill in:
- Name — what it is for, such as "Shop website".
- Scopes — what the key may do. Give only what is needed; to send mail, SendMail is enough.
- Rate limit / min — requests a minute at most (600 by default).
- Allowed CIDRs — the key works only from these IPs (optional, but safer).
- Expires — when the key stops working.
| Scope | Allows |
|---|---|
SendMail | Sending mail by API |
ReadMessages | Reading the state of sent mail |
ManageDomains, ManageMailboxes | Managing domains and mailboxes |
ManageTemplates | Managing mail templates |
ManageContacts | Managing campaign contacts |
ManageWebhooks, ReadMetrics | Managing webhooks and reading statistics |
Send the key in the X-Api-Key header (or as Authorization: Bearer mpk_...). See the example in Business email.
An API key is shown only once. Never put it in browser code, a mobile app or a Git repository — keep it only in your server's environment variables. If a key leaks, Revoke key at once and make a new one.
Billing and invoices
The Billing page shows your plans (Your plans), every invoice (Invoices) and how to pay (How to pay). Amounts are in Taka.
To pay, call or email the number under How to pay with the invoice number. Once the payment is received, it is recorded on the invoice and the invoice shows as paid.
Billing for Meghly Panel on your own servers is separate — see Meghly Panel.
Audit log
The Audit log page records who changed what in your account, and when — such as creating a mailbox, revealing a password or revoking an API key. Search by person, kind of action and date, and download it as CSV (up to 10,000 entries). Only administrators see this page.
Getting help
If something in the panel looks wrong, tell us directly with the Report a problem button. You can also reach us at the phone number and email at the foot of every docs page.