Single Sender Verification is for testing
Single Sender Verification can get you started but SendGrid recommends it for testing only; production sending should use domain authentication. [2]
Guides · email · Everyday developer services
Twilio SendGrid Email API
Email API from Twilio SendGrid. You authenticate your sending domain with DNS records, then create a restricted API key with Mail Send access.
Researched · not yet run liveLast researched 25 October 2026 · Twilio SendGrid · provider site
Researched, not yet run live. Built from the provider’s official pages (linked below). A person hasn’t walked this flow end to end yet, so check each step against the source.
Have ready
- A domain you control with access to its DNS settings
- DNS access for the root sending domain · Sender identity is verified by domain authentication, which adds DNS records at your DNS host. [2]Needed for: Add the SPF/DKIM DNS records and verify
Steps
Steps marked “human step” are ones only you can do: verapli never signs in, submits, pays or accepts terms for you.
Sign in or create a Twilio SendGrid account
Sign in to Twilio SendGrid. If you have no account yet, you create it yourself; verapli does not create accounts.
Where: https://app.sendgrid.com/login
Start domain authentication
In Settings > Sender Authentication, click Get Started, pick your DNS host, choose whether to brand links, and enter only the root domain (no subdomain or protocol). Leave automated security on unless your DNS host rejects underscores in CNAME names.
Where: https://app.sendgrid.com/settings/sender_auth
Add the SPF/DKIM DNS records and verify
Add the four records shown. With automated security on these are three CNAMEs (em####, s1._domainkey, s2._domainkey) plus a _dmarc TXT; with it off, an MX on em#### for the return path, an SPF TXT, a DKIM TXT and a _dmarc TXT. Then click Verify.
- The provider says
- DNS verification can take up to 48 hours after upload. [1]
If something goes wrong (3)
- Record shows as em123.example.com.example.com: Your DNS host appends the domain; enter only the host part (for example em123). [1]
- Only some records verify: Wait and check again, or look for a mistyped record. [1]
- Existing CNAME was replaced: Custom return path and link subdomain CNAMEs replace any CNAME with the same name; check existing records before adding. [1]
Create a restricted API key
Create a Restricted (Custom) Access API key with Mail Send > Full Access only. Copy it at once; the console shows it only once.
verapli captures
SENDGRID_API_KEYhere by plain code: encrypted in your browser, never shown to AI.Where: https://app.sendgrid.com/settings/api_keys
Terms and gotchas
Plain-English summary, not legal advice. Each card links its source.
What you end up with
| Env var | Secret | Format | What it is |
|---|---|---|---|
SENDGRID_API_KEY | secret | SG.… | SendGrid API key with Mail Send permission |
For agents
The same entry as JSON: /api/v1/entries/twilio/sendgrid · requirements /api/v1/requirements/twilio/sendgrid · terms /api/v1/terms/twilio/sendgrid.
Remote MCP (read-only, no auth)
claude mcp add --transport http verapli https://verapli.com/mcp
> "What do I need for Twilio SendGrid Email API, and how long will it take?"
→ tools/call requirements { "provider_id": "twilio/sendgrid" }Sources
- Twilio SendGrid docs - How to set up domain authentication Settings > Sender Authentication flow; root domain only, subdomains don't inherit; automated security on by default gives 3 CNAMEs (em####, s1._domainkey, s2._domainkey) plus _dmarc TXT; off gives MX + TXT records; DNS verification can take up to 48 hours; doubled-domain and overwritten-CNAME troubleshooting · accessed 25 October 2026 · official
- Twilio SendGrid docs - Email API Quickstart for Node.js SENDGRID_API_KEY env var; Restricted Access key with Mail Send Full Access only; sender identity must be verified via domain authentication; Single Sender Verification for testing only · accessed 25 October 2026 · official
- Twilio SendGrid docs - API keys Full Access, Custom Access, Billing Access and Email Address Validation Access permissions; console displays the API key only once at creation · accessed 25 October 2026 · official
Provider rules change. This page is generated from verapli registry version 2026.1025.316; spotted something out of date? Tell us. Twilio SendGrid is not affiliated with verapli.