name: apex-email-services description: "Use this skill when implementing inbound email processing via Apex: parsing emails sent to a Salesforce-hosted address, creating or updating records from email content, handling attachments, or configuring Email Service routing. Trigger keywords: InboundEmailHandler, email service address, handleInboundEmail, Messaging.InboundEmail, Email-to-Case alternative, process email in Apex. NOT for outbound email templates, Messaging.SingleEmailMessage, workflow email alerts, or Email-to-Case declarative setup." category: apex salesforce-version: "Spring '25+" well-architected-pillars:

• Security
• Reliability
• Performance triggers:
• "how do I process incoming emails with Apex and create records automatically"
• "my InboundEmailHandler is not receiving emails or silently dropping messages"
• "how do I parse attachments from an inbound email in Apex code"
• "what are the daily email limits for Apex Email Services"
• "email sent to Salesforce address is bouncing or not routing to my handler" tags:
• apex-email-services
• inbound-email
• InboundEmailHandler
• email-automation
• messaging inputs:
• "Salesforce org edition (limits differ)"
• "Use case: record creation, parsing, attachment handling, or routing"
• "Whether the email comes from an external system, customer, or automated process"
• "Expected email volume per day" outputs:
• "Compliant InboundEmailHandler Apex class"
• "Email Service configuration guidance (Setup > Email Services)"
• "Attachment parsing strategy for TextAttachment and BinaryAttachment"
• "Review checklist for production readiness" dependencies: [] version: 1.0.0 author: Pranav Nagrecha updated: 2026-04-28

Apex Email Services

This skill activates when a practitioner needs to receive, parse, and act on inbound emails using Apex. It covers the full lifecycle: implementing Messaging.InboundEmailHandler, configuring the Email Service address in Setup, parsing body and attachment content, handling rejection/bounce behavior, and writing testable handlers. It does NOT cover outbound email (Messaging.SingleEmailMessage), email alerts, or the declarative Email-to-Case setup.

Before Starting

Gather this context before working on anything in this domain:

• Confirm the org edition — Email Services limits differ: Developer/Professional orgs get fewer daily processing slots than Enterprise/Unlimited. The standard limit is 1,000 email messages per day per service address; check the org's actual allocation.
• Identify whether you need text parsing, HTML parsing, or binary attachment processing — these require different handler branches.
• The most common wrong assumption: practitioners expect handleInboundEmail to run as a specific user. It runs in system context — no user permission enforcement applies unless you explicitly switch context in your code.
• Email Services run synchronously per message. Governor limits apply to the full handler execution: 100 SOQL queries, 150 DML statements, 10 MB heap. Large attachments (up to 25 MB per email) can breach heap limits quickly.
• The Email Service address must be activated in Setup. An inactive address silently drops all inbound mail.

Core Concepts

Mode 1: The InboundEmailHandler Interface

Messaging.InboundEmailHandler is the contract for all Apex inbound email processing. Your class must implement exactly one method:

global Messaging.InboundEmailResult handleInboundEmail(
    Messaging.InboundEmail email,
    Messaging.InboundEnvelope envelope
) { ... }

The return value matters. If you set result.success = false, Salesforce either bounces the message back to the sender or drops it silently — controlled by the Error Action setting on the Email Service configuration in Setup. Always return a populated InboundEmailResult; a null return is treated as failure.

The InboundEmail object carries the full message:

• email.subject — subject line
• email.fromAddress / email.fromName — sender identity
• email.plainTextBody / email.htmlBody — body variants
• email.toAddresses / email.ccAddresses — recipient arrays
• email.textAttachments — list of InboundEmail.TextAttachment
• email.binaryAttachments — list of InboundEmail.BinaryAttachment

The InboundEnvelope carries transport-level metadata: toAddress, fromAddress, which can differ from the To: and From: headers.

Mode 2: Email Service Configuration

Each Apex handler class is associated with one or more Email Service configurations in Setup > Email Services. Each configuration generates a unique @[instance].salesforce.com address. Key settings:

You can create multiple Email Service addresses (each with a different configuration) backed by the same Apex class to support different routing scenarios (e.g., separate addresses per product line, each stamping a different record type on created Cases).

Mode 3: Attachment Parsing

Two attachment types exist, mapped separately:

• InboundEmail.TextAttachment: has .body (String), .fileName, .mimeTypeSubType
• InboundEmail.BinaryAttachment: has .body (Blob), .fileName, .mimeTypeSubType

CSV, plain text, and XML files arrive as TextAttachment when the MIME type is text-based. Images, PDFs, and binary formats arrive as BinaryAttachment. Handlers must check both lists and apply defensive null checks — either list can be null if no attachments of that type exist.

Attachments are processed synchronously inside your handler's governor limit budget. A 25 MB binary attachment parsed into a Blob and then into a String (e.g., EncodingUtil.base64Encode) can exhaust heap quickly. Use chunked processing or consider deferring heavy attachment work to a Queueable called from within the handler.

Common Patterns

Pattern: Create-or-Update Record from Inbound Email

When to use: An external system sends structured emails (e.g., order confirmations, sensor alerts) and you need to upsert Salesforce records based on parsed email content.

How it works:

1. Implement InboundEmailHandler and parse email.plainTextBody or email.subject for a record identifier (e.g., an order number in the subject line).
2. Use SOQL to find an existing record by the extracted identifier.
3. Upsert or insert accordingly, populating fields from parsed email content.
4. Return result.success = true on success, or log errors and return false if parsing fails.

global class OrderEmailHandler implements Messaging.InboundEmailHandler {
    global Messaging.InboundEmailResult handleInboundEmail(
        Messaging.InboundEmail email,
        Messaging.InboundEnvelope envelope
    ) {
        Messaging.InboundEmailResult result = new Messaging.InboundEmailResult();
        try {
            String orderNum = extractOrderNumber(email.subject);
            if (String.isBlank(orderNum)) {
                result.success = false;
                result.message = 'No order number found in subject.';
                return result;
            }
            List<Order__c> orders = [
                SELECT Id FROM Order__c WHERE OrderNumber__c = :orderNum LIMIT 1
            ];
            Order__c order = orders.isEmpty() ? new Order__c(OrderNumber__c = orderNum) : orders[0];
            order.LastEmailBody__c = email.plainTextBody;
            order.LastEmailDate__c = System.now();
            upsert order OrderNumber__c;
            result.success = true;
        } catch (Exception e) {
            result.success = false;
            result.message = e.getMessage();
        }
        return result;
    }

    private String extractOrderNumber(String subject) {
        if (subject == null) return null;
        Pattern p = Pattern.compile('ORD-\\d+');
        Matcher m = p.matcher(subject);
        return m.find() ? m.group() : null;
    }
}

Why not simpler approaches: A Flow with Email-to-Case only creates Cases. Custom Apex is needed when you need to target arbitrary sObjects, apply complex parsing logic, or conditionally reject mail.

Pattern: Async Attachment Processing via Queueable

When to use: Emails arrive with large or multiple binary attachments that would exceed heap or CPU limits if processed synchronously.

How it works:

1. In handleInboundEmail, extract only the attachment metadata and Blob data. Store the Blob in a ContentVersion record immediately (avoids re-processing the email).
2. Enqueue a Queueable job, passing the ContentVersion Id.
3. The Queueable performs the expensive parsing (CSV, base64 decode, PDF text extraction stubs, etc.) in a separate transaction with its own governor limits.
4. Return result.success = true from the handler immediately — the email is accepted, processing continues asynchronously.

Why not synchronous: A 10–15 MB binary attachment parsed in-line regularly hits the 12 MB heap limit for synchronous Apex. Moving the heavy work to a Queueable avoids the timeout and gives a separate 12 MB heap budget.

Pattern: Sender-Based Routing with Multiple Service Addresses

When to use: Different senders or subject patterns need to create different record types or trigger different workflows, but you want a single Apex class.

How it works:

1. Create multiple Email Service configurations in Setup, each pointed at the same Apex class.
2. Pass a routing signal via the email address itself (e.g., support-billing@... vs support-tech@...) or encode routing in a Custom Setting keyed by toAddress.
3. Inside handleInboundEmail, read envelope.toAddress to determine routing context, then branch logic accordingly.

Decision Guidance

Recommended Workflow

Step-by-step instructions for an AI agent or practitioner activating this skill:

1. Gather context — confirm the org edition, relevant objects, and current configuration state
2. Review official sources — check the references in this skill's well-architected.md before making changes
3. Implement or advise — apply the patterns from Core Concepts and Common Patterns sections above
4. Validate — run the skill's checker script and verify against the Review Checklist below
5. Document — record any deviations from standard patterns and update the template if needed

Review Checklist

Run through these before marking work in this area complete:

• InboundEmailHandler class is global and implements the interface correctly
• handleInboundEmail always returns a non-null InboundEmailResult
• Email Service address is active in Setup > Email Services
• Accept Email From restriction is configured to prevent spoofing
• Attachment parsing handles null textAttachments and binaryAttachments lists defensively
• Handler has a try/catch block and sets result.success = false on unexpected exceptions
• Test class uses Test.setFixedSearchResults or constructs InboundEmail objects directly
• Daily volume estimate confirmed within org edition limit (default 1,000/day)
• Large attachment flows enqueue a Queueable instead of processing synchronously
• Error Action on the Email Service config is set intentionally (Bounce vs Discard)

Salesforce-Specific Gotchas

Non-obvious platform behaviors that cause real production problems:

1. System Context with No Sharing — handleInboundEmail runs in system mode. There is no running user, no with sharing enforcement, and no record-level access control unless you explicitly call into a with sharing method. A handler that creates records using insert will bypass all sharing rules silently.
2. Inactive Address Drops Mail Silently — If the Email Service address is set to Inactive in Setup, inbound emails do not bounce and do not generate errors. They are silently discarded. Practitioners regularly deploy a handler, forget to activate the service address, and spend hours debugging a "no traffic" problem.
3. Both Body Fields Can Be Null — HTML-only emails leave plainTextBody null. Plain-text-only emails leave htmlBody null. Production handlers that assume one is always populated throw NullPointerExceptions on real mail. Always test both paths.

Output Artifacts

Related Skills

• apex/governor-limits — Synchronous handler execution consumes the same governor limits as any Apex transaction; consult this skill when attachment or SOQL load is high.
• apex/apex-rest-services — Use when the integration partner can push HTTP instead of email; REST is preferable for high-volume structured data exchange.
• admin/email-templates-and-alerts — Use for outbound email workflows. NOT a replacement for inbound email processing.
• integration/rest-api-patterns — Consider as an alternative integration channel if volume or reliability requirements exceed what Email Services can provide.