Mimecast Queue Management — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mimecast Queue Management (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The Mimecast delivery queue holds messages that are in transit — inbound messages being scanned and processed, outbound messages awaiting delivery to recipient servers. Queue monitoring is essential for detecting delivery backlogs, identifying stuck messages due to recipient server issues, and understanding the state of mail flow during incidents (e.g. a downstream mail server outage). A healthy queue processes messages within seconds; messages sitting in the queue for minutes or longer indicate a potential problem.
| Queue | Description |
|---|---|
| Inbound | Messages received from external senders, being scanned before delivery to internal mailboxes |
| Outbound | Messages from internal users being delivered to external recipients |
| Hold Queue | Messages explicitly held by policy or administrator action (see message-tracking skill) |
| State | Meaning |
|---|---|
queued | Waiting to be processed |
retrying | Delivery failed, scheduled for retry |
deferred | Recipient server temporarily unavailable; Mimecast will retry |
held | Manually held or policy-blocked |
When Mimecast cannot deliver a message (e.g. the recipient mail server is down), it enters the message into a retry schedule:
mimecast_get_queueReturns current queue contents with message counts and delivery status.
Parameters:
direction — Queue direction: inbound or outbound (optional, returns both if omitted)status — Filter by status: queued, retrying, deferred, held (optional)Example — Get full queue overview:
{}Example response:
{
"meta": { "status": 200 },
"data": [
{
"direction": "inbound",
"status": "queued",
"count": 12,
"oldestMessageAge": 45,
"messages": [
{
"id": "eNqrVkpJLU...",
"from": "[email protected]",
"to": "[email protected]",
"subject": "Purchase Order #4892",
"received": "2026-03-02T09:00:00Z",
"ageSeconds": 45,
"status": "queued",
"retryCount": 0
}
]
},
{
"direction": "outbound",
"status": "deferred",
"count": 3,
"oldestMessageAge": 1800,
"messages": [
{
"id": "eNqrVkpABC...",
"from": "[email protected]",
"to": "[email protected]",
"subject": "Report Q1 2026",
"received": "2026-03-02T08:30:00Z",
"ageSeconds": 1800,
"status": "deferred",
"retryCount": 4,
"lastError": "550 5.1.1 The email account does not exist",
"nextRetry": "2026-03-02T09:45:00Z"
}
]
}
]
}Key fields:
oldestMessageAge — Age in seconds of the oldest message in this queue segment (high values indicate a backlog)retryCount — Number of delivery attempts madelastError — SMTP error from the last delivery attemptnextRetry — Scheduled time for next delivery attemptExample — Outbound deferred queue only:
{
"direction": "outbound",
"status": "deferred"
}mimecast_get_queue with no filters to get a full queue snapshotoldestMessageAge for each queue segment:count for deferred messages — any deferred outbound messages need attentionlastError to diagnose the causemimecast_get_queue with status=deferredretryCount (5+) and long ageSecondslastError to diagnose:5xx errors — Permanent rejection by recipient server (invalid address, policy block)4xx errors — Temporary failure (server down, greylisting)5xx errors, notify the sender that delivery failed permanently4xx errors, confirm the recipient server is online; messages will auto-retrymimecast_find_message using the message ID for full delivery historymimecast_get_queue filtering for direction=outbound and status=deferredlastError for all affected messages — consistent errors to the same domain confirm an outagemimecast_get_queue with status=heldmimecast_release_message (see message-tracking skill) to release themCause: The queue may have cleared by the time you query, or the affected messages may be in a different queue segment. Solution: Use mimecast_find_message with the specific sender/recipient to trace the message directly by its delivery status.
Cause: The recipient mail server is permanently rejecting delivery. Common causes: invalid recipient address, the recipient domain's MX records are wrong, or their server has a policy block against your client's domain. Solution: Notify the sender of the bounce reason (lastError content). If the recipient address is valid, ask the client to contact the recipient to have your domain allowlisted.
Cause: Mimecast is processing a high volume of inbound messages, or scanning is taking longer than usual (e.g. an attachment sandbox backlog). Solution: Monitor the oldestMessageAge — if it grows over 5 minutes, contact Mimecast support. Temporary spikes during high-volume periods (e.g. start of business day) are normal.
retryCount with 5xx errors means permanent delivery failure — these messages will eventually bounce; notify senders promptly4xx deferred messages auto-retry — only escalate if oldestMessageAge exceeds 2 hoursmimecast_find_message for full message history when investigating specific reports~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.