API

Base URL /api — no API key, session scoped. Send x-session-id on every call after /session.

GET /session

Create an anonymous session. Inboxes are grouped under it.

curl /session

GET /config

App name, available mail domains, session TTL.

POST /inboxes

Random address when the body is empty, deterministic when localPart is set.

curl -X POST /inboxes \
  -H "x-session-id: $SID" -H "content-type: application/json" \
  -d '{"localPart":"myinbox"}'

GET /inboxes

Every address created in this session.

GET /inboxes/{address}/messages

Newest first. from_address, subject, body, received_at.

GET /inboxes/{address}/messages/{id}

Full message including html_body and raw.

DELETE /inboxes/{address}

Wipes the address and every message stored under it.

Notes

• Messages and sessions expire after 24 h.
• Up to 100 messages per address.
• Bodies are MIME-parsed to text; html_body keeps the HTML alternative.