API keys
GET|POST /v0/api-keys · DELETE /v0/api-keys/:id, with project- and
inbox-scoped twins. See Authentication for scopes and the
permission gate.
Browser credentials
POST /v0/emails/inboxes/:inbox_id/browser-credentials/enrollments starts an
enrollment and activates a credential; list at
GET /v0/api-keys/browser-credentials, revoke with
DELETE …/browser-credentials/:credential_id, cancel enrollments at
DELETE …/browser-credentials/enrollments/:enrollment_id. Lifecycle events:
GET …/browser-credentials/events. Consents live under
/v0/api-keys/browser-consents….
AgentID public keys
Register a JWK-bound credential:PATCH …/:id, revoke one with DELETE …/:id, revoke all
sign-in keys with POST …/agentid-sign-in/revoke-all. Reads never return key
material.