Skip to main content

API keys

GET|POST /v0/api-keys · DELETE /v0/api-keys/:id, with project- and inbox-scoped twins. See Authentication for scopes and the permission gate.

Browser credentials

POST /v0/emails/inboxes/:inbox_id/browser-credentials/enrollments starts an enrollment and activates a credential; list at GET /v0/api-keys/browser-credentials, revoke with DELETE …/browser-credentials/:credential_id, cancel enrollments at DELETE …/browser-credentials/enrollments/:enrollment_id. Lifecycle events: GET …/browser-credentials/events. Consents live under /v0/api-keys/browser-consents….

AgentID public keys

Register a JWK-bound credential:
Rename with PATCH …/:id, revoke one with DELETE …/:id, revoke all sign-in keys with POST …/agentid-sign-in/revoke-all. Reads never return key material.