Get Mailboxes
Request, response and authentication details for your Mailat instance.
/api/v1/inbox/mailboxesGetMailboxes returns all mailboxes across all user's identities GET /api/v1/inbox/mailboxes
Authentication & compatibility
Use a scoped bearer API key with email:read. The key is bound to its user and organization.
Legacy mailbox operation requiring configured Stalwart/JMAP accounts. This is not the SES received-mail API; use /inbox/received and /inbox/changes for SES automation.
Contract 2026-10-04. Your running instance's /api/v1/openapi.json is authoritative for its deployed release.
Request
Set MAILAT_BASE_URL to your instance origin (without /api/v1) and MAILAT_TOKEN to an appropriate credential. Replace path placeholders and example data before running. These examples do not execute in this page.
curl --request GET "$MAILAT_BASE_URL/api/v1/inbox/mailboxes" \
--header "Authorization: Bearer $MAILAT_TOKEN"Responses
HTTP statuses and body shapes below come from the pinned contract. Not every shared error applies to every request. Retain the original idempotency key when retrying a send.
200 · Success
Header: X-RateLimit-RemainingintegerRemaining requests in this API key's current minute window (present for API-key authentication).
minimum: 0
application/json
responseobjectFields
codeintegerrequireddataarrayEach itemobjectFields · service.UnifiedMailbox
domainIdinteger (int64)domainNamestringidstringidentityEmailstringidentityIdinteger (int64)identityUuidstringnamestringparentIdall of · nullableVariant 1stringroleall of · nullableVariant 1stringsortOrderinteger (int64)totalEmailsinteger (int64)totalThreadsinteger (int64)unreadEmailsinteger (int64)unreadThreadsinteger (int64)messagestringrequired400 · Invalid input
application/json
responseobjectFields
codeintegerrequiredmessagestringrequired401 · Missing, expired or revoked authentication
application/json
responseobjectFields
codeintegerrequiredmessagestringrequired403 · Insufficient permission
application/json
responseobjectFields
codeintegerrequiredmessagestringrequired404 · Resource not found
application/json
responseobjectFields
codeintegerrequiredmessagestringrequired409 · Conflict or changed idempotency payload
application/json
responseobjectFields
codeintegerrequiredmessagestringrequired410 · Recovery cursor expired; resynchronize
application/json
responseobjectFields
codeintegerrequiredmessagestringrequired429 · Rate limit exceeded; respect Retry-After
Header: Retry-AfterintegerSeconds until the next fixed-minute request window.
minimum: 1
application/json
responseobjectFields
codeintegerrequiredmessagestringrequired500 · Internal failure; retain the idempotency key
application/json
responseobjectFields
codeintegerrequiredmessagestringrequired