MinuteMail

List the tenant's active mailboxes (owner is derived from the API key). Optionally look up a single mailbox by exact address.

Create a new temporary mailbox. The domain defaults to the tenant's default domain; the owner is always the API key's owner.

Fetch a single mailbox by ID.

Delete a mailbox and its contents by ID.

Delete several mailboxes at once by ID.

List the emails in a mailbox, newest first.

Inject a simulated inbound email into a mailbox (multipart upload). No external mail is sent; use this to simulate inbound mail for flow testing.

Fetch a single email by ID, including body and attachment metadata.

Delete a single email.

Delete several emails of one mailbox at once.

List the attachments of an email (metadata only).

Attach a file to a test-injected email (base64 payload).

Download an attachment. The file contents are returned base64-encoded in the JSON "data" field.

Delete a single attachment.

Delete several attachments of one email at once.

List the tenant's archived (expired but recoverable) mailboxes.

Fetch a single archived mailbox by ID.

Permanently delete an archived mailbox.

Reactivate an archived mailbox back to active state.

List the tenant's custom domains with their DNS verification status.

Register a new custom domain. DNS records (TXT token + MX) must then be added before verification can succeed.

Trigger DNS verification (TXT + MX) of a registered domain.

Delete a registered custom domain.

List the tenant's team members.

Add a team member directly (no invitation flow).

Fetch a single team member by ID.

Remove a team member.

Create a team invitation for an email address (SMTP invite is sent by the team service).

List the tenant's team invitations.

Revoke a team invitation.

List the tenant's mock identities, optionally filtered by OAuth client or mailbox address.

Create a mock identity bound to a mailbox for OAuth flow testing.

Fetch a single mock identity by ID.

Update a mock identity: profile fields, isActive (activate/deactivate), emailVerified, and custom claims merged into the ID token and userinfo.

Delete a mock identity.

List the tenant's OAuth clients for mock identity testing.

Register an OAuth client for mock identity flows. The plaintext clientSecret is returned once at creation.

Fetch a single OAuth client by its public client ID.

Delete an OAuth client by its public client ID.

Rotate an OAuth client's secret. The new plaintext secret is returned once.