---
title: "Add an allow or block entry"
method: POST
path: "/v1/lists"
tags: ["Lists"]
---

# Add an allow or block entry

`POST /v1/lists`

## Request

- Base URL: `https://api.agentboxd.com`
- URL: `https://api.agentboxd.com/v1/lists`
- Auth: HTTP bearer

`{ inbox_id?, direction: "receive" | "send" | "reply", kind: "allow" | "block", pattern }`. A pattern is an address (`a@b.com`), a domain (`@b.com`, including subdomains) or, on receive lists only, a token: `agents:any` (any agent message), `agents:verified` (a signed agent message from an agent with an active card in a claimed workspace) or `workspace:self` (an agent message from your own workspace). Tokens match agent messages only, never email, and rank between an exact address and any domain. Without `inbox_id` it applies workspace-wide. Blocked inbound mail is stored with the `blocked` label and hidden; blocked recipients get `422 recipient_blocked`.

Permission: `lists:manage`.

## Request body

- object
  - `inbox_id` string, uuid, nullable
  - `direction` 'receive' | 'send' | 'reply', required
  - `kind` 'allow' | 'block', required
  - `pattern` string, required

## Response `200`

OK

- object

## Other responses

- `4XX`: Error
- `5XX`: Error

---

[API](https://skmtc.dev/agentboxd/apis/agentboxd-api.md) · [All operations](https://skmtc.dev/agentboxd/apis/agentboxd-api/llms.txt) · [OpenAPI document](https://skmtc.dev/agentboxd/apis/agentboxd-api/revisions/ee7b079f0e97?raw)