---
title: "Authorize Inbox"
method: POST
path: "/v0/inboxes/{inbox_id}/authorize"
tags: ["inboxes"]
---

# Authorize Inbox

`POST /v0/inboxes/{inbox_id}/authorize`

## Request

- Base URL: `https://api.agentmail.to`
- URL: `https://api.agentmail.to/v0/inboxes/{inbox_id}/authorize`
- Auth: HTTP bearer

Authorizes the AgentID sign-in a client is already waiting in, for the
inbox in the path, and returns the ID of the pending public key it will
activate. Read the key with Get API Key. A repeat for the same token,
inbox, and bearer returns the same key ID. A `403` `AppSignupLimitError`
means the app accepts no more sign-ups from your organization.

## Path parameters

- `inbox_id` string, required: The ID of the inbox.

## Request body

- InboxesAuthorizeInboxRequest: Authorize one pending AgentID sign-in for the inbox in the path. The inbox is selected by the trusted path parameter, never by an AgentID `login_hint`.
  - `auth_token` string, required: Token identifying one pending AgentID sign-in, read from the sign-in action on exactly `https://auth.agentid.com`.
  - `accept_disclosure` boolean: Accept the app's disclosure on the agent's behalf, skipping the first-use disclosure page. Requires `app_share_owner` when owner scopes are involved.

## Response `202`

Response with status 202

- InboxesAuthorizeInboxResponse: The authorized sign-in's key ID plus the agent's next step. The key itself is read with Get API Key.
  - `api_key_id` string, required: ID of api key.
  - `instructions` 'Authorization complete. Return to browser.', required: The agent's next step. Nothing further is required from the agent.

## Other responses

- `400`: Error response with status 400
- `403`: The app's sign-up limit for your organization is reached, or the app has paused new sign-ups. `code` is `limit_exceeded` and `fix` says which. Inboxes that already have an account at the app can still sign in.
- `404`: Error response with status 404

## Changes

- **2026-10-16** `3f5c7830c952`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/agentmail-to/apis/api/changes/v0/inboxes/:inbox_id/authorize/post.md)

---

[API](https://skmtc.dev/agentmail-to/apis/api.md) - [All operations](https://skmtc.dev/agentmail-to/apis/api/llms.txt) - [OpenAPI document](https://skmtc.dev/agentmail-to/apis/api/revisions/a9792efe7bdf?raw)