An address is an email address (jane@acme.com) or a domain (acme.com).

Sets each address in the request to the given enforcement level on the workspace blocklist. The address itself is its key: there is no separate ID.

An address that isn't on the workspace blocklist is added. An address already at the requested level is left unchanged, so this endpoint is safe to retry. An address at the other level is moved to the requested level.

This endpoint only adds and updates the addresses in the request. Addresses on the workspace blocklist that aren't in the request are left alone; it never replaces the whole list.

Addresses are normalized: email addresses and domains are trimmed and lowercased, a URL is reduced to its hostname, and a leading www. is removed. The response returns the normalized value, which is the key for the address. Duplicate addresses are collapsed, and a request that gives the same address two different enforcement levels is rejected.

The request is applied all or nothing. Protected changes take effect immediately. Blocked changes take effect once each connected mailbox has re-synced, which may take a few minutes.

A user-level access token can only call this endpoint if the workspace member it acts for is a workspace admin.

This endpoint is in alpha and may be subject to breaking changes as we gather feedback.

Required scopes: email_calendar_blocklist:read-write.

Supported token levels: workspace, user.

{
  "data": {
    "addresses": [
      {
        "address": "jane@acme.com",
        "enforcement_level": "blocked"
      }
    ]
  }
}

{
  "data": [
    {
      "address": "jane@acme.com",
      "address_type": "email_address",
      "enforcement_level": "blocked",
      "created_at": "2026-10-28T09:12:44.210000000Z"
    }
  ]
}