Render a human confirm page for the in-body one-click unsubscribe link.
UNAUTHENTICATED — the signed tenant/email/sig triplet in the query string (minted server-side into every sequence email's List-Unsubscribe header and in-body opt-out link) is the credential; there is no bearer token on this route. GET alone never suppresses anything — it renders an HTML confirm page whose own form POSTs back to this same URL. Intended for a human clicking the link inside the email body, in a browser; a mail client's own automatic RFC 8058 one-click action POSTs directly (see below) and never hits this GET.
Request
- Base URL: https://api.coldrig.dev
- URL: https://api.coldrig.dev/unsubscribe
- Auth: none required
Query parameters
The account id this signed opt-out link belongs to.
The recipient address this signed opt-out link covers.
HMAC-SHA256 over tenant:email, keyed off a server secret. There is no per-send row backing this — the signature itself is the entire credential, and it never expires (an opt-out doesn't need to).
Response
Confirm page (not yet unsubscribed).
Changes
No recorded changes to this operation across all 2 revisions of this API.