---
title: "Render a human confirm page for the in-body one-click unsubscribe link."
method: GET
path: "/unsubscribe"
tags: ["compliance"]
---

# Render a human confirm page for the in-body one-click unsubscribe link.

`GET /unsubscribe`

## Request

- Base URL: `https://api.coldrig.dev`
- URL: `https://api.coldrig.dev/unsubscribe`
- Auth: none required

UNAUTHENTICATED — the signed `tenant`/`email`/`sig` triplet in the query string (minted server-side into every sequence email's List-Unsubscribe header and in-body opt-out link) is the credential; there is no bearer token on this route. GET alone never suppresses anything — it renders an HTML confirm page whose own form POSTs back to this same URL. Intended for a human clicking the link inside the email body, in a browser; a mail client's own automatic RFC 8058 one-click action POSTs directly (see below) and never hits this GET.

## Query parameters

- `tenant` string, required
- `email` string, email, required
- `sig` string, required

## Response `200`

Confirm page (not yet unsubscribed).

## Other responses

- `400`: Missing/invalid query params or an invalid/tampered signature.

---

[API](https://skmtc.dev/coldrig/apis/agent-cold-email-api.md) · [All operations](https://skmtc.dev/coldrig/apis/agent-cold-email-api/llms.txt) · [OpenAPI document](https://skmtc.dev/coldrig/apis/agent-cold-email-api/revisions/242a462d82c4?raw)