Perform the RFC 8058 one-click unsubscribe (or confirm from the GET page).
UNAUTHENTICATED, same credential as the GET above. This is the exact URL a compliant mail client POSTs to automatically for its own native "Unsubscribe" action (List-Unsubscribe-Post: List-Unsubscribe=One-Click) — no human interaction on this page in that flow — and is also what the GET confirm page's own form submits to when a human clicks through the in-body link instead. Suppresses the address account-wide immediately (visible to the very next scheduling tick, not a CAN-SPAM- style grace window) and cancels every pending scheduled send for every lead sharing that email across every campaign. Idempotent: a repeat call with the same valid token always 200s.
Request
- Base URL: https://api.coldrig.dev
- URL: https://api.coldrig.dev/unsubscribe
- Auth: none required
Query parameters
The account id this signed opt-out link belongs to.
The recipient address this signed opt-out link covers.
HMAC-SHA256 over tenant:email, keyed off a server secret. There is no per-send row backing this — the signature itself is the entire credential, and it never expires (an opt-out doesn't need to).
Response
Unsubscribed (or already was — idempotent).
Changes
No recorded changes to this operation across all 2 revisions of this API.