---
title: "Send the owner to Microsoft to let Dardaris read a mailbox"
method: GET
path: "/api/v1/mail/oauth/microsoft/start"
tags: ["Desk"]
---

# Send the owner to Microsoft to let Dardaris read a mailbox

`GET /api/v1/mail/oauth/microsoft/start`

## Request

- Base URL: `http://localhost:5180`
- URL: `http://localhost:5180/api/v1/mail/oauth/microsoft/start`
- Auth: API key in cookie `better-auth.session_token`

Redirects the browser to Microsoft’s own sign-in for the address on the mailbox, asking for IMAP, SMTP and a refresh token. The owner types their password at Microsoft and never here. The address that comes back is checked against the mailbox, and only a login that both servers accept is kept. Opened from a page, not called by a script.

## Query parameters

- `mailbox` string, required

## Other responses

- `302`: Microsoft’s sign-in.
- `401`: No session. Sign in first.
- `404`: No such mailbox on this team.
- `422`: The mailbox does not sign in with Microsoft, or this deployment holds no Microsoft sign-in (`details.reason`).

---

[API](https://skmtc.dev/dardaris/apis/dardaris-api.md) · [All operations](https://skmtc.dev/dardaris/apis/dardaris-api/llms.txt) · [OpenAPI document](https://skmtc.dev/dardaris/apis/dardaris-api/revisions/4aff33835c73?raw)