---
title: "Get allow and block lists"
method: GET
path: "/mailboxes/{address}/lists"
tags: ["Lists"]
---

# Get allow and block lists

`GET /mailboxes/{address}/lists`

## Request

- Base URL: `https://faivelo.com/api/v1`
- URL: `https://faivelo.com/api/v1/mailboxes/{address}/lists`
- Auth: HTTP bearer

The mailbox's four lists. An entry is an email address or a domain (which also covers its subdomains). In both directions a block entry always wins, and once an allow list has any entry, only what it names gets through.

**Send lists** are checked on every send through the API and MCP, scheduled sends included: a recipient they turn away is a 403 and nothing is sent. They do not restrict a person sending from webmail or a mail app.

**Receive lists** are enforced by the mail server at delivery: mail they turn away is filed in Junk instead of the inbox, and causes no `message.received` webhook.

Requires scope `mailboxes:read`.

## Path parameters

- `address` string, required

## Response `200`

The lists

- object
  - `success` boolean
  - `data` MailboxLists
    - `send` object: Who this mailbox may send to through the API and MCP
      - `allow` string[]: Addresses or domains. Once this has any entry, only what it names gets through.
      - `block` string[]: Addresses or domains that are always turned away
    - `receive` object: Whose mail reaches this mailbox's inbox
      - `allow` string[]: Addresses or domains. Once this has any entry, only what it names gets through.
      - `block` string[]: Addresses or domains that are always turned away

## Other responses

- `401`: Missing or invalid API key
- `402`: The account's plan does not include the API (`plan_required`)
- `403`: The key lacks the required scope
- `404`: Resource not found
- `429`: Rate limit exceeded

---

[API](https://skmtc.dev/faivelo/apis/faivelo-api.md) · [All operations](https://skmtc.dev/faivelo/apis/faivelo-api/llms.txt) · [OpenAPI document](https://skmtc.dev/faivelo/apis/faivelo-api/revisions/a7413ddea5d1?raw)