---
title: "Start a mailbox connect for a new sender profile"
method: POST
path: "/api/sender-profiles/start-email-connect"
tags: ["sender_profiles"]
---

# Start a mailbox connect for a new sender profile

`POST /api/sender-profiles/start-email-connect`

## Request

- Base URL: `https://beta.getsales.io/unibox/v1`
- URL: `https://beta.getsales.io/unibox/v1/api/sender-profiles/start-email-connect`
- Auth: HTTP bearer and API key in header `Team-SID`

Start connecting a NEW mailbox at TEAM level: gtm mints a one-time hosted link where the OAuth consent or the IMAP form runs, never here. provider pins that page to one flow (google, microsoft, imap_smtp); omitted, the page shows gtm's own picker. A sender profile named after the mailbox is born from the email-accounts.connected delivery. Use start_sender_profile_mailbox_connect to land the mailbox on a sender profile that already exists. 501 while the email half of the bridge is unconfigured.

Contract:
- MCP tool `start_new_sender_profile_mailbox_connect`, registry package `mcp.unibox/sender_profiles`, mount `unibox.sender-profiles`.
- Operation `action`, response envelope `action`.
- Flags: none.

## Request body

- StartNewSenderProfileMailboxConnectRequest: Request body of `start_new_sender_profile_mailbox_connect`.
  - `provider` 'google' | 'microsoft' | 'imap_smtp', nullable: Pins gtm's hosted page to one flow: google or microsoft run the OAuth consent, imap_smtp shows the credentials form. Omitted, the page shows gtm's own picker.
  - `success_redirect_url` string, uri, nullable: Where gtm sends the human once the mailbox is connected. gtm follows it only for allow-listed hosts.

## Response `200`

`action` success envelope.

- StartNewSenderProfileMailboxConnectResponse
  - `success` true, required
  - `operation` 'action', required
  - `action` string, required: kebab-case verb; matches the route segment.
  - `item` object, nullable, required
  - `result` object, required
    - `connect_url` string, required: gtm's one-time hosted page: the OAuth consent or the IMAP form runs there, never here.
    - `connect_url_expires_at` string, nullable, required: ISO 8601 UTC expiry of the link.
  - `meta` object, required
    - `trace_id` string, required: UUID v7; same 128-bit value as the X-Trace-Id header.
    - `span_id` string, required: 16 hex chars, root span of this request.
    - `timestamp` string, required: ISO 8601 UTC (Y-m-dTH:i:sZ), response time.
    - `duration_ms` integer, required: Server-side wall clock.
    - `team_sid` string, nullable: The team this call ran in (the token team, or the team_sid override). Null when unauthenticated; absent from pre-2026-08-20 backends.
    - `actor_type` string, nullable: user | agent | api_key | system. Null when unauthenticated; absent from pre-2026-08-20 backends.

## Other responses

- `4XX`: MCP error envelope. `error.code` is one of validation_failed, nothing_to_update, not_found, relation_not_found, invalid_transition, limit_exceeded, payment_required, duplicate_rejected, conflict, delete_blocked, unauthorized, forbidden, rate_limited, not_implemented.
- `5XX`: MCP error envelope with `error.code` internal_error or service_unavailable.

---

[API](https://skmtc.dev/getsales/apis/getsales-public-contract-gs-service-unibox.md) - [All operations](https://skmtc.dev/getsales/apis/getsales-public-contract-gs-service-unibox/llms.txt) - [OpenAPI document](https://skmtc.dev/getsales/apis/getsales-public-contract-gs-service-unibox/revisions/8f1bc317897f?raw)