---
title: "Get Mailbox Warmup Analytics"
method: GET
path: "/mailboxes/{mailbox_id}/warmup"
tags: ["GTM Context"]
---

# Get Mailbox Warmup Analytics

`GET /mailboxes/{mailbox_id}/warmup`

## Request

- Base URL: `https://be.graph8.com/api/v1`
- URL: `https://be.graph8.com/api/v1/mailboxes/{mailbox_id}/warmup`
- Auth: HTTP bearer

Get live warmup analytics for a single mailbox.

Wraps the existing ``GET /warmup/{mailbox_id}/analytics`` flow so MCP
(API-key auth) can read warmup engagement / reputation without going
through cookie-based session auth.

Behavior:
    - Looks up the mailbox in the API user's org schema. 404 if missing
      or deleted. Tenant isolation comes from the per-org schema bind,
      NOT from a row-level predicate.
    - Hits the configured warmup provider (Instantly or SmartLead) over
      HTTP — slow (~300-800ms typical). For warm bulk reads use
      ``list_mailboxes`` and check the cheap DB-level ``warmup_status``.
    - Returns ``{success, warmup_enabled, provider, analytics, warmup_settings}``
      — same shape as the internal /warmup/{id}/analytics endpoint.

Backwards-compat: this is a brand-new route. The internal
/warmup/{id}/analytics (cookie auth) is unchanged.

Historical bug (fixed 2026-05-24, same root cause as list_mailboxes
above): the previous implementation appended
``(t.org_id = :org_id OR m.created_by = :user_id)`` to the WHERE. Both
halves match zero rows in prod — ``mailboxes.team_id`` is NULL on every
row (no team pinning) and ``mailboxes.created_by`` stores email strings,
not propelauth UUIDs. Result: every warmup-analytics call 404'd even
for mailboxes that ``list_mailboxes`` happily returned. Dropping the
predicate restores parity; schema bind is the tenant boundary.

## Path parameters

- `mailbox_id` integer, required

## Headers

- `Authorization` string, nullable
- `X-Target-Org-Id` string, nullable

## Response `200`

Successful Response

- ApiResponseDict
  - `data` object, required
  - `pagination` PaginationMeta
    - `page` integer, required: Current page number (1-indexed)
    - `limit` integer, required: Items per page
    - `total` integer, required: Total number of items
    - `has_next` boolean, required: Whether there are more pages
    - `next_cursor` string, nullable: Opaque cursor for the next page; null when there are no more items. Pass it back as the `cursor` query param to fetch the following page without computing page numbers.
    - `total_available` integer, nullable: Search endpoints only: how many records really match, when known. Can be larger than `total`, which is capped at the 10,000 results that can be paged. For company search this is a distinct-company estimate. Null when unknown; absent outside search.
    - `total_is_lower_bound` boolean, nullable: Search endpoints only: true when more records match than `total` shows (the result set is larger than the 10,000 results that can be paged). Absent outside search.
    - `notes` string[], nullable: Search endpoints only: plain-language notes about the result, e.g. that more records match than can be paged, or that a reversed `between` range was put in order.

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/graph8/apis/graph8-developer-api.md) · [All operations](https://skmtc.dev/graph8/apis/graph8-developer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/graph8/apis/graph8-developer-api/revisions/2e7cfa0ca921?raw)