---
title: "Replace a list's email guest list"
method: PUT
path: "/api/v1/lists/{id}/allowed-emails"
tags: ["lists"]
---

# Replace a list's email guest list

`PUT /api/v1/lists/{id}/allowed-emails`

## Request

- Base URL: `https://www.listdrop.co`
- URL: `https://www.listdrop.co/api/v1/lists/{id}/allowed-emails`
- Auth: OAuth 2 (authorization code, authorization URL `https://www.listdrop.co/oauth/authorize`, token URL `https://www.listdrop.co/api/oauth/token`, scopes: `lists:write`)

Replaces the set of addresses allowed to VIEW this private list (view-only; never edit rights). An empty array removes the gate — the list goes back to plain private. Owner only. Guests verify an allowlisted address at the list's URL via a mailed one-time link; no account needed. Cap: 20 addresses.

## Path parameters

- `id` string, required

## Request body

- object
  - `emails` string[], required

## Response `200`

The new guest list.

- AllowedEmails
  - `listId` string, required
  - `emails` string[], required: The current guest list; empty = the list is not email-gated.

## Other responses

- `400`: Invalid or too many addresses.
- `401`: Missing/invalid bearer token, or missing the lists:write scope.
- `404`: List not found, or the account isn't its owner.

---

[API](https://skmtc.dev/listdrop/apis/listdrop-public-api.md) · [All operations](https://skmtc.dev/listdrop/apis/listdrop-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/listdrop/apis/listdrop-public-api/revisions/699b5367e2f3?raw)