Anonymous read of a public inbox's recent messages
No authentication. Only works for inboxes created with POST /inboxes {"public": true}. Inboxes are private by default, and this is the only way to read one without a key. Use it for demos and shared fixtures, never for real user signups: anyone who knows the address can read the OTPs. Custom-domain (BYOD) inboxes can never be resolved here even if is_public were somehow forced true directly in the database: the read path also requires the address to parse as a bare shared-domain (MAIL_DOMAIN) address with no bound Domain.
Every miss (unknown address, private inbox, disabled, deleted, malformed address, or a custom-domain address) returns the SAME 404 not_found body, so this endpoint can never be used to enumerate which addresses exist.
The response includes otp and magic_link with the summary fields (from, to, cc, subject, received_at). It never includes text, html, links, otp_context, otp_candidates or metadata.
Request
- Base URL: https://dash.mailsocket.app/api/v1
- URL: https://dash.mailsocket.app/api/v1/public/emails/{email}/messages
- Auth: none required
Path parameters
A shared-domain email address, e.g. someone@in.inboxpipe.net. Any other shape (missing/extra @, non-shared domain, invalid local part) returns 404, the same as an unknown address.
Query parameters
Page size, 1 to 20. Default 20.
Response
Up to limit newest messages, newest first.
Changes
No recorded changes to this operation across all 1 revision of this API.