---
title: "Add an inbound sender-allowlist entry"
method: POST
path: "/v1/mailboxes/{mailboxId}/inbound-allowlist"
tags: ["inbound-firewall"]
---

# Add an inbound sender-allowlist entry

`POST /v1/mailboxes/{mailboxId}/inbound-allowlist`

## Request

- Base URL: `https://api.replylayer.ai`
- URL: `https://api.replylayer.ai/v1/mailboxes/{mailboxId}/inbound-allowlist`
- Auth: HTTP bearer

## Path parameters

- `mailboxId` string, required

## Request body

- object
  - `email` string, required

## Response `200`

Success

- object
  - `added_by_actor_id` string, nullable
  - `added_by_actor_type` string, nullable
  - `already_existed` boolean, required
  - `created_at` string, nullable, required
  - `email` string, required
  - `mailbox_id` string, required
  - `pattern_type` 'email' | 'domain'

## Other responses

- `400`: Validation error
- `401`: Missing or invalid API key
- `403`: Forbidden
- `404`: Not found
- `429`: Rate limited
- `500`: Internal error (code: INTERNAL_ERROR)

---

[API](https://skmtc.dev/replylayer/apis/replylayer-api.md) · [All operations](https://skmtc.dev/replylayer/apis/replylayer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/replylayer/apis/replylayer-api/revisions/2cae6fbd127e?raw)
