---
title: "Update a mailbox's inbound sender-policy mode"
method: PATCH
path: "/v1/mailboxes/{mailboxId}/sender-policy"
tags: ["inbound-firewall"]
---

# Update a mailbox's inbound sender-policy mode

`PATCH /v1/mailboxes/{mailboxId}/sender-policy`

## Request

- Base URL: `https://api.replylayer.ai`
- URL: `https://api.replylayer.ai/v1/mailboxes/{mailboxId}/sender-policy`
- Auth: HTTP bearer

## Path parameters

- `mailboxId` string, required

## Request body

- object
  - `force_empty` boolean
  - `mode` 'blocklist' | 'allowlist', required

## Response `200`

Success

- object
  - `changed_at` string, required
  - `mailbox_id` string, required
  - `previous_mode` 'blocklist' | 'allowlist', required
  - `sender_policy_mode` 'blocklist' | 'allowlist', required

## Other responses

- `400`: Validation error
- `401`: Missing or invalid API key
- `403`: Forbidden
- `404`: Not found
- `409`: Conflict
- `429`: Rate limited (code: RATE_LIMITED)
- `500`: Internal error (code: INTERNAL_ERROR)

---

[API](https://skmtc.dev/replylayer/apis/replylayer-api.md) · [All operations](https://skmtc.dev/replylayer/apis/replylayer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/replylayer/apis/replylayer-api/revisions/2cae6fbd127e?raw)