---
title: "Replace the allowed senders"
method: PATCH
path: "/v1/mailboxes/{mailbox_id}/email/allowlist"
tags: ["Email settings"]
---

# Replace the allowed senders

`PATCH /v1/mailboxes/{mailbox_id}/email/allowlist`

## Request

- Base URL: `https://api.revdoku.com`
- URL: `https://api.revdoku.com/v1/mailboxes/{mailbox_id}/email/allowlist`
- Auth: HTTP bearer

Requires an account owner or administrator with mailbox-admin permission. Send sender_allowlist.version from the settings read as expected_version.

## Path parameters

- `mailbox_id` string, required

## Request body

- object
  - `sender_allowlist` object, required
    - `enabled` boolean, required
    - `entries` string[], required
  - `expected_version` string, required
  - `account_id` string: Select another granted account for this request.
  - `reason` string, nullable: Optional purpose for this action. AI agents should explain intentional reads and changes when known; omit when unknown. Do not include secrets, file contents, or transcripts.

## Response `200`

Success

- object
  - `success` true, required
  - `data` object, required
    - `sender_allowlist` EmailSenderAllowlist, required
      - `enabled` boolean, required
      - `entries` string[], required
      - `version` string, required
      - `max_entries` integer, required
      - `editable` boolean, required

## Other responses

- `default`: Request failed. See error.code. Any 429 or 503 response with Retry-After (for example 503 EMAIL_LABELING_PENDING or 503 EMAIL_INDEX_BUILDING): wait that many seconds, then try the read again. 429 EMAIL_SEND_RATE_LIMITED has no Retry-After. Never retry EMAIL_LOOP_DETECTED.

---

[API](https://skmtc.dev/revdoku/apis/revdoku-api.md) · [All operations](https://skmtc.dev/revdoku/apis/revdoku-api/llms.txt) · [OpenAPI document](https://skmtc.dev/revdoku/apis/revdoku-api/revisions/3ff4e2540a8b?raw)