---
title: "List quarantined messages"
method: GET
path: "/v1/mailboxes/{id}/quarantine"
tags: ["Mailboxes"]
---

# List quarantined messages

`GET /v1/mailboxes/{id}/quarantine`

## Request

- Base URL: `https://api.samva.dev`
- URL: `https://api.samva.dev/v1/mailboxes/{id}/quarantine`
- Auth: API key in header `x-api-key`

Returns the messages this mailbox holds instead of delivering, most recently held first: suspected spam, phishing, fraud, or prompt injection (`quarantined`), and malware (`isolated`). Each is metadata only; a held message appears in no thread, search, or `mailbox.message.received` event until a person releases it. `after` and `before` filter by when the message was held. Needs `quarantine.read`.

## Path parameters

- `id` string, required

## Query parameters

- `limit` string, nullable
- `cursor` string
- `after` string, nullable
- `before` string, nullable

## Response `200`

MailboxQuarantinePage

- MailboxQuarantinePage
  - `items` MailboxQuarantinedMessage[], required
    - `id` string, required
    - `disposition` 'quarantined' | 'isolated', required
    - `reason` 'spam' | 'dmarc' | 'virus' | 'virus_unscanned' | 'phishing' | 'fraud' | 'prompt_injection', required
    - `source` 'receipt' | 'classifier', required
    - `from` object, required
      - `address` string, required
      - `name` string, nullable, required
    - `subject` string, nullable, required
    - `receivedAt` string, required
    - `heldAt` string, required
    - `releasedAt` string, nullable, required
    - `threadId` string, required
    - `discardedAt` string, nullable, required
  - `nextCursor` string, nullable, required

## Other responses

- `401`: UnauthorizedError
- `403`: ForbiddenError
- `404`: ResourceNotFoundError
- `422`: ValidationError
- `500`: InternalError
- `504`: GatewayTimeoutError

---

[API](https://skmtc.dev/samva/apis/samva-api.md) · [All operations](https://skmtc.dev/samva/apis/samva-api/llms.txt) · [OpenAPI document](https://skmtc.dev/samva/apis/samva-api/revisions/a99408542cc3?raw)