Create an app password
Mint an IMAP/SMTP credential for the mailbox, so a mail client can connect to it.
The secret is not in the response. A delegated caller receives revealUrl — a single-use link that shows the password once in a browser, to a signed-in project admin. The connection that created the password cannot open its own link, and the link is spent by the first attempt to open it, successful or not.
That is deliberate and not a limitation to work around: an app password is a live mail credential that a client authenticates with directly, it outlives the grant that created it, and it is revoked from a different screen. Returning it inline would place a working mail credential in an agent's context, its transcript, and every log that transcript reaches.
Requires an admin of the project. An API key is refused with 401 — this endpoint needs a user, so use an OAuth connection.
Requires the mailboxes:write scope — Create and delete mailboxes on your verified domains.
Request
- Base URL: https://api.sendly.now
- URL: https://api.sendly.now/api/mailboxes/{id}/app-passwords
- Auth: one of:
- API key in cookie better-auth.session_token
- OAuth 2 (authorization code, authorization URL https://app.sendly.now/api/auth/oauth2/authorize, token URL https://app.sendly.now/api/auth/oauth2/token, scopes: mailboxes:write)
Path parameters
Request body
Response
App password created; the secret is behind the one-time link
Changes
No recorded changes to this operation across all 1 revision of this API.