---
title: "List mailboxes"
method: GET
path: "/api/mailboxes"
tags: ["Mailboxes"]
---

# List mailboxes

`GET /api/mailboxes`

## Request

- Base URL: `https://api.sendly.now`
- URL: `https://api.sendly.now/api/mailboxes`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `better-auth.session_token`
  - OAuth 2 (authorization code, authorization URL `https://app.sendly.now/api/auth/oauth2/authorize`, token URL `https://app.sendly.now/api/auth/oauth2/token`, scopes: `mailboxes:read`)

Every mailbox on the authenticated project's domains, newest first. Not paginated: a project is capped at ten mailboxes, and the cap counts only those holding — or on their way to holding — a real account (`PROVISIONING`, `ACTIVE`, `SUSPENDED`). `FAILED` rows do not consume the cap but ARE returned here, so a project that has had failed provisions can list more than ten.

This lists the mailboxes themselves, never their contents: the messages a mailbox has received are not part of the public API and are not covered by this scope.

Requires the `mailboxes:read` scope — View the mailboxes on your domains and their settings.

## Response `200`

Mailbox list

- object
  - `data` Mailbox[], required
    - `address` string, email, required: The full mailbox address, e.g. `support@superbooks.io`.
    - `createdAt` string, date-time, required
    - `displayName` string, nullable, required
    - `domainId` string, uuid, required: The verified domain this mailbox lives on.
    - `id` string, uuid, required
    - `quotaBytes` number, nullable, required: Always null. Mailbox quotas are not implemented — the value was never applied to the mail account — so this field reports the absence rather than a number nothing enforces.
    - `status` 'PROVISIONING' | 'ACTIVE' | 'SUSPENDED' | 'FAILED', required: `PROVISIONING` while the mail account is being created, `ACTIVE` once it can receive, `SUSPENDED` when receiving is paused, `FAILED` when provisioning did not complete. A `FAILED` mailbox can be re-created with the same address — the retry reclaims the row.
  - `success` true, required

## Other responses

- `400`: Validation error
- `401`: Unauthorized — missing or invalid auth
- `403`: Forbidden — insufficient permissions or project disabled
- `429`: Rate limit or billing limit exceeded
- `500`: Internal server error

---

[API](https://skmtc.dev/sendly/apis/sendly-api.md) · [All operations](https://skmtc.dev/sendly/apis/sendly-api/llms.txt) · [OpenAPI document](https://skmtc.dev/sendly/apis/sendly-api/revisions/ce7cfb7f7c7e?raw)