---
title: "List inboxes the key can read"
method: GET
path: "/v1/inboxes"
tags: ["Directory"]
---

# List inboxes the key can read

`GET /v1/inboxes`

## Request

- Base URL: `https://api.slashy.com`
- URL: `https://api.slashy.com/v1/inboxes`
- Auth: HTTP bearer

Every inbox the key can read. Use these ids as `inbox_id` elsewhere.

**Scope:** `directory.read`. **Rate limit class:** `read` (600/minute per key).

## Response `200`

OK

- InboxList
  - `inboxes` Inbox[], required
    - `id` string, uuid, required: Pass as `inbox_id` to other endpoints.
    - `email` string, required: The inbox's address.
    - `owner_email` string, required: Login email of the member who owns the inbox (lowercase).

## Other responses

- `401`: Missing, malformed, unknown, revoked or expired API key. `error` is one of: `invalid_api_key`, `api_key_revoked`, `api_key_expired`.
- `403`: The key is valid but may not make this call. `error` is one of: `browser_not_allowed`, `ip_not_allowed`, `not_enterprise`, `key_owner_inactive`, `insufficient_scope`.
- `429`: Too many requests. Wait `Retry-After` seconds, then retry. `error` is one of: `too_many_auth_failures`, `rate_limited`, `too_many_concurrent_requests`.

---

[API](https://skmtc.dev/slashy/apis/slashy-enterprise-api.md) - [All operations](https://skmtc.dev/slashy/apis/slashy-enterprise-api/llms.txt) - [OpenAPI document](https://skmtc.dev/slashy/apis/slashy-enterprise-api/revisions/49841c75ad9f?raw)