No tracking runs without JavaScript.

Skip to content
SendtierDocs

Receiving

Codes, links and attachments

Read the message, take the extracted code or link, download raw mail and files.

Receiving is implemented; public availability is not confirmed today.

Read a message

curl https://api.sendtier.com/v1/inboxes/ibx_MZXW6YTBOI/messages/msg_MZXW6YTBOI \
  -H "Authorization: Bearer $SENDTIER_API_KEY"

Codes are in extracted.codes[].value, links in extracted.links[].url. Both can be empty. Check the sender first: extraction does not prove a message is trusted.

{
  "subject": "Verify your account",
  "authentication": {"spf": "pass", "dkim": "pass", "dmarc": "pass"},
  "extracted": {
    "codes": [{"value": "123456", "raw": "123456", "confidence": 90}],
    "links": [{"url": "https://example.com/verify?token=example", "kind": "verification"}]
  }
}

Download raw mail and attachments

curl https://api.sendtier.com/v1/inboxes/ibx_MZXW6YTBOI/messages/msg_MZXW6YTBOI/raw \
  -H "Authorization: Bearer $SENDTIER_API_KEY" \
  --output message.eml

curl https://api.sendtier.com/v1/inboxes/ibx_MZXW6YTBOI/messages/msg_MZXW6YTBOI/attachments/0 \
  -H "Authorization: Bearer $SENDTIER_API_KEY" \
  --output welcome.txt

The downloads contain bytes, not JSON or public storage links. A full raw-read limit returns 503; retry with backoff.

Give a reader one inbox

Keep the full key on your server and create an inbox key for the reader. It can only read that inbox: messages, waits, downloads and threads.

curl https://api.sendtier.com/v1/api-keys \
  -H "Authorization: Bearer $SENDTIER_API_KEY" \
  -H 'Content-Type: application/json' \
  --data '{"name":"Signup reader","mode":"live","scope":"inbox","inbox_id":"ibx_MZXW6YTBOI"}'

Save the new key now; its secret is shown once. Its mode must match the inbox. Access binds to the inbox ID, so recreating its address does not transfer access.

Delete a message

Delete a message with a full key; 204 makes it unreadable. Pending webhooks fail with message_deleted; a delivery already in progress may still send its original metadata once.

List messages · Retrieve a message · Download raw mail · Download an attachment.