archived.deletedestructive | Permanently delete an archived mailbox. |
archived.getread-only | Fetch a single archived mailbox by ID. |
archived.listread-only | List the tenant's archived (expired but recoverable) mailboxes. |
archived.reactivate | Reactivate an archived mailbox back to active state. |
attachments.add | Attach a file to a test-injected email (base64 payload). |
attachments.deletedestructive | Delete a single attachment. |
attachments.delete_bulkdestructive | Delete several attachments of one email at once. |
attachments.getread-only | Download an attachment. The file contents are returned base64-encoded in the JSON "data" field. |
attachments.listread-only | List the attachments of an email (metadata only). |
domains.deletedestructive | Delete a registered custom domain. |
domains.listread-only | List the tenant's custom domains with their DNS verification status. |
domains.register | Register a new custom domain. DNS records (TXT token + MX) must then be added before verification can succeed. |
domains.verify | Trigger DNS verification (TXT + MX) of a registered domain. |
identities.create | Create a mock identity bound to a mailbox for OAuth flow testing. |
identities.deletedestructive | Delete a mock identity. |
identities.getread-only | Fetch a single mock identity by ID. |
identities.listread-only | List the tenant's mock identities, optionally filtered by OAuth client or mailbox address. |
identities.update | Update a mock identity: profile fields, isActive (activate/deactivate), emailVerified, and custom claims merged into the ID token and userinfo. |
mailboxes.create | Create a new temporary mailbox. The domain defaults to the tenant's default domain; the owner is always the API key's owner. |
mailboxes.deletedestructive | Delete a mailbox and its contents by ID. |
mailboxes.delete_bulkdestructive | Delete several mailboxes at once by ID. |
mailboxes.getread-only | Fetch a single mailbox by ID. |
mailboxes.listread-only | List the tenant's active mailboxes (owner is derived from the API key). Optionally look up a single mailbox by exact address. |
mails.deletedestructive | Delete a single email. |
mails.delete_bulkdestructive | Delete several emails of one mailbox at once. |
mails.getread-only | Fetch a single email by ID, including body and attachment metadata. |
mails.inject | Inject a simulated inbound email into a mailbox (multipart upload). No external mail is sent; use this to simulate inbound mail for flow testing. |
mails.listread-only | List the emails in a mailbox, newest first. |
oauth.clients.create | Register an OAuth client for mock identity flows. The plaintext clientSecret is returned once at creation. |
oauth.clients.deletedestructive | Delete an OAuth client by its public client ID. |
oauth.clients.getread-only | Fetch a single OAuth client by its public client ID. |
oauth.clients.listread-only | List the tenant's OAuth clients for mock identity testing. |
oauth.clients.rotate_secret | Rotate an OAuth client's secret. The new plaintext secret is returned once. |
team.invitations.create | Create a team invitation for an email address (SMTP invite is sent by the team service). |
team.invitations.deletedestructive | Revoke a team invitation. |
team.invitations.listread-only | List the tenant's team invitations. |
team.members.add | Add a team member directly (no invitation flow). |
team.members.deletedestructive | Remove a team member. |
team.members.getread-only | Fetch a single team member by ID. |
team.members.listread-only | List the tenant's team members. |