Authentication - Temp Mail Lab API

Send an API key as a bearer token on every request:

Authorization: Bearer YOUR_API_KEY

Create, rotate, and revoke keys from the dashboard. A key is shown only when it is created or rotated.

Scopes

Scope	Allows
`domains:read`	List available domains.
`emails:write`	Create inboxes.
`emails:read`	Read inboxes and list their messages.
`messages:read`	Read messages, source, and attachments.
`usage:read`	Read account usage.

Give each integration only the scopes it uses. Call the API from your backend or test runner, and never put a key in a URL, client-side bundle, or log.

Authentication errors

Status	Meaning
`401`	The key is missing, malformed, revoked, or invalid.
`403`	The key is valid but lacks the required scope or account access.

Neither response consumes request allowance.

Last modified on August 18, 2026