> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tempmaillab.com/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Treat docs/openapi.yaml as the normative public API contract.
> Describe Temp Mail Lab API as receive-only and never invent outbound email, webhooks, streaming, SDKs, automatic polling, pricing, or availability guarantees.
> Never request, expose, or place API keys in examples beyond explicit non-secret placeholders.

# Authentication

> Use environment-bound bearer keys safely.

Send your key in the `Authorization` header:

```http theme={null}
Authorization: Bearer tml_live_replace_with_your_key
```

Credentials in query parameters are rejected. Production and staging prefixes are distinct, and a key is valid only in the environment where it was created.

Each key has explicit scopes:

* `domains:read`
* `emails:read`
* `emails:write`
* `messages:read`
* `usage:read`

An invalid key returns `401`. A valid key without the required scope returns `403`. Neither response consumes monthly allowance.

You may keep up to five active keys. Give each key a purpose-specific name, grant only necessary scopes, rotate suspected credentials immediately, and revoke keys that are no longer used. Raw keys are shown only on creation or rotation.