Messages

List current messages for an owned email:

curl --fail-with-body \
  --header "Authorization: Bearer $TML_API_KEY" \
  "$TML_API_BASE/v1/emails/$EMAIL_ID/messages?limit=20"

The list returns summaries with sender, recipients, subject, arrival time, expiry time, size, and attachment count. Follow opaque pagination cursors until has_more is false. Retrieve one message only when needed:

curl --fail-with-body \
  --header "Authorization: Bearer $TML_API_KEY" \
  "$TML_API_BASE/v1/messages/$MESSAGE_ID"

The detail response adds parsed text, sanitized HTML, attachment metadata, and an authenticated relative path for raw source. Message content expires 15 minutes after arrival. Missing, expired, and non-owned messages return the same 404. Never use this difference to infer whether another account owns an identifier.

Sanitized HTML remains untrusted email content. Render it in a sandboxed, isolated context with a restrictive Content Security Policy.

Last modified on August 2, 2026

⌘I

Getting started

Core concepts

Requests and reliability

Resources