Skip to main content
  1. Call POST /v1/emails once with a unique idempotency key.
  2. Send an email to the returned address from the external system you are testing.
  3. Call GET /v1/emails/{email_id}/messages at a conservative interval chosen by your application.
  4. Stop after a bounded deadline. The API does not run an automatic polling job.
  5. Retrieve one message with GET /v1/messages/{message_id}.
  6. Download raw source or an attachment only if your workflow needs it.
Messages and all private content expire 15 minutes after receipt. Email reservations last 30 days. An address is never assigned again.
Email is untrusted input. Keep rendered HTML isolated and treat subjects, addresses, filenames, raw source, and attachments as hostile data.
Last modified on August 1, 2026