InboxReader
Start free
Help Center

Developers

How API access works

Read messages and the latest verification code from your own scripts.

Create an API key in Dashboard → API. The key starts with ibl_live_ and is shown only once — InboxReader stores only a hash of it.

Authentication

curl https://your-domain/api/v1/otp/latest \
  -H "Authorization: Bearer ibl_live_..."

Endpoints

  • GET /api/v1/mailboxes — connected mailboxes and their status.
  • GET /api/v1/messages — recent messages (mailbox, folder, limit, before, q).
  • GET /api/v1/messages/latest — the newest message including its text body.
  • GET /api/v1/otp/latest — the most recent detected verification code (mailbox, sender, maxAgeMinutes).

Limits

Each plan has a daily request quota and a per-minute rate limit. Responses include X-RateLimit-* headers; exceeding a limit returns HTTP 429 with a Retry-After header. Poll no more often than every few seconds.

An API key can read every mailbox on your account. Keep keys in a secret manager or environment variable, never in client-side code, and revoke keys you no longer use.

Related articles