Start for free
Accounts

Remove a verified recipient

DELETE
/api/v1/accounts/{accountId}/verified-recipients/{recipientId}

Removes the address from the account's list, pending or verified; every link mailed for it stops working. Adding it again starts over with a new link. Reachable by the account's own key or a system key.

Authorization

bearerAuth
headerAuthorizationBearer <token>

Two credential kinds share this scheme; GET /api/v1/auth/whoami answers which one you hold and what it reaches.

oek_… API key (minted by POST /api/v1/api-keys; shown once at mint). role: account reaches the full account surface: the directory (domains, routes, patterns, api-keys, accounts, address lists) plus every mailbox the account owns. role: system additionally reaches the operator surface, which is documented separately.

oemp_… mailbox app password (minted by POST /api/v1/identities/{identityId}/credentials). Reaches ONE mailbox: its messages, labels, threads, search, sync, send, filters and PIM collections. Directory routes refuse it with 403 insufficient_scope.

Refusal vocabulary: a missing, malformed, expired, or revoked credential answers 401 unauthorized with a WWW-Authenticate: Bearer challenge; a VALID credential outside its scope answers 403 (insufficient_scope for an app password on a directory route, system_credentials_required where only the operator may call). The public routes (health, branding, token-in-path capabilities) declare security: [].

Path Parameters

accountId*string

Account ULID identifier

recipientId*string

Verified recipient ULID

Response Body

Removed

application/json
  1. response
deleted*boolean

True if the resource was successfully deleted

Example Request
curl -X DELETE 'https://api.open.email/api/v1/accounts/string/verified-recipients/string'
Example Response
{
  "deleted": true
}

List an account's verified recipients GET

Every outside address this account has asked to send to, pending or verified, oldest first. Addresses on the account's own domains are always verified…

Verified recipient confirmation link (the page) GET

Public. Renders the page a verified recipient's confirmation link opens: the address, and a Confirm button whose form POSTs to the same URL. A GET never…