# List an identity's addresses

Returns every address routed to this identity — what it may be addressed AT, for matching an iCalendar ATTENDEE or ORGANIZER line. Distinct from /auth/verify's permittedFrom, which is the sendability contract and carries tag patterns.

## `GET /api/v1/identities/{identityId}/addresses`

### Path parameters

- `identityId` (string, required) — Identity ULID identifier

### Responses

**200** — The identity's addresses

`application/json` → IdentityAddresses

- `addresses` (string[], required) — Lowercased addresses routed to this identity — its primary address first, then its route rows, deduplicated. Empty for an identity with no addresses at all (a calendar-only identity), which is an honest answer and not an error

**401** — unauthorized: the bearer credential is missing, malformed, expired, or revoked. Carries a `WWW-Authenticate: Bearer` challenge

`application/json` → ErrorBody

**404** — Identity not found or not accessible to this principal

`application/json` → ErrorBody

**503** — temporary_failure: the identity's account could not answer its addresses just now (under the object directory); retry after the Retry-After window

`application/json` → ErrorBody

### Example request

```bash
curl -X GET 'https://api.open.email/api/v1/identities/{identityId}/addresses' \
  -H 'Authorization: Bearer oek_…'
```