Skip to main content

​
Base URL

All product endpoints live under /v1. Requests and responses are JSON.

​
API keys

SentFromAI authenticates with a Bearer API key. Create and revoke keys from the dashboard under API keys. A key looks like:
Pass it on authenticated requests:
Keys grant access to your workspace’s inboxes and mail within its account state and limits. Never ship a key in client-side code or commit it to source control. Store it in an environment variable or a secrets manager.

​
Agent-created accounts

When agent signup is enabled, POST /agent-signups issues an API key and inbox without a prior login. It requires a securely saved high-entropy Idempotency-Key. The account starts unclaimed: receiving and reads work within its limits; sending and other changes wait for a verified human claim. The claim uses a separate secret in a console URL fragment and preserves the original API key and inbox. See Set up your agent. GET /account reports capabilities. POST /account/claim-link refreshes a claim link using the original API key while the unclaimed account remains active. Neither route should be called with the claim token as its bearer key.

​
Key management

  • Multiple keys per workspace — issue a separate key per service or environment.
  • Rotate freely — create a new key, roll it out, then revoke the old one. Revocation is instant.
  • Last-used tracking — the dashboard shows when each key was last seen, so stale keys are easy to spot.

​
Errors

A missing or invalid key returns 401:
See Error handling for the full list of status codes.