Skip to main content
Returns every mailbox your organization owns. This is usually the first call an integration makes, because every other endpoint takes an address and this is where the valid ones come from.
Required permission: Mailboxes → Read (mailboxes:read)

Request

This endpoint takes no parameters. It returns every mailbox on the organization the key belongs to — there is no pagination, because an organization has tens of mailboxes, not thousands.

Response

array
Every mailbox the organization owns, sorted by address.
Both non-active and Private mailboxes are listed. Filtering them out would be worse than including them: an integration would report a mailbox as missing when it exists and is simply unreadable, or not ready yet. mode and status tell you which endpoints will accept it.

Errors

A key with no permissions at all — possible only for keys created before permissions existed — authenticates and then fails here with forbidden. The key list in Settings → API keys marks those; revoke and recreate them. See Errors for the full response shape.