Skip to main content
InboxKit
LearnGuides

InboxKit API Integration Guide

Mohit Mimani
By Mohit MimaniPublished on: Apr 1, 2026 · 25 min read · Last reviewed: Apr 2026
InboxKit API keys management in dashboard settings
Generate and manage API keys from your InboxKit Dashboard under Settings > API & Integrations for programmatic access to all 70+ endpoints

TL;DR

InboxKit exposes 70+ REST API endpoints across 14 categories including orders, domains, mailboxes, Cloudflare integration, webhooks, DNS, warmup, inbox placement, and more. This guide covers authentication, real request/response examples, rate limits, and a complete endpoint reference for developers and agencies automating email infrastructure at scale.

API Overview and Getting Started

InboxKit provides a comprehensive REST API with 70+ public endpoints across 14 categories, giving you full programmatic control over your email infrastructure. Everything you can do in the dashboard -- ordering domains, provisioning mailboxes, configuring DNS, managing warmup, running inbox placement tests -- you can automate through the API.

API categories at a glance:

CategoryEndpointsWhat It Covers
Orders2Place orders for domain registration + mailbox provisioning
Workspaces6Create, list, update, delete workspaces; configure webhooks
Domains16Search, register, configure forwarding, catch-all, DMARC, nameservers
Cloudflare Domains5Connect, list, disconnect Cloudflare-managed domains
Mailboxes14Create, list, manage credentials, signatures, profile pictures, TOTP
DNSMultipleDNS record management and validation
WarmupMultipleWarmup subscription management
TagsMultipleTag management for organizing resources
Webhooks1Status change notifications
Account1Account details
Inbox PlacementMultipleDeliverability testing and monitoring
InfraGuardMultipleInfrastructure health monitoring
Email Insights14Mailbox analytics and reporting
PrewarmMultiplePre-warming service

Base URL: https://api.inboxkit.com/v1

Getting your API key: 1. Log in to the InboxKit Dashboard at app.inboxkit.com 2. Navigate to Settings > API & Integrations 3. Click Generate New Key 4. Copy the key immediately -- it will not be shown again

Quick test -- verify your API key works:

$Terminal
curl -H "Authorization: Bearer YOUR_API_KEY" \
  https://api.inboxkit.com/v1/api/account

If you receive a 200 response with your account details, you are authenticated and ready to go. Full API reference: docs.inboxkit.com

Workspace-Scoped Operations

Most API operations are workspace-scoped and require the X-Workspace-Id header in addition to your API key. Retrieve your workspace IDs via GET /v1/api/workspaces, then pass the appropriate ID with every request.

Authentication and Rate Limits

All API requests require a Bearer token passed in the Authorization header. Additionally, workspace-scoped operations require the X-Workspace-Id header.

Required headers:

$Terminal
Authorization: Bearer YOUR_API_KEY
Content-Type: application/json
X-Workspace-Id: your-workspace-uid   # Required for workspace-scoped operations

JavaScript example with all required headers:

JSJavaScript
const INBOXKIT_BASE = 'https://api.inboxkit.com/v1';
async function inboxkitRequest(path, options = {}) {
  const response = await fetch(`${INBOXKIT_BASE}${path}`, {
    ...options,
    headers: {
      'Authorization': `Bearer ${process.env.INBOXKIT_API_KEY}`,
      'Content-Type': 'application/json',
      'X-Workspace-Id': process.env.INBOXKIT_WORKSPACE_ID,
      ...options.headers,
    },
  });
  if (response.status === 429) {
    const resetAt = response.headers.get('X-RateLimit-Reset');
    const waitMs = (Number(resetAt) * 1000) - Date.now();
    console.log(`Rate limited. Retrying in ${Math.ceil(waitMs / 1000)}s`);
    await new Promise(r => setTimeout(r, Math.max(waitMs, 1000)));
    return inboxkitRequest(path, options);
  }
  if (!response.ok) {
    const error = await response.json();
    throw new Error(`InboxKit API error ${response.status}: ${JSON.stringify(error)}`);
  }
  return response.json();
}
// Usage
const account = await inboxkitRequest('/api/account');
const workspaces = await inboxkitRequest('/api/workspaces');

Rate limits by operation type:

OperationRate Limit
Standard API calls10 requests/second, 100 requests/minute
Domain availability checks20 requests/hour
Bulk mailbox provisioning5 requests/minute
Reputation monitoring50 requests/hour
  • X-RateLimit-Remaining -- requests left in the current window
  • X-RateLimit-Reset -- Unix timestamp when the window resets

When you exceed a rate limit, the API returns HTTP 429 with these headers. Implement exponential backoff: wait 1 second on the first retry, 2 seconds on the second, 4 on the third, up to a maximum of 60 seconds.

Common error codes:

StatusMeaningAction
401Invalid or missing API keyVerify your Authorization header
403Insufficient permissionsCheck API key scope and workspace access
404Resource not foundVerify the resource ID or path
422Validation errorCheck required fields in request body
429Rate limit exceededWait for X-RateLimit-Reset and retry
500Server errorRetry with exponential backoff

Orders API: Domain Registration and Mailbox Provisioning

The Orders API is the primary way to provision new email infrastructure. A single order can register domains and create mailboxes across Google Workspace, Microsoft 365, and Azure -- all in one API call.

Create an order -- POST /v1/api/orders

$Terminal
curl -X POST https://api.inboxkit.com/v1/api/orders \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -H "X-Workspace-Id: your-workspace-uid" \
  -d '{
    "domains": [
      {
        "name": "outreach-leads.com",
        "redirect_url": "https://yourcompany.com",
        "registration_years": 1,
        "mailboxes": [
          {
            "first_name": "Sarah",
            "last_name": "Johnson",
            "email": "sarah@outreach-leads.com",
            "platform": "GOOGLE"
          },
          {
            "first_name": "Mike",
            "last_name": "Chen",
            "email": "mike@outreach-leads.com",
            "platform": "GOOGLE"
          }
        ]
      },
      {
        "name": "sales-connect.io",
        "redirect_url": "https://yourcompany.com",
        "mailboxes": [
          {
            "first_name": "Lisa",
            "last_name": "Park",
            "email": "lisa@sales-connect.io",
            "platform": "MICROSOFT"
          }
        ]
      }
    ]
  }'

Response:

{ }JSON
{
  "order_id": "550e8400-e29b-41d4-a716-446655440000",
  "status": "queued",
  "domains": [
    { "status": "outreach-leads.com queued" },
    { "status": "sales-connect.io queued" }
  ]
}

Order status lifecycle: An order progresses through these stages:

StatusMeaning
queuedOrder received, waiting to be processed
processingOrder is actively being fulfilled
doneAll domains and mailboxes successfully provisioned
errorOne or more items in the order failed

Per-domain status progression:

queued -> checking_availability -> registering -> waiting_for_activation -> creating_mailboxes -> generating_consent_url -> completed

If something goes wrong, a domain may enter error or warning status.

Track order progress -- GET /v1/api/orders/:id

$Terminal
curl https://api.inboxkit.com/v1/api/orders/550e8400-e29b-41d4-a716-446655440000 \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "X-Workspace-Id: your-workspace-uid"

Response:

{ }JSON
{
  "order_id": "550e8400-e29b-41d4-a716-446655440000",
  "status": "processing",
  "created_at": "2026-04-01T10:00:00Z",
  "workspace": "your-workspace-uid",
  "domains": [
    {
      "name": "outreach-leads.com",
      "status": "creating_mailboxes",
      "mailboxes": [
        { "email": "sarah@outreach-leads.com", "status": "provisioning" },
        { "email": "mike@outreach-leads.com", "status": "provisioning" }
      ]
    },
    {
      "name": "sales-connect.io",
      "status": "waiting_for_activation",
      "mailboxes": []
    }
  ]
}

Order request body fields:

FieldRequiredDescription
domains[].nameYesDomain name to register
domains[].redirect_urlYesURL to redirect the domain to
domains[].mailboxes[].first_nameYesMailbox user first name
domains[].mailboxes[].last_nameYesMailbox user last name
domains[].mailboxes[].emailYesFull email address
domains[].mailboxes[].platformYesGOOGLE, MICROSOFT, or AZURE
domains[].mailboxes[].profile_pic_urlNoURL of profile picture to set
domains[].registration_yearsNoYears to register domain (default: 1)
domains[].contact_detailsNoDomain registrant contact info
domains[].sequencerNoAuto-connect to a sequencer
domains[].consent_screen_urlNoOAuth consent screen URL
contact_detailsNoDefault contact details for all domains

Bulk Provisioning Best Practice

You can include multiple domains with multiple mailboxes each in a single order. However, bulk mailbox provisioning is rate-limited to 5 requests/minute. For large-scale provisioning (50+ domains), submit orders in batches and poll GET /v1/api/orders/:id to track progress.

Domain Management API

The Domains API provides 16 endpoints for complete domain lifecycle management -- from searching available domains through registration, DNS configuration, forwarding, catch-all setup, DMARC, and nameserver management.

Search available domains -- POST /v1/api/domains/search

$Terminal
curl -X POST https://api.inboxkit.com/v1/api/domains/search \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -H "X-Workspace-Id: your-workspace-uid" \
  -d '{ "query": "outreach-leads" }'

Check if a domain is banned -- GET /v1/api/domains/banned/:domain

$Terminal
curl https://api.inboxkit.com/v1/api/domains/banned/spammy-domain.com \
  -H "Authorization: Bearer YOUR_API_KEY"

Check domain availability -- GET /v1/api/domains/availability/:domain

$Terminal
curl https://api.inboxkit.com/v1/api/domains/availability/outreach-leads.com \
  -H "Authorization: Bearer YOUR_API_KEY"

Note: Domain availability checks are rate-limited to 20 requests/hour.

Register domains -- POST /v1/api/domains/register

$Terminal
curl -X POST https://api.inboxkit.com/v1/api/domains/register \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -H "X-Workspace-Id: your-workspace-uid" \
  -d '{
    "domains": ["outreach-leads.com", "sales-connect.io"],
    "redirect_url": "https://yourcompany.com",
    "registration_years": 1
  }'

List domains -- POST /v1/api/domains/list

$Terminal
curl -X POST https://api.inboxkit.com/v1/api/domains/list \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -H "X-Workspace-Id: your-workspace-uid" \
  -d '{ "page": 1, "limit": 50 }'

Configure domain forwarding -- POST /v1/api/domains/forwarding

$Terminal
curl -X POST https://api.inboxkit.com/v1/api/domains/forwarding \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -H "X-Workspace-Id: your-workspace-uid" \
  -d '{
    "domain": "outreach-leads.com",
    "redirect_url": "https://yourcompany.com"
  }'

Set catch-all email -- POST /v1/api/domains/catch-all

$Terminal
curl -X POST https://api.inboxkit.com/v1/api/domains/catch-all \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -H "X-Workspace-Id: your-workspace-uid" \
  -d '{
    "domain": "outreach-leads.com",
    "email": "catchall@outreach-leads.com"
  }'

Set DMARC configuration -- POST /v1/api/domains/dmarc

$Terminal
curl -X POST https://api.inboxkit.com/v1/api/domains/dmarc \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -H "X-Workspace-Id: your-workspace-uid" \
  -d '{
    "domain": "outreach-leads.com",
    "policy": "quarantine",
    "rua": "mailto:dmarc-reports@outreach-leads.com"
  }'

Nameserver management:

$Terminal
# Get nameservers for a domain
curl -X POST https://api.inboxkit.com/v1/api/domains/nameservers \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -H "X-Workspace-Id: your-workspace-uid" \
  -d '{ "domain": "outreach-leads.com" }'
# Check nameserver propagation
curl -X POST https://api.inboxkit.com/v1/api/domains/nameservers/check \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -H "X-Workspace-Id: your-workspace-uid" \
  -d '{ "domain": "outreach-leads.com" }'
# Regenerate nameservers
curl -X POST https://api.inboxkit.com/v1/api/domains/nameservers/regenerate \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -H "X-Workspace-Id: your-workspace-uid" \
  -d '{ "domain": "outreach-leads.com" }'

All 16 domain endpoints:

MethodEndpointDescription
POST/v1/api/domains/searchSearch available domains
GET/v1/api/domains/banned/:domainCheck if domain is banned
GET/v1/api/domains/availability/:domainCheck domain availability
POST/v1/api/domains/registerRegister domains
POST/v1/api/domains/listList domains
GET/v1/api/domains/assignableList assignable domains
POST/v1/api/domains/removeRemove domains
POST/v1/api/domains/forwardingSet domain forwarding
POST/v1/api/domains/catch-allSet catch-all email
DELETE/v1/api/domains/catch-allRemove catch-all email
POST/v1/api/domains/nameserversGet nameservers
POST/v1/api/domains/nameservers/checkCheck NS propagation
POST/v1/api/domains/workspace-availabilityCheck workspace availability
POST/v1/api/domains/dmarcSet DMARC configuration
DELETE/v1/api/domains/dmarcRemove DMARC configuration
POST/v1/api/domains/nameservers/regenerateRegenerate nameservers

Mailbox Operations API

The Mailboxes API provides 14 endpoints covering the full mailbox lifecycle -- creation, credential management, signatures, profile pictures, password changes, TOTP generation, and more.

List mailboxes -- POST /v1/api/mailboxes/list

$Terminal
curl -X POST https://api.inboxkit.com/v1/api/mailboxes/list \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -H "X-Workspace-Id: your-workspace-uid" \
  -d '{ "page": 1, "limit": 50 }'

Buy mailboxes -- POST /v1/api/mailboxes/buy

$Terminal
curl -X POST https://api.inboxkit.com/v1/api/mailboxes/buy \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -H "X-Workspace-Id: your-workspace-uid" \
  -d '{
    "domain": "outreach-leads.com",
    "mailboxes": [
      {
        "first_name": "Alex",
        "last_name": "Rivera",
        "email": "alex@outreach-leads.com",
        "platform": "GOOGLE"
      }
    ]
  }'

Get mailbox details -- GET /v1/api/mailboxes/:id

$Terminal
curl https://api.inboxkit.com/v1/api/mailboxes/mailbox-uuid-here \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "X-Workspace-Id: your-workspace-uid"

Show mailbox credentials -- GET /v1/api/mailboxes/:id/credentials

$Terminal
curl https://api.inboxkit.com/v1/api/mailboxes/mailbox-uuid-here/credentials \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "X-Workspace-Id: your-workspace-uid"

This returns SMTP/IMAP credentials needed to connect the mailbox to sequencers like Instantly, SmartLead, or Apollo.

Add or update mailbox signature -- POST /v1/api/mailboxes/signature

$Terminal
curl -X POST https://api.inboxkit.com/v1/api/mailboxes/signature \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -H "X-Workspace-Id: your-workspace-uid" \
  -d '{
    "mailbox_id": "mailbox-uuid-here",
    "signature": "<p>Sarah Johnson</p><p>Sales Director | YourCompany</p><p><a href=\"https://yourcompany.com\">yourcompany.com</a></p>"
  }'

Update profile picture -- POST /v1/api/mailboxes/:id/profile-picture

$Terminal
curl -X POST https://api.inboxkit.com/v1/api/mailboxes/mailbox-uuid-here/profile-picture \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -H "X-Workspace-Id: your-workspace-uid" \
  -d '{ "profile_pic_url": "https://yourcdn.com/photos/sarah.jpg" }'

Change mailbox password -- POST /v1/api/mailboxes/:id/password

$Terminal
curl -X POST https://api.inboxkit.com/v1/api/mailboxes/mailbox-uuid-here/password \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -H "X-Workspace-Id: your-workspace-uid" \
  -d '{ "new_password": "newSecurePassword123!" }'

Change username -- POST /v1/api/mailboxes/:id/username

$Terminal
curl -X POST https://api.inboxkit.com/v1/api/mailboxes/mailbox-uuid-here/username \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -H "X-Workspace-Id: your-workspace-uid" \
  -d '{ "new_username": "sarah.j" }'

Generate TOTP -- GET /v1/api/mailboxes/:id/totp

$Terminal
curl https://api.inboxkit.com/v1/api/mailboxes/mailbox-uuid-here/totp \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "X-Workspace-Id: your-workspace-uid"

All 14 mailbox endpoints:

MethodEndpointDescription
POST/v1/api/mailboxes/listList mailboxes
POST/v1/api/mailboxes/buyBuy new mailboxes
GET/v1/api/mailboxes/:idGet mailbox details
GET/v1/api/mailboxes/:id/credentialsShow credentials (SMTP/IMAP)
POST/v1/api/mailboxes/:id/updateUpdate mailbox settings
POST/v1/api/mailboxes/signatureAdd/update email signature
POST/v1/api/mailboxes/signature/deleteDelete signature
POST/v1/api/mailboxes/:id/profile-pictureUpdate profile picture
POST/v1/api/mailboxes/:id/usernameChange username
POST/v1/api/mailboxes/:id/passwordChange password
GET/v1/api/mailboxes/:id/totpGenerate TOTP code
GET/v1/api/mailboxes/:id/availabilityCheck mailbox availability
POST/v1/api/mailboxes/statusCheck mailbox status
POST/v1/api/mailboxes/cancelCancel mailboxes

Credential Security

The GET /v1/api/mailboxes/:id/credentials endpoint returns plaintext SMTP and IMAP credentials. Never log these in production. Store them encrypted and transmit only over HTTPS.

Cloudflare Integration API

If you manage domains through Cloudflare, InboxKit provides 5 dedicated endpoints to connect, manage, and disconnect Cloudflare-managed domains without leaving the API.

Connect a Cloudflare domain:

JSJavaScript
// Connect a domain from your Cloudflare account
const result = await inboxkitRequest('/api/cloudflare-domains/connect', {
  method: 'POST',
  body: JSON.stringify({
    zone_id: 'your-cloudflare-zone-id',
    domain: 'outreach-leads.com',
    api_token: 'your-cloudflare-api-token'
  }),
});
console.log(result);
// { status: "connected", domain: "outreach-leads.com" }

List Cloudflare zones:

JSJavaScript
// List available Cloudflare zones to connect
const zones = await inboxkitRequest('/api/cloudflare-domains/zones', {
  method: 'GET',
});
console.log(zones);
// [{ zone_id: "...", name: "outreach-leads.com", status: "active" }, ...]

List connected Cloudflare domains:

JSJavaScript
const domains = await inboxkitRequest('/api/cloudflare-domains/list', {
  method: 'GET',
});

Get Cloudflare domain details:

JSJavaScript
const details = await inboxkitRequest('/api/cloudflare-domains/outreach-leads.com', {
  method: 'GET',
});

Disconnect a Cloudflare domain:

JSJavaScript
await inboxkitRequest('/api/cloudflare-domains/disconnect', {
  method: 'POST',
  body: JSON.stringify({ domain: 'outreach-leads.com' }),
});

Cloudflare integration endpoints summary:

MethodEndpointDescription
POST/v1/api/cloudflare-domains/connectConnect a Cloudflare-managed domain
GET/v1/api/cloudflare-domains/listList connected Cloudflare domains
GET/v1/api/cloudflare-domains/:domainGet Cloudflare domain details
POST/v1/api/cloudflare-domains/disconnectDisconnect a Cloudflare domain
GET/v1/api/cloudflare-domains/zonesList available Cloudflare zones

This is especially useful for agencies that already manage client DNS through Cloudflare. You can connect domains to InboxKit without changing nameservers, since Cloudflare handles DNS propagation.

Webhooks and Status Tracking

InboxKit uses webhooks to push real-time status change notifications to your application. Instead of polling order or mailbox status, configure a webhook URL and receive updates as they happen.

Configure your webhook URL:

Use the workspace webhook endpoint to set your callback URL:

$Terminal
curl -X POST https://api.inboxkit.com/v1/api/workspaces/your-workspace-uid/webhook \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "webhook_url": "https://yourapp.com/webhooks/inboxkit"
  }'

Status change webhook -- POST /v1/api/webhooks/status-change

When domain or mailbox statuses change, InboxKit sends a POST request to your configured webhook URL. This covers order progress, domain registration status, mailbox provisioning, and error notifications.

Webhook handler example (Node.js/Express):

JSJavaScript
const express = require('express');
const app = express();
app.use(express.json());
app.post('/webhooks/inboxkit', (req, res) => {
  const { event, data } = req.body;
  switch (data.status) {
    case 'completed':
      console.log(`Domain ${data.domain} fully provisioned with ${data.mailboxes?.length} mailboxes`);
      // Trigger sequencer connection, CRM update, etc.
      notifyTeam(`Ready: ${data.domain}`);
      break;
    case 'creating_mailboxes':
      console.log(`Mailboxes being created for ${data.domain}`);
      break;
    case 'error':
      console.error(`Error on ${data.domain}: ${data.message}`);
      alertOpsTeam(data);
      break;
    case 'warning':
      console.warn(`Warning on ${data.domain}: ${data.message}`);
      break;
    default:
      console.log(`Status update: ${data.domain} -> ${data.status}`);
  }
  res.sendStatus(200);
});
app.listen(3000);

Polling as a fallback:

If webhooks are not suitable for your architecture, you can poll order status:

JSJavaScript
async function pollOrderUntilComplete(orderId, interval = 10000) {
  while (true) {
    const order = await inboxkitRequest(`/api/orders/${orderId}`);
    if (order.status === 'done') {
      console.log('Order complete:', order);
      return order;
    }
    if (order.status === 'error') {
      throw new Error(`Order failed: ${JSON.stringify(order)}`);
    }
    console.log(`Order status: ${order.status}. Checking again in ${interval / 1000}s...`);
    await new Promise(r => setTimeout(r, interval));
  }
}
const completedOrder = await pollOrderUntilComplete('550e8400-e29b-41d4-a716-446655440000');

Workspace management for multi-tenant setups:

Agencies managing multiple clients can create separate workspaces per client, each with its own webhook URL:

JSJavaScript
// Create a workspace for a new client
const workspace = await inboxkitRequest('/api/workspaces', {
  method: 'POST',
  body: JSON.stringify({
    name: 'Client - Acme Corp',
  }),
});
// Set webhook for this workspace
await inboxkitRequest(`/api/workspaces/${workspace.id}/webhook`, {
  method: 'POST',
  body: JSON.stringify({
    webhook_url: 'https://yourapp.com/webhooks/acme-corp',
  }),
});

All 6 workspace endpoints:

MethodEndpointDescription
GET/v1/api/workspacesList all workspaces
GET/v1/api/workspaces/:idGet workspace details
POST/v1/api/workspacesCreate a new workspace
PUT/v1/api/workspaces/:idUpdate workspace settings
DELETE/v1/api/workspaces/:idDelete a workspace
POST/v1/api/workspaces/:id/webhookSet workspace webhook URL

Webhook Reliability

InboxKit retries failed webhook deliveries with exponential backoff. Your endpoint should return a 2xx status code within 10 seconds. If your endpoint is consistently unreachable, webhook delivery will be paused and you will need to re-enable it from the dashboard.

Complete Endpoint Reference

Below is the full reference of all InboxKit API endpoint categories and their key endpoints. The API currently exposes 70+ public endpoints across 14 categories.

Orders (2 endpoints)

MethodEndpointDescription
POST/v1/api/ordersCreate order for domain registration + mailbox setup
GET/v1/api/orders/:idGet order details with domain/mailbox status

Account (1 endpoint)

MethodEndpointDescription
GET/v1/api/accountGet account details

Webhooks (1 endpoint)

MethodEndpointDescription
POST/v1/api/webhooks/status-changeStatus change webhook callback

Workspaces (6 endpoints)

MethodEndpointDescription
GET/v1/api/workspacesList workspaces
GET/v1/api/workspaces/:idGet workspace details
POST/v1/api/workspacesCreate workspace
PUT/v1/api/workspaces/:idUpdate workspace
DELETE/v1/api/workspaces/:idDelete workspace
POST/v1/api/workspaces/:id/webhookUpdate workspace webhook

Domains (16 endpoints)

MethodEndpointDescription
POST/v1/api/domains/searchSearch available domains
GET/v1/api/domains/banned/:domainCheck if domain is banned
GET/v1/api/domains/availability/:domainCheck domain availability
POST/v1/api/domains/registerRegister domains
POST/v1/api/domains/listList domains
GET/v1/api/domains/assignableList assignable domains
POST/v1/api/domains/removeRemove domains
POST/v1/api/domains/forwardingSet domain forwarding
POST/v1/api/domains/catch-allSet catch-all email
DELETE/v1/api/domains/catch-allRemove catch-all email
POST/v1/api/domains/nameserversGet nameservers for domain
POST/v1/api/domains/nameservers/checkCheck nameserver propagation
POST/v1/api/domains/workspace-availabilityCheck workspace availability
POST/v1/api/domains/dmarcSet DMARC configuration
DELETE/v1/api/domains/dmarcRemove DMARC configuration
POST/v1/api/domains/nameservers/regenerateRegenerate nameservers

Cloudflare Domains (5 endpoints)

MethodEndpointDescription
POST/v1/api/cloudflare-domains/connectConnect Cloudflare domain
GET/v1/api/cloudflare-domains/listList connected Cloudflare domains
GET/v1/api/cloudflare-domains/:domainGet Cloudflare domain details
POST/v1/api/cloudflare-domains/disconnectDisconnect Cloudflare domain
GET/v1/api/cloudflare-domains/zonesList Cloudflare zones

Mailboxes (14 endpoints)

MethodEndpointDescription
POST/v1/api/mailboxes/listList mailboxes
POST/v1/api/mailboxes/buyBuy new mailboxes
GET/v1/api/mailboxes/:idGet mailbox details
GET/v1/api/mailboxes/:id/credentialsShow SMTP/IMAP credentials
POST/v1/api/mailboxes/:id/updateUpdate mailbox
POST/v1/api/mailboxes/signatureAdd/update signature
POST/v1/api/mailboxes/signature/deleteDelete signature
POST/v1/api/mailboxes/:id/profile-pictureUpdate profile picture
POST/v1/api/mailboxes/:id/usernameChange username
POST/v1/api/mailboxes/:id/passwordChange password
GET/v1/api/mailboxes/:id/totpGenerate TOTP
GET/v1/api/mailboxes/:id/availabilityCheck mailbox availability
POST/v1/api/mailboxes/statusCheck mailbox status
POST/v1/api/mailboxes/cancelCancel mailboxes

DNS (multiple endpoints)

CategoryDescription
DNS RecordsRead, validate, and manage DNS records for connected domains

Warmup (multiple endpoints)

CategoryDescription
Warmup SubscriptionsEnable, disable, and manage warmup subscriptions for mailboxes

Tags (multiple endpoints)

CategoryDescription
Tag ManagementCreate, list, update, and delete tags for organizing domains and mailboxes

Inbox Placement (multiple endpoints)

CategoryDescription
Deliverability TestingRun inbox placement tests, check inbox vs. spam placement rates

InfraGuard (multiple endpoints)

CategoryDescription
Infrastructure MonitoringBlacklist monitoring, DNS health checks, reputation tracking

Email Insights (14 endpoints)

CategoryDescription
Mailbox AnalyticsSending volume, bounce rates, engagement metrics, deliverability trends

Prewarm (multiple endpoints)

CategoryDescription
Pre-warming ServicePre-warm domains and mailboxes before ramping up sending volume

For the complete and always-up-to-date endpoint reference with request/response schemas, visit docs.inboxkit.com.

Frequently Asked Questions

The base URL for all InboxKit API requests is https://api.inboxkit.com/v1. All endpoints are prefixed with /v1/api/ followed by the resource category (e.g., /v1/api/orders, /v1/api/domains/list, /v1/api/mailboxes/list).

All requests require an API key sent as a Bearer token in the Authorization header: "Authorization: Bearer YOUR_API_KEY". You can generate API keys from the InboxKit Dashboard under Settings > API & Integrations. Most workspace-scoped operations also require the X-Workspace-Id header.

Standard API calls are limited to 10 requests/second and 100 requests/minute. Domain availability checks allow 20 requests/hour. Bulk mailbox provisioning is limited to 5 requests/minute. Reputation monitoring allows 50 requests/hour. Check X-RateLimit-Remaining and X-RateLimit-Reset response headers to track your usage.

Yes. The POST /v1/api/orders endpoint accepts an array of domains, each with an array of mailboxes. InboxKit handles the entire flow -- domain registration, DNS configuration, and mailbox provisioning -- from a single request. You can mix platforms (GOOGLE, MICROSOFT, AZURE) within the same order.

Use GET /v1/api/mailboxes/:id/credentials with the mailbox UUID. This returns the SMTP host, SMTP port, IMAP host, IMAP port, and app password needed to connect the mailbox to any sequencer or email client. Keep these credentials encrypted -- the endpoint returns them in plaintext.

Configure a webhook URL on your workspace using POST /v1/api/workspaces/:id/webhook. InboxKit will POST status change notifications to that URL as domains and mailboxes progress through provisioning stages (queued, checking_availability, registering, creating_mailboxes, completed, error). Your endpoint should return a 2xx status within 10 seconds.

Yes. InboxKit provides 5 dedicated Cloudflare integration endpoints. You can connect domains by Cloudflare zone, list connected domains, get domain details, and disconnect domains -- all without changing your nameservers since Cloudflare handles DNS.

InboxKit provides 70+ public API endpoints across 14 categories: Orders, Account, Webhooks, Workspaces, Domains (16 endpoints), Cloudflare Domains (5), Mailboxes (14), DNS, Warmup, Tags, Inbox Placement, InfraGuard, Email Insights (14), and Prewarm. Full documentation is at docs.inboxkit.com.

Sources & References

  1. 1InboxKit API Documentation(2026)
  2. 2InboxKit Orders API Reference(2026)
  3. 3InboxKit Domains API Reference(2026)
  4. 4InboxKit Mailboxes API Reference(2026)
  5. 5InboxKit Webhooks Documentation(2026)
  6. 6InboxKit Cloudflare Integration(2026)

Related articles

InboxKitGuides

What is InboxKit? The Cold Email Infrastructure Platform Explained (2026)

Mohit MimaniMohit Mimani
Read guide
InboxKitPricing

InboxKit Pricing: Complete Breakdown and Calculator (2026)

Mohit MimaniMohit Mimani
See breakdown
InboxKitGuides

Agency Cold Email Workflows: Scale Infrastructure for Clients

Mohit MimaniMohit Mimani
Read guide
InboxKitGuides

Cold Email Infrastructure Setup: Complete Guide (2026)

Saksham JainSaksham Jain
Read guide

Ready to set up your infrastructure?

Plans from $39/mo with 10 mailboxes included. Automated DNS, warmup, and InfraGuard monitoring included.

Get StartedBrowse all guides