POST /api/new_address requires Cloudflare Turnstile when enabled on the server. For automation, extract a JWT from the browser instead of calling this endpoint directly. See Authentication for details.
Create Address
POST /api/new_address
Creates a new temporary inbox. Returns a JWT and sets jwt + session_id cookies.
Turnstile Requirement
This endpoint is protected by Cloudflare Turnstile on the public instance. Raw API calls without a valid cf_token will fail.
For automation: Use a JWT extracted from the browser UI instead. See Authentication → API automation.
For self-hosted instances with Turnstile disabled:
Response
Custom Name
To request a specific local part (before @):
Custom names may be rejected if they are on a blocklist or the server has disabled custom names. Always handle errors and fall back to random generation.
Get Address Info
GET /api/settings
Returns the address for the current JWT. Useful for verifying auth.
Response
Delete Address
DELETE /api/delete_address
Permanently deletes the address and all its emails. Irreversible.
Response
Rate limit: Per IP. Avoid calling in tight loops.