Skip to main content
POST /api/new_address requires Cloudflare Turnstile when enabled on the server. For automation, extract a JWT from the browser instead of calling this endpoint directly. See Authentication for details.

Create Address

POST /api/new_address Creates a new temporary inbox. Returns a JWT and sets jwt + session_id cookies.

Turnstile Requirement

This endpoint is protected by Cloudflare Turnstile on the public instance. Raw API calls without a valid cf_token will fail. For automation: Use a JWT extracted from the browser UI instead. See Authentication → API automation. For self-hosted instances with Turnstile disabled:
Response

Custom Name

To request a specific local part (before @):
Custom names may be rejected if they are on a blocklist or the server has disabled custom names. Always handle errors and fall back to random generation.

Get Address Info

GET /api/settings Returns the address for the current JWT. Useful for verifying auth.
Response

Delete Address

DELETE /api/delete_address Permanently deletes the address and all its emails. Irreversible.
Response
Rate limit: Per IP. Avoid calling in tight loops.