Skip to main content

Authentication

API keys​

Use an API key for programmatic access. Create one from API Keys in the dashboard and grant only the scopes your application needs.

Include the key in every request header:

curl -H "Authorization: Bearer pt_live_your_key_here" \
  https://api.purpletoadmail.com/api/v1/account/me

Key scopes​

  • read — read account, domain, mailbox, and message data.
  • send — send outbound email.
  • manage — create, update, or delete domains, mailboxes, aliases, templates, and webhooks.

Treat an API key like a password. Keep it on your server, do not place it in browser code, and rotate it from the dashboard if it leaks.