Allocate an exclusive inbox, read the messages for that allocation, then release it. Build with personal API keys and runnable examples in five languages.
API allocations last 10 minutes. Each new request_id allocates a different available mailbox, even for the same key and site. The site rule excludes mailboxes previously used for that site. Keep the allocation_id when reading or releasing; it identifies the exact lease.
Signed requests and safe retries
Personal keys use HMAC-SHA256 over the HTTP method, raw path, raw query, timestamp, nonce and body hash. For retries, keep the same request_id and issue a new nonce. A successful allocation is charged once; reading and release do not consume points.
Start with the language you already use
The developer guide includes Python, PHP, Go, Node.js and C# examples for the complete mailbox lifecycle. Copy or download a sample, set your personal key in an environment variable, and adapt the request flow to your app. This is a receiving API, not an email-sending service.