← back to inbox

nexoratemp — api docs

Generate disposable inboxes and read messages over a simple REST API. All /api/v1/* routes require an X-API-Key header. Get a key from the "API ACCESS" section on the home page.

Authentication

Send your key on every request as a header:
X-API-Key: tm_your_api_key_here
POST /api/v1/generate
Generates a new disposable inbox address on the configured domain.
curl -X POST "https://YOUR-DOMAIN/api/v1/generate" \
  -H "X-API-Key: tm_your_api_key_here"
{
  "address": "x7f9a2b1c0@bladecloud.qzz.io",
  "expiresAt": 1755590000000
}
GET /api/v1/inbox/:address
Returns the message list (metadata only — id, sender, subject, time) for the given address.
curl "https://YOUR-DOMAIN/api/v1/inbox/x7f9a2b1c0@bladecloud.qzz.io" \
  -H "X-API-Key: tm_your_api_key_here"
{
  "address": "x7f9a2b1c0@bladecloud.qzz.io",
  "expiresAt": 1755590000000,
  "messages": [
    {
      "id": "b6e2...",
      "from_addr": "sender@example.com",
      "subject": "Verify your account",
      "received_at": 1755589000000
    }
  ]
}
GET /api/v1/message/:id
Returns the full body (text and HTML) of a single message by its id.
curl "https://YOUR-DOMAIN/api/v1/message/b6e2..." \
  -H "X-API-Key: tm_your_api_key_here"
{
  "id": "b6e2...",
  "from_addr": "sender@example.com",
  "subject": "Verify your account",
  "text_body": "Your code is 483920",
  "html_body": "<p>Your code is <b>483920</b></p>",
  "received_at": 1755589000000
}
POST /api/v1/keys
Self-serve endpoint to generate a new API key. No auth required to call this one — it's how you get your first key.
curl -X POST "https://YOUR-DOMAIN/api/v1/keys"
{
  "key": "tm_21a0255b42f77a5db06b1e647658d09b9ddb9d96deef33ec"
}

Notes

· Addresses expire automatically, default lifetime ~30 minutes.
· Rate limits and paid tiers are not implemented — this is a free, self-hosted service.
· Replace YOUR-DOMAIN above with your deployed Pages URL.