API docs

No signup. Create an API key, claim addresses, and read mail that only your key can see. Base URL: https://panda-mail.net

Create a key

No account. Save the key — it is only shown once.

Auth

Pass your key on every request after create:

Authorization: Bearer pm_...

Keys are shown once. Lost key = create a new key and new mailboxes.

Endpoints

POST /api/v1/keys

Create an API key. No auth. Rate limited.

curl -X POST https://panda-mail.net/api/v1/keys

POST /api/v1/mailboxes

Create or reclaim a mailbox under your key. Body optional: { "local": "myname", "domain": "thedigitalworld.me" }

curl -X POST https://panda-mail.net/api/v1/mailboxes \
  -H "Authorization: Bearer pm_..." \
  -H "Content-Type: application/json" \
  -d '{"domain":"thedigitalworld.me"}'

GET /api/v1/mailboxes

List mailboxes owned by your key.

GET /api/v1/messages?address=

List messages for an address you own. Other people’s addresses return 403.

curl "https://panda-mail.net/api/v1/messages?address=you@thedigitalworld.me" \
  -H "Authorization: Bearer pm_..."

GET /api/v1/messages/:id

Fetch one message (body + optional HTML) if your key owns it.

DELETE /api/v1/mailboxes/:address

Delete a mailbox you own (URL-encode the address).

GET /api/v1/domains

Public list of allowed domains.

Privacy

Mail is stored only for claimed addresses. Listing requires the same API key that created the mailbox — guessing an address without the key does not reveal messages.

← Back to inbox