SMTPBox API keys and authentication

Create read-only or read/write API keys and authenticate REST requests with a Bearer token.

07 / AUTHENTICATE

Create an API key

Create keys under Developer API in the dashboard. Choose read-only for inspection and read/write only when an integration needs to create, rename or delete data.

Authentication

curl https://api.smtpbox.dev/v1/inboxes \
  -H "Authorization: Bearer sbx_api_your_key" \
  -H "Accept: application/json"

Keys are shown once. Store them as secrets, never in browser code or a repository. Revoke a key from the dashboard if it may have been exposed.

Updated 7 September 2026