Work with this as data
Every API here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for apis
7 MCP tools reach this
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This API
curl "https://apis.io/api/v1/apis/botmail-pro:botmail-pro-keys-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
OpenAPI Specification
openapi: 3.2.0
info:
title: Botmail Keys API
version: 1.0.0
summary: Gmail for AI agents.
description: 'Real email mailboxes for AI agents. Agents claim an address with
`POST /v1/claim`, a human claims it in the browser, then the same API key
reads, sends and manages mail.
**Errors** always look like `{"error": {"code", "message", "hint?", "details?"}}`.
`code` is stable and machine-readable; `hint` says what to do next.
429 responses carry `Retry-After` (seconds).
**IDs** are prefixed strings: `acct_`, `mbx_`, `thr_`, `msg_`, `key_`, `clm_`.
Times are RFC 3339 UTC.
**Scopes**: `read`, `send`, `manage`. Pending claim keys (`bm_pending_…`)
have `read` + `invite` until a human claims the mailbox, then they gain
full access in place. `send` is dropped while the account is not `active`.
Each operation lists its required scope.'
servers:
- url: https://botmail.pro
security:
- bearerAuth: []
- cookieAuth: []
tags:
- name: Keys
description: API keys. Secrets are shown once at creation.
paths:
/v1/keys:
post:
tags:
- Keys
operationId: createKey
summary: Create an API key
description: 'Scope: manage. Not for pending keys. A key can only create keys with
scopes it has, and a mailbox-restricted credential can only mint keys
for its own mailboxes. Max 100 active keys (409 too_many_keys).'
requestBody:
required: true
content:
application/json:
schema:
type: object
additionalProperties: false
properties:
name:
type: string
maxLength: 100
scopes:
type: array
description: Default `["read", "send"]`.
items:
$ref: '#/components/schemas/Scope'
mailbox_ids:
type: array
description: Restrict to these mailboxes. Empty = every mailbox (or the caller's own restriction).
items:
type: string
responses:
'201':
description: Created. `secret` is shown only once.
content:
application/json:
schema:
$ref: '#/components/schemas/ApiKey'
'400':
$ref: '#/components/responses/BadRequest'
'401':
$ref: '#/components/responses/Unauthorized'
'403':
$ref: '#/components/responses/Forbidden'
'409':
$ref: '#/components/responses/Conflict'
get:
tags:
- Keys
operationId: listKeys
summary: List active API keys
description: 'Scope: manage. Not for pending keys.'
responses:
'200':
description: Active keys, newest first (no secrets).
content:
application/json:
schema:
type: object
required:
- keys
properties:
keys:
type: array
items:
$ref: '#/components/schemas/ApiKey'
'401':
$ref: '#/components/responses/Unauthorized'
'403':
$ref: '#/components/responses/Forbidden'
/v1/keys/{id}:
delete:
tags:
- Keys
operationId: revokeKey
summary: Revoke an API key
description: 'Scope: manage. Not for pending keys.'
parameters:
- $ref: '#/components/parameters/IdPath'
responses:
'200':
description: Revoked.
content:
application/json:
schema:
type: object
required:
- id
- revoked
properties:
id:
type: string
revoked:
type: boolean
const: true
'401':
$ref: '#/components/responses/Unauthorized'
'403':
$ref: '#/components/responses/Forbidden'
'404':
$ref: '#/components/responses/NotFound'
components:
responses:
Conflict:
description: Conflicts with current state.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
BadRequest:
description: Invalid request (`bad_request` or a more specific code).
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
Unauthorized:
description: Missing or invalid credentials (`unauthorized`, `invalid_token`).
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
Forbidden:
description: 'The credential can''t do this (`forbidden`, `csrf`, `account_inactive`, …).
Missing scopes are listed in `details.required_scope`; pending keys get
a hint to wait for the claim.
'
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
NotFound:
description: Not found or not accessible with this credential.
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
parameters:
IdPath:
name: id
in: path
required: true
schema:
type: string
schemas:
Scope:
type: string
enum:
- read
- send
- manage
ApiKey:
type: object
required:
- id
- name
- kind
- prefix
- scopes
- mailbox_ids
- created_at
- last_used_at
- last_used_ip
properties:
id:
type: string
name:
type: string
kind:
type: string
enum:
- live
- pending
prefix:
type: string
description: First characters of the secret
for recognition.: null
scopes:
type: array
items:
type: string
mailbox_ids:
type: array
description: Empty = every mailbox.
items:
type: string
created_at:
type: string
format: date-time
last_used_at:
type:
- string
- 'null'
format: date-time
last_used_ip:
type:
- string
- 'null'
secret:
type: string
description: '`bm_live_…`. Only in the create response.'
Error:
type: object
required:
- code
- message
properties:
code:
type: string
description: Stable machine-readable code, e.g. `not_found`, `name_taken`, `rate_limited`.
message:
type: string
hint:
type: string
description: What to do next.
details:
type: object
additionalProperties: true
ErrorResponse:
type: object
required:
- error
properties:
error:
$ref: '#/components/schemas/Error'
securitySchemes:
bearerAuth:
type: http
scheme: bearer
description: '`Authorization: Bearer <key>` with an API key (`bm_live_…`) or a
pending claim key (`bm_pending_…`). OAuth 2.1 access tokens
(`bm_oat_…`) are audience-bound to the MCP endpoint `/mcp` and are
rejected on `/v1`; MCP clients discover OAuth via
`/.well-known/oauth-protected-resource/mcp`.
'
cookieAuth:
type: apiKey
in: cookie
name: bm_session
description: 'Web session for signed-in humans. Non-GET requests must send a JSON
`Content-Type` or `X-Botmail-CSRF: 1` (403 csrf otherwise).
'