Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
openapi: 3.2.0
info:
title: CommsHarbor Guest API
version: 1d751aaf
description: Manage domain email, mailboxes, aliases and durable jobs. Each call uses its organization's identity.
servers:
- url: https://commsharbor.com
tags:
- name: Guest
paths:
/api/guest:
post:
operationId: post_api_guest
summary: Open or restore a temporary workspace in this browser
description: 'Sets a host-only HttpOnly guest cookie. The SDK limits issuance to 20 per network per hour; a valid cookie is reused.
Returns: { guest_token }'
security: []
responses:
'200':
description: '{ guest_token }'
content:
application/json:
schema:
type: object
properties:
guest_token:
type: string
description: Signed guest token for an API client.
required:
- guest_token
'429':
description: guest_rate_limited
'503':
description: auth_unavailable
tags:
- Guest
components:
securitySchemes:
bearerAuth:
type: http
scheme: bearer
description: Use an organisation API key (`mmk_…`) for permitted work in that organisation. Account operations require the shared account session. Paid routes accept a global credit token (`cred_…`). Monthly purchases require a recent human session.
globalAccount:
type: apiKey
in: cookie
name: __Host-mm-auth
description: Global session in the product's HttpOnly cookie; writes require exact Origin and X-CSRF-Token.
contaChaveApi:
type: http
scheme: bearer
bearerFormat: mmk_…
description: 'Account API key: `Authorization: Bearer mmk_…` or `X-Api-Key: mmk_…`. Created on the account page (API keys), valid only in the product where it was created; it acts as the account (or the organization that owns it).'
carteiraAgente:
type: http
scheme: bearer
bearerFormat: mmw_…
description: 'Wallet credential of an agent without an account (`Authorization: Bearer mmw_…`, 30 days, this product only): POST /api/auth/wallet/agent/start, sign the message with the wallet, POST /api/auth/wallet/agent/token. The owner is `x402:<address>`.'
x-service-info:
categories:
- email
- mailbox-management
docs:
homepage: https://commsharbor.com/
apiReference: https://commsharbor.com/developers
llms: https://commsharbor.com/llms.txt