The mailbox holder's security state

GET/api/v1/mailbox/security

Requires amailbox token— it acts as one mailbox holder, not as the organization.

Two-factor status and what it protects. protects is part of the contract: mailbox 2FA gates the webmail sign-in only, never IMAP or SMTP, and the UI must not overclaim its reach.

Request

GET/api/v1/mailbox/security

curl -X GET 'https://app.mailyte.com/api/v1/mailbox/security' \
  -H 'Authorization: Bearer MAILBOX_TOKEN'

const response = await fetch('https://app.mailyte.com/api/v1/mailbox/security', {
  method: 'GET',
  headers: {
    Authorization: 'Bearer MAILBOX_TOKEN',
  },
});
const { data } = await response.json();

import requests
response = requests.get(
    "https://app.mailyte.com/api/v1/mailbox/security",
    headers={"Authorization": "Bearer MAILBOX_TOKEN"},
)
data = response.json()["data"]

<?php

$response = Http::withToken('MAILBOX_TOKEN')
    ->get('https://app.mailyte.com/api/v1/mailbox/security');

$data = $response->json('data');

require "net/http"
require "json"
uri = URI("https://app.mailyte.com/api/v1/mailbox/security")
request = Net::HTTP::Get.new(uri)
request["Authorization"] = "Bearer MAILBOX_TOKEN"
response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) { |http| http.request(request) }

The key names its own organization, so no X-Organization-ID header is needed.

Response

Successful Response

Returned inside the standard envelope.

Errors

Every status, with what causes it and what to do, is on the error reference.