When are these people busy

POST/api/v1/mailbox/calendar/free-busy

Requires amailbox token— it acts as one mailbox holder, not as the organization.

Busy periods for each address, within the caller's own organization.

Two limits worth knowing, both reported rather than hidden:

A colleague at another company always comes back known: false. Neither Google nor Microsoft exposes free/busy to strangers, so there is no answer to give -- and showing an unknown person as free would invent one.
The attendee list is capped. This is an organization directory oracle: unbounded, it is a way to enumerate who exists and when they work.

Request body

Request

POST/api/v1/mailbox/calendar/free-busy

curl -X POST 'https://app.mailyte.com/api/v1/mailbox/calendar/free-busy' \
  -H 'Authorization: Bearer MAILBOX_TOKEN'

const response = await fetch('https://app.mailyte.com/api/v1/mailbox/calendar/free-busy', {
  method: 'POST',
  headers: {
    Authorization: 'Bearer MAILBOX_TOKEN',
  },
});
const { data } = await response.json();

import requests
response = requests.post(
    "https://app.mailyte.com/api/v1/mailbox/calendar/free-busy",
    headers={"Authorization": "Bearer MAILBOX_TOKEN"},
)
data = response.json()["data"]

<?php

$response = Http::withToken('MAILBOX_TOKEN')
    ->post('https://app.mailyte.com/api/v1/mailbox/calendar/free-busy');

$data = $response->json('data');

require "net/http"
require "json"
uri = URI("https://app.mailyte.com/api/v1/mailbox/calendar/free-busy")
request = Net::HTTP::Post.new(uri)
request["Authorization"] = "Bearer MAILBOX_TOKEN"
response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: true) { |http| http.request(request) }

The key names its own organization, so no X-Organization-ID header is needed.

Response

Successful Response

Returned inside the standard envelope.

Errors

Status	When
`422`	Validation Error

Every status, with what causes it and what to do, is on the error reference.