mailbridgeAPI
DEMOLog inConnect a mailbox
SECURITY & CONTROL

MailBridgeAPI security centre

Understand how MailBridgeAPI separates mailbox credentials, API access, account protection and public documentation.

Credential separation

Applications use an account API key and a mailbox API key. Mailbox passwords and OAuth tokens are never intended for public client-side code.

Encryption in transit

Production website, dashboard and API traffic uses HTTPS. Provider connections use the encryption modes selected for the mailbox configuration.

OAuth token protection

Gmail, Microsoft, Yahoo and Zoho access and refresh tokens are encrypted at rest with AES-256-GCM using private server-side encryption keys.

WordPress protection

The official plugin never stores the dashboard password or mailbox password. Selected API credentials are encrypted locally with a key derived from WordPress authentication salts.

Account controls

The dashboard supports login history, two-factor authentication and recovery codes. Sessions and access can be revoked.

Data minimisation

Only the data required to provide the requested email, activity, support, monitoring or billing operation should be submitted.

YOUR OWN MAILBOX. YOUR API KEYS. YOUR REQUESTS.

Connect your own mailbox to API keys, then control it through endpoints.

MailBridgeAPI links the SMTP and IMAP mailbox you own or are authorized to use to an account API key and a mailbox API key. Every request selects that same mailbox: send from its address, read its received messages, or process them in your applications.

Explore the docs
Your own mailboxapikey + apikeyboxAPI endpoint requestAction through that mailbox
POST /sendemail/

Send through your mailbox

A POST request uses the SMTP connection of the mailbox selected by apikeybox and sends from that mailbox.

GET /getemail/

Read your mailbox

A GET request uses the same mailbox key to retrieve messages from its configured IMAP folders.

YOUR LOGIC. YOUR WORKFLOW.

Use your mailbox data

Your authorized application handles the result in its workflows, automations, CRM, support tools, or AI systems.

Connect only a mailbox you own or are authorized to use. The provider must allow compatible SMTP or IMAP access, and its limits still apply.