Mail API

This article and the rest of the API documentation in this section are written for a technical audience — integrators and developers connecting external systems to Tickiti. Familiarity with HTTP, REST, JSON and bearer-token authentication is assumed.

The Mail API exposes the Mail admin screens — mailboxes, ignored subjects, excluded emails and the sent-mail audit. Every endpoint runs as the token’s owner and is gated by the mail ability plus the owner’s admin role.

Note: sending mail is not part of this family — outbound transport stays an internal-only endpoint. Gmail OAuth connection and raw .eml download are browser-only flows and are not exposed.

Abilities and conventions

  1. mail:read — read endpoints.
  2. mail:write — create / update / delete endpoints. Write implies read.

All endpoints are POST and JSON. Mailbox reads never include secrets (POP/SMTP passwords, OAuth refresh token) — only a gmail_connected flag.

Endpoints

Method & pathAbilityPurpose
POST /api/v1/mail/mailboxesmail:readList mailboxes (+ selectable queues)
POST /api/v1/mail/mailboxes/createmail:writeCreate a mailbox
POST /api/v1/mail/mailboxes/updatemail:writeUpdate a mailbox by mailbox_id
POST /api/v1/mail/mailboxes/set-passwordmail:writeSet a POP/SMTP/client secret (field, value)
POST /api/v1/mail/mailboxes/deletemail:writeDelete a mailbox by mailbox_id
POST /api/v1/mail/subjectsmail:readList ignored subjects
POST /api/v1/mail/subjects/createmail:writeAdd an ignored subject (subject)
POST /api/v1/mail/subjects/deletemail:writeDelete an ignored subject by id
POST /api/v1/mail/excluded-emailsmail:readList excluded emails
POST /api/v1/mail/excluded-emails/createmail:writeAdd an excluded email (email)
POST /api/v1/mail/excluded-emails/deletemail:writeDelete an excluded email by id
POST /api/v1/mail/sent-mailmail:readRecent sent mail (range_days, 1–30)
POST /api/v1/mail/sent-mail/searchmail:readSearch sent mail (q, limit)
POST /api/v1/mail/sent-mail/showmail:readFetch one sent message by id