API Documentation

Authentication

Every request is authenticated with an API key passed as the last segment of the URL path — no headers or tokens to set.

A missing or invalid key returns 401 Unauthorized. Keys are managed by the administrator under Settings → Advanced.

Returns every active domain available on this server.

curl "https://digistallone.com/api/domains/YOUR_API_KEY"

[
    "example.com",
    "mail.example.org"
]

Creates an address. Pass a full address like user@domain.com. The username is validated against forbidden usernames and the allowed length; if it cannot be parsed, a random address is returned.

curl "https://digistallone.com/api/email/john@example.com/YOUR_API_KEY"

"john@example.com"

Returns all messages in the inbox of the given address. This is the main endpoint for reading received mail.

curl "https://digistallone.com/api/messages/john@example.com/YOUR_API_KEY"

[
    {
        "subject": "Welcome",
        "sender_name": "Example Team",
        "sender_email": "no-reply@example.com",
        "timestamp": "2026-06-15T09:30:00+00:00",
        "date": "15 Jun 2026 09:30 AM",
        "datediff": "5 minutes ago",
        "id": 12,
        "content": "<p>Hello!</p>",
        "attachments": []
    }
]

Returns a single message by its id (the "id" field from List Messages), including the full HTML body and attachments.

curl "https://digistallone.com/api/message/12/YOUR_API_KEY"

{
    "subject": "Welcome",
    "sender_email": "no-reply@example.com",
    "id": 12,
    "content": "<p>Hello!</p>",
    "attachments": []
}

Permanently deletes a single message by its id. Returns an empty body on success.

curl -X DELETE "https://digistallone.com/api/message/12/YOUR_API_KEY"

Empty body with HTTP 200 on success.

Code Examples

A minimal client for reading an inbox. Reuse the same pattern for the other endpoints.

# List available domains
curl "https://digistallone.com/api/domains/YOUR_API_KEY"

# List messages in an inbox
curl "https://digistallone.com/api/messages/john@example.com/YOUR_API_KEY"

# Read one message by id
curl "https://digistallone.com/api/message/12/YOUR_API_KEY"

# Delete a message
curl -X DELETE "https://digistallone.com/api/message/12/YOUR_API_KEY"

const API = "https://digistallone.com/api";
const KEY = "YOUR_API_KEY";

async function getMessages(email) {
  const res = await fetch(`${API}/messages/${email}/${KEY}`);
  if (!res.ok) throw new Error(`HTTP ${res.status}`);
  return res.json();
}

getMessages("john@example.com").then(console.log);

<?php
$api = "https://digistallone.com/api";
$key = "YOUR_API_KEY";
$email = "john@example.com";

$json = file_get_contents("$api/messages/$email/$key");
foreach (json_decode($json, true) as $m) {
    echo $m["sender_email"] . " - " . $m["subject"] . PHP_EOL;
}

import requests

API = "https://digistallone.com/api"
KEY = "YOUR_API_KEY"

def get_messages(email):
    r = requests.get(f"{API}/messages/{email}/{KEY}")
    r.raise_for_status()
    return r.json()

for m in get_messages("john@example.com"):
    print(m["sender_email"], "-", m["subject"])

Message Object

Error Handling

• The content field is raw HTML — sanitize it before rendering in your own app.
• Treat your API key like a password. Anyone with it can read and delete mail for any address.
• Messages are temporary and cleaned up automatically based on server retention settings.