API Docs

1. Authentication

Find your API key on the Dashboard. Send it on every request:

Authorization: Bearer YOUR_API_KEY

Or:

X-API-Key: YOUR_API_KEY

2. Buy mail

Creates secret random mailboxes on WowInbox and returns mail:pass for each one. Set quantity (1–20) and type: fa-online, fa-fun, or short.

FA · @wowinbox.online

POST /api/v1/mail/buy
Content-Type: application/json
Authorization: Bearer YOUR_API_KEY { "quantity": 2, "type": "fa-online"
}

Example response:

{ "type": "fa-online", "quantity": 2, "accounts": [ { "mail": "a9xk2m7qpl@wowinbox.online", "pass": "H4rT9vLm2pQs8nWc", "combo": "a9xk2m7qpl@wowinbox.online:H4rT9vLm2pQs8nWc", "type": "fa" } ], "combos": [ "a9xk2m7qpl@wowinbox.online:H4rT9vLm2pQs8nWc" ]
}

FA · @wowinbox.fun

POST /api/v1/mail/buy
Content-Type: application/json
Authorization: Bearer YOUR_API_KEY { "quantity": 1, "type": "fa-fun"
}

Example response:

{ "type": "fa-fun", "quantity": 1, "accounts": [ { "mail": "k3n8q2w1za@wowinbox.fun", "pass": "H4rT9vLm2pQs8nWc", "combo": "k3n8q2w1za@wowinbox.fun:H4rT9vLm2pQs8nWc", "type": "fa" } ]
}

cURL:

curl -X POST https://wowinbox.online/api/v1/mail/buy \ -H "Authorization: Bearer YOUR_API_KEY" \ -H "Content-Type: application/json" \ -d "{\"quantity\":1,\"type\":\"fa-online\"}"

3. Poll an inbox

After you buy a mailbox (FA or short), poll its inbox with your API key and the email mail address you received. Short mail cannot be opened in the website inbox.

GET /api/v1/p?email=a9xk2m7qpl@wowinbox.online
Authorization: Bearer YOUR_API_KEY

Alias:

GET /api/v1/inbox?email=a9xk2m7qpl@wowinbox.online

Example response:

{ "mail": "a9xk2m7qpl@wowinbox.online", "messages": [ { "id": 12, "sender": "noreply@discord.com", "recipient": "a9xk2m7qpl@wowinbox.online", "subject": "Verify Email Address for Discord", "receivedAt": "2026-08-21T10:00:00.000Z", "isRead": false, "source": "inbound" } ]
}

4. Read a message (codes & Discord links)

Read one message (marks it as read). The response includes links extracted from the body:

GET /api/v1/p/12?email=a9xk2m7qpl@wowinbox.online
Authorization: Bearer YOUR_API_KEY

{ "mail": "a9xk2m7qpl@wowinbox.online", "message": { "id": 12, "sender": "noreply@discord.com", "subject": "Verify Email Address for Discord", "textBody": "Click https://click.discord.com/ls/click?upn=...", "htmlBody": "Verify", "links": [ "https://click.discord.com/ls/click?upn=..." ], "isRead": true }
}

For Discord / signup flows: buy mail → use the address on the site → poll /api/v1/p → open the message → use message.links[0] or search textBody for the code.

5. List purchased mail

GET /api/v1/mail
Authorization: Bearer YOUR_API_KEY

Returns mailboxes you bought with this API key (addresses only, not passwords).

6. Stock & balance

GET /api/v1/stock
Authorization: Bearer YOUR_API_KEY

Returns live prices, remaining stock per product type, and your current wallet balance in USD.

7. API endpoints

Base URL: https://wowinbox.online

8. Errors

Errors are returned as JSON: {"error":"message"} with an HTTP status code.

9. Rate limits

• Authenticated API reads such as GET /api/v1/p, /api/v1/stock, and /api/v1/mail are optimized for polling.
• POST /api/v1/mail/buy is limited to prevent abuse — use reasonable quantities (max 20 per request).
• Auth bootstrap endpoints (/api/v1/auth/firebase) are limited per IP.
• When limited, the API returns HTTP 429 with Retry-After headers when available.

10. Webhooks

DevWowInbox does not expose user-configurable outbound webhooks today. Inbound email is handled server-side by WowInbox infrastructure. Poll GET /api/v1/p from your application to detect new messages.

Quick examples

Replace YOUR_API_KEY with the key from your dashboard.

Quick flow

1. Create a DevInbox account and copy your API key from the Dashboard.
2. Call POST /api/v1/mail/buy with quantity and type (fa-online, fa-fun, or short).
3. Save the returned mail:pass combo.
4. Poll GET /api/v1/p?email=... until mail arrives.
5. Read the message and use links / body for verification.