Cooper Email

Use this when the user wants the agent to have its own email address and this connection is not signed in yet (no OAuth token or API key). No auth needed. Creates a Cooper account, one inbox <username>@cooperemail.com, and an API key. Inputs: username (required; 1–32 characters: letters, digits, . _ -), display_name (optional From name), owner_email (optional; starts the existing owner confirmatio

Use this when the signed-in account needs an additional email address (for example one per agent, project, or customer). Requires auth. Inputs: username (optional; 1–32 characters; becomes <username>@cooperemail.com; omit it and Cooper picks box plus 8 hex characters, the same generator as a batch with no prefix), domain (optional hostname), display_name (optional From name), metadata (optional ob

Use this when the signed-in account needs several email addresses at once, or addresses that should disappear after a deadline (one inbox per signup, trial, or job). Requires auth. Inputs: count (required; how many inboxes, capped per plan), prefix (optional; addresses become prefix-<random>@cooperemail.com, or box<random>@cooperemail.com when omitted), labels (optional strings; filter later with

Use this when you need to know which inboxes exist on the signed-in account, for example to pick an inbox_id before sending or reading mail, or to tell the user their address. Read-only; requires auth. Inputs: status (optional; active or paused; omit to list every inbox), q (optional case-insensitive substring of email, username, or display_name; prefix matches come first), label (optional exact l

Use this when the user asks the agent to send an email from its Cooper address. Requires auth. Delivers real email on the public Internet and stores a copy. Inputs: inbox_id (required; inbox id, username, or email), to (required; array of recipient addresses), subject (required), text and/or html body, cc, bcc, reply_to, headers, labels, in_reply_to (optional; a msg_ id threads onto that message u

Use this when you need to check an inbox for new or recent mail (sent and received), for example after sending a message and waiting for a reply. Read-only; requires auth. Inputs: inbox_id (optional; inbox id, username, or email — omit to use the account's newest inbox), limit (optional, default 50, max 200), labels (optional; the message must have every label, for example ["unread"]), unread (opt

Use this when you need the full content of one message, typically an id from cooper_list_messages or cooper_search. Read-only; requires auth. Inputs: inbox_id (required; inbox id, username, or email), message_id (required). Returns the full message: from, to, cc, subject, text, html, extracted_text (the new reply text with quoted history removed), in_reply_to, references, thread_id, attachments [{

Use this when you need to find mail by keyword, sender, recipient, or subject across the account, or inside one inbox. Read-only; requires auth. Inputs: q (required; every word must match subject, body text, from, or to), limit (optional, default 25, max 100), inbox_id (optional; inbox id, username, or email), before (optional ISO-8601 exclusive upper bound on created_at), after (optional ISO-8601

Use this when you need to find mail inside one inbox by keyword, sender, recipient, or subject, and you want the matching words highlighted. Read-only; requires auth. Inputs: inbox_id (required; inbox id, username, or email), q (required; every word must match subject, body text, from, or to), limit (optional, default 25, max 100), before (optional ISO-8601 exclusive upper bound on created_at), af

Use this only for testing: when you need to simulate an email arriving in a Cooper inbox without sending real mail (for example to try a webhook or task flow end to end). Requires auth. Stores the message as received mail and fires message.received webhooks, like real inbound mail. Injected mail carries no DMARC/DKIM results, so it only creates an owner task if the inbox has sender authentication

Use this when the agent or app should be notified immediately (HTTP POST) when mail arrives instead of polling cooper_list_messages. Requires auth. Inputs: url (required; public http or https URL; localhost and private addresses are rejected), events (optional; any of message.received, message.held, message.sent, message.blocked, message.bounced, message.complained, task.received, owner.reply, dom

Use this when you need to know the account's plan, how much of its monthly quota is used, or why a send or inbox create returned 402. Read-only; requires auth; no inputs. Returns {plan, plan_name, status, usage:{period, sends, inboxes}, limits:{inboxes, emails_per_month, custom_domains}, upgrade:{next_plan, upgrade_url}, …}.

Use this when the human wants to upgrade, or a limit was hit and they agree to pay. Requires auth. Creates a Stripe Checkout session; no charge happens until the human completes checkout in their browser. Inputs: plan (required; starter or pro), email (optional receipt email), client_id (optional idempotency key). Returns {url, session_id, plan}: give the url to the human; never open or complete i

Use this when a human should receive the agent's progress updates by email and be able to reply with instructions. Requires auth. Sends that person one confirmation email with a link and code; they receive nothing else until they confirm. Inputs: inbox_id (required), email (required; the human's address), digest (optional; immediate (default) or daily). Returns the owner {id, inbox_id, email, stat

Use this when you need to check who the human owners of an inbox are and whether they have confirmed, before relying on cooper_notify_owner. Read-only; requires auth. Inputs: inbox_id (required). Returns {data:[{id, email, status (pending|verified|unsubscribed), digest, created_at, verified_at, unsubscribed_at}]}. Never returns confirmation codes.

Use this when the agent should tell its human owner(s) about progress, completion, a blocker, or a question by email. Requires auth. Sends a status email to every verified owner of the inbox (daily-digest owners get it in the next digest). Send a short title of 5-8 plain words that says what happened or what you need (e.g. 'Launch copy drafted', 'Pick a launch headline'); the default concise email

Use this when you are waiting for a human's instructions or answer by email: it lists tasks created when a verified owner or allowlisted sender emails the inbox and the mail passes DMARC (or DKIM aligned with From). Read-only; requires auth. Inputs: inbox_id (optional; omit for all inboxes), status (optional; pending (default), in_progress, done, or all), limit (optional, default 50, max 100), wai

Use this when you have an answer or result for a task from cooper_get_tasks and want to reply to the human in the same email thread. Requires auth. Sends a real email to the task's sender. Inputs: task_id (required), text (required; the reply body), status (optional; pending, in_progress, or done — set done when the task is finished), idempotency_key (optional; sent as the Idempotency-Key header;

Use this when the user wants mail on their own hostname and the account is on Starter or Pro. Requires auth. One call returns the SPF, DKIM, DMARC, and MX records to publish, plus a verify TXT. Inputs: domain (required hostname, such as agents.example.com), client_id (optional idempotency key). Returns {id, domain, status, status_detail, mail, records, dns}. Each record includes status (valid, mis

Use this when the signed-in parent account should give a project or another agent its own API key and a fixed inbox quota. Requires auth. Inputs: name (required; 1–64 characters), inbox_quota (required integer; how many inboxes that sub-account may hold), client_id (optional idempotency key; the same key returns the original workspace and api_key is null). Returns {id, name, inbox_quota, account_i

Use this when you need the sub-accounts created by the signed-in parent, including each inbox quota and how many inboxes are in use. Read-only; requires auth; no inputs. Returns {data:[{id, name, inbox_quota, account_id, api_key_prefix, inboxes_used, created_at}]}. Does not return API keys.

Use this when you need one sub-account created by the signed-in parent, including its inbox quota and how many inboxes are in use. Read-only; requires auth. Inputs: workspace_id (required). Returns {id, name, inbox_quota, inboxes_used, account_id, api_key_prefix, created_at}. Does not return the API key. Another parent's workspace returns 404 workspace_not_found. A sub-account key returns 403 perm

Use this when a parent should rename a sub-account or change how many live inboxes it may hold. Requires auth. Inputs: workspace_id (required), name (optional; 1–64 characters), inbox_quota (optional integer, at least 1). Returns the workspace {id, name, inbox_quota, inboxes_used, account_id, api_key_prefix, created_at}. An inbox_quota below the current live inboxes returns 409 quota_below_usage a

Use this when a parent should remove a sub-account, its API key, and its mail. Requires auth. Destructive. Inputs: workspace_id (required), delete_inboxes (optional boolean). Returns {id, deleted:true, inboxes_deleted}. When the workspace still has inboxes and delete_inboxes is not true, the call returns 409 workspace_not_empty and deletes nothing. delete_inboxes true returns 409 owner_required an

Use this when an inbox should be removed so its slot is free on the plan and on a workspace inbox quota. Requires auth. Deletes that inbox and its messages. Inputs: inbox_id (required; inbox id, username, or email). Returns {id, deleted:true}. An approval inbox returns HTTP 202 and stays until a verified owner confirms the emailed link. Recreating that username on the same account stays in approva

Use this when an inbox should stop sending and accepting new mail without deleting the address, threads, or history (for example while a human reviews it or during an incident), when it should start again, when you need to set its display name or metadata, when you need to change inbound screening, or when you need to change send_mode. Requires auth. Inputs: inbox_id (required; inbox id, username,

Use this when you need to change labels on a stored message, including marking it read. Requires auth. Works on a paused inbox, because this is triage and not a send. Inputs: inbox_id (required; inbox id, username, or email), message_id (required), add_labels (optional strings), remove_labels (optional strings). Mark read with remove_labels ["unread"]. You may also add "read". read and unread can

Use this when several stored messages should gain or lose the same labels, including marking a batch read. Requires auth. Works on a paused inbox, because this is triage and not a send. Inputs: inbox_id (required; inbox id, username, or email), message_ids (required; 1 to 50 unique message ids), add_labels (optional strings), remove_labels (optional strings). At least one of add_labels or remove_l

Use this when you need the custom domains on the signed-in account, including DNS status. Read-only; requires auth; no inputs. Returns {object:"list", data:[{id, domain, status, status_detail, mail, records, dns}]}. Each record has status valid, missing, or invalid and found from the last check. Inboxes on your own domain are included on Starter (15 custom domains) and Pro (200 custom domains). Fr

Use this when DNS for a custom domain may have been published and you should check it now instead of waiting for the daily cron. Requires auth. Inputs: domain_id (required; the dom_… id from cooper_add_domain or cooper_list_domains). Runs the same DNS check as the cron, stores per-record status (valid, missing, or invalid) and found, and returns the domain. Fires domain.verified once when status m

Use this when you need to answer a message already in a Cooper inbox, with recipients and threading filled in for you. Requires auth. Sends real email and stores the copy on the same thread. Inputs: inbox_id (required; inbox id, username, or email), message_id (required), text and/or html (one is required), reply_all (optional; default false; when true, also include the other original To and Cc ad

Use this when you need to forward a stored message to someone else, including a forwarded header block and the original attachments, on a new thread. Requires auth. Sends real email. Inputs: inbox_id (required; inbox id, username, or email), message_id (required), to (required; recipient addresses), cc, bcc, subject (optional; default is Fwd: plus the original subject unless it already starts with

Use this when you are waiting for a reply or a verification code and you have no public URL for a webhook. Read-only; requires auth. Inputs: inbox_id (required; inbox id, username, or email), after (optional cursor or ISO-8601 timestamp; default is the time of this call, so only mail that arrives after the call matches), wait (optional seconds, default 20, maximum 25), from_contains (optional case

Use this when you need the recent event log for this account (message.received, message.held, message.sent, message.blocked, message.bounced, message.complained, task.received, owner.reply, domain.verified, draft.created, draft.approved, draft.rejected, draft.sent) without waiting. Read-only; requires auth. Inputs: inbox_id (optional; inbox id, username, or email), types (optional comma-separated

Use this when you need whole conversations instead of individual messages, for example to see who is in a thread and when the last reply arrived. Read-only; requires auth. Inputs: inbox_id (optional; inbox id, username, or email — omit to list every inbox on the account), limit (optional, default 20, max 100), page_token (optional cursor from a previous page), before (optional ISO-8601 upper bound

Use this when you need every message in one conversation, oldest first, including extracted_text. Read-only; requires auth. Inputs: inbox_id (required; inbox id, username, or email), thread_id (required, thr_…), limit (optional, default 100, max 200). Returns the thread plus messages (full public messages) and next_page_token. Unknown thread returns HTTP 404 thread_not_found. A bad page_token retu

Use this when you need the conversations that contain a keyword, sender, recipient, or subject, instead of each matching message. Read-only; requires auth. Inputs: inbox_id (required; inbox id, username, or email), q (required; every word must match subject, body text, from, or to), limit (optional, default 20, max 50). Returns {object:"list", inbox_id, q, data:[thread]} ordered by the best matchi

Use this when a whole conversation should be removed. Requires auth. Deletes every message in the thread, plus attachment bytes and search rows. Owner tasks and updates are left in place. Inputs: inbox_id (required; inbox id, username, or email), thread_id (required). Returns {id, deleted:true, messages_deleted}. An unknown thread returns HTTP 404 thread_not_found. Another account's inbox returns

Use this when every message in a conversation should gain or lose the same labels, including marking the thread read. Requires auth. Works on a paused inbox. Inputs: inbox_id (required; inbox id, username, or email), thread_id (required), add_labels (optional strings), remove_labels (optional strings). The change is applied to every message in the thread. read and unread can be changed. Other syst

Use this when you need the addresses on an allow or block list. Read-only; requires auth. Inputs: direction (required; send, receive, or reply), type (required; allow or block), inbox_id (optional; inbox id, username, or email; omit for the account-wide list). Returns {data:[{object:"list_entry", direction, type, entry, entry_type, inbox_id, reason, created_at}], next_page_token}. entry_type is em

Use this when you need one address or domain on an allow or block list. Read-only; requires auth. Inputs: direction (required; send, receive, or reply), type (required; allow or block), entry (required; email or domain), inbox_id (optional; omit for the account-wide list). Returns {object:"list_entry", direction, type, entry, entry_type, inbox_id, reason, created_at}. Fails with 400 invalid_list,

Use this when an agent should only mail approved recipients, or should ignore unwanted senders. Requires auth. Inputs: direction (required; send, receive, or reply), type (required; allow or block), entry (required; email or domain), inbox_id (optional; omit for the account-wide list), reason (optional note). Returns the list entry. HTTP 201 when created, HTTP 200 when that entry already exists. A

Use this when an address or domain should leave an allow or block list. Requires auth. Deletes that one entry. Inputs: direction (required; send, receive, or reply), type (required; allow or block), entry (required; email or domain), inbox_id (optional; omit for the account-wide list). Returns the list entry with deleted true. Fails with 400 invalid_list, 400 invalid_entry, 404 list_entry_not_foun

Use this when you need one inbox's address, display name, metadata, status, client_id, screening, or send_mode and you already have its id, username, or email. Read-only; requires auth. Inputs: inbox_id (required; inbox id, username, or email). Returns the inbox {id, username, email, display_name, created_at, require_sender_auth, labels, expires_at, status, paused_at, metadata, client_id, screenin

Use this when a human received the 6-digit confirmation code and you need to mark that owner verified so they can receive updates and open tasks. Requires auth. Inputs: inbox_id (required; inbox id, username, or email), owner_id (required), code (required; 6 digits). Returns the owner {id, inbox_id, email, status, digest, created_at, verified_at, unsubscribed_at}. A verified owner is returned agai

Use this when you need to see which Cooper account this connection is using and whether the API key is limited to one inbox or a permission list. Requires auth. Optional input lifecycle_emails is on or off and sets whether this account receives weekly product notes in its inbox. Omit it to leave the setting unchanged. Returns {account_id, parent_account_id, auth_type, key:{id, name, prefix, inbox_

Use this when you need the webhooks on this account, including whether each one is enabled and which inboxes it matches. Read-only; requires auth. No inputs. Returns {object:"list", data:[{id, url, events, inbox_id, inbox_ids, client_id, enabled, consecutive_failures, disabled_at, disabled_reason, secret (redacted), previous_secret_expires_at, previous_secret_active, headers (redacted), last_deliv

Use this when a webhook URL, event list, inbox filter, or enabled flag should change. Requires auth. Inputs: webhook_id (required), url (optional http(s) URL), events (optional array), enabled (optional boolean; true re-enables and resets consecutive_failures, false disables and stops deliveries), inbox_ids (optional; at most 10 inbox ids). Returns the webhook with the secret redacted. A disabled

Use this when a webhook should stop receiving events and be removed. Requires auth. Inputs: webhook_id (required). Returns {id, deleted:true}. This removes the hook. Fails with 404 webhook_not_found when the id is missing or belongs to another account.

Use this when a webhook signing secret should change without breaking receivers that still check the old secret. Requires auth. Inputs: webhook_id (required). Mints a new secret (whsec_…), stores it as the current secret, and keeps the previous secret valid for 24 hours. Returns the webhook with the new secret in full once, previous_secret_expires_at (ISO-8601), and previous_secret_active true. Th

Use this when you need to confirm a webhook URL accepts a signed POST right now. Requires auth. Inputs: webhook_id (required). Sends {type:"webhook.test", data:{webhook_id}} and waits for the response. Returns {delivery:{id, status, response_status, attempts, event_id}}. status is delivered or failed. A disabled hook returns 409 webhook_disabled and sends nothing. Fails with 404 webhook_not_found.

Use this when you need the addresses this account will not email after a permanent bounce, a complaint, or a manual add. Read-only; requires auth. Inputs: none. Returns {object:"list", data:[{object:"suppression", address, reason, source_message_id, created_at}]}. reason is bounce, complaint, or manual. source_message_id is the outbound msg_ id that caused a bounce or complaint, or null for a manu

Use this when an address should receive mail again after it was suppressed for a bounce, a complaint, or a manual add. Requires auth. Deletes that one account-wide row. Inputs: address (required; email). Returns the suppression with deleted true. Fails with 400 invalid_address, 404 suppression_not_found, or 403 permission_denied for an inbox-scoped key. Sending to a still-suppressed address return

Use this when inbound screening held a message (label held) and a person has decided it should be delivered to the agent. Requires auth. Removes the held label, then fires message.received and creates a task when the sender is a verified owner or allowlisted sender who passes the inbox sender-auth check. Inputs: inbox_id (required; inbox id, username, or email), message_id (required). Returns the

Use this when you need the text of one attachment, or its bytes as base64. Read-only; requires auth. Inputs: inbox_id (required; inbox id, username, or email), message_id (required), attachment_id (required), format (optional; text or base64). When format is omitted, text is returned when the content type can be extracted, otherwise base64. Extractable types are text/*, JSON, CSV, PDF (text layer)

Use this when you need counts of mail over time, current usage, or bounce and complaint rates for this account. Read-only; requires auth and message_read. Inputs: kind (required; events, usage, or rates), inbox_id (optional; inbox id, username, or email), start and end (optional ISO-8601 timestamps; default the last 30 days; used by events and rates), period (optional; hour or day; default day; ev

Use this when you want to prepare a message without sending it yet. Requires auth and message_send or draft_write. draft_write does not send mail. Inputs: inbox_id (required; inbox id, username, or email), to, cc, bcc, reply_to, subject, text, html, attachments, labels, headers, in_reply_to or forward_of (one source message; not both), reply_all (only with in_reply_to), include_attachments (forwar

Use this when you need one draft, including its labels, attachments, send_at, send_status, and approval_status. Read-only; requires auth and message_read. Inputs: inbox_id (required), draft_id (required). Returns the draft. Another account's inbox, or an inbox-scoped key for a different inbox, returns HTTP 404 inbox_not_found. An unknown draft returns HTTP 404 draft_not_found.

Use this when you need drafts on one inbox or across the account. Read-only; requires auth and message_read. Inputs: inbox_id (optional; omit for every inbox this key can see), labels (optional; every listed label must match), limit (optional, 1 to 100, default 50), page_token (optional). An inbox-scoped key only sees its inbox. Returns {object:"list", data, next_page_token}. A bad limit is HTTP 4

Use this when a draft should change before it sends. Requires auth and message_send or draft_write. This call does not send the draft. Inputs: inbox_id (required), draft_id (required), and any of to, cc, bcc, reply_to, subject, text, html, add_attachments, remove_attachments, add_labels, remove_labels, send_at. Omit a field to leave it unchanged. Null, or an empty list for recipients, clears that

Use this when a draft should be discarded, including a scheduled send you want to cancel. Requires auth and message_delete, message_send, or draft_write. Inputs: inbox_id (required), draft_id (required). Deletes the draft and its attachments. A draft with send_status sending returns HTTP 409 draft_sending. Returns {object:"draft", id, deleted:true}.

Use this when a draft should be sent now. Requires auth and message_send or draft_send. draft_write alone cannot send. Inputs: inbox_id (required), draft_id (required), add_labels, remove_labels, idempotency_key (optional Idempotency-Key). Sending deletes the draft and returns the message. An inbox in approval mode returns the pending draft with HTTP 202 until a verified owner approves it. A draft

Use this when you signed up for a service or triggered a login and need the one-time verification code (OTP) it emails you. Read-only; requires auth. Inputs: inbox_id (required; inbox id, username, or email), wait (optional seconds, default 25, maximum 55), after (optional ISO-8601 timestamp; default is 5 minutes before the call, so a code that arrived just before you called still matches; pass th

Use this before writing to a human owner (cooper_notify_owner) to see how they want Cooper email written. Read-only; requires auth. Inputs: inbox_id and owner_id (optional; both together return that owner's effective style). Returns {account:{style, note, source}, owner?:{id, email, email_style, email_style_note, email_style_set_by}, effective?:{style, note, source}}. style is concise (default: on

Use this when the human asks for shorter, longer, or friendlier email from Cooper. Requires auth. Sets the account default (omit owner_id; needs an unscoped key with owner_manage) or one owner's style (inbox_id and owner_id). Inputs: style (concise, detailed, casual, or null to inherit), note (optional plain text up to 280 characters, or null to clear), inbox_id and owner_id (optional). Every Coop

Use this when you need to see which OAuth apps currently hold access to this account, for example before revoking one. Read-only; requires auth. No inputs. Returns {object:"list", data:[{object:"oauth_grant", id, client_id, client_name, redirect_hosts, scope, resource, connected_at, last_refreshed_at, active_tokens}]}. One row per client that still has a usable token. An expired access token is in

Use this when an OAuth app should lose access to this account. Requires auth. Destructive. Inputs: client_id (required; the OAuth client id from cooper_list_oauth_grants). Deletes every access and refresh token for that client on this account, and every unused authorization code for that client, in one transaction. The client registration stays, so the app can connect again. Returns {object:"oauth