SuperAzeroMail

Developer API v1

Receive-only automation

Scoped API access without exposing your login credential.

Developer API Keys use the sam_api_* format. They are separate from Telegram-issued Access Keys and browser sessions. Plaintext appears once; only its SHA-256 hash is stored. Keys last 7 or 30 days and never outlive their parent Access Key.

Authentication

Send the key from server-side code:

curl https://tempmail.azerostore.my.id/api/v1/aliases \
  -H 'Authorization: Bearer sam_api_YOUR_KEY'

Never place the key in browser JavaScript, a public repository, query parameters, or logs. Each key is limited to 120 requests per minute.

Endpoints

GET/api/v1/aliases

List owned aliases

Scope: alias:read

POST/api/v1/aliases

Create one alias

Scope: alias:create

GET/api/v1/inbox

List owned messages

Scope: inbox:read

GET/api/v1/messages/{id}

Read one owned message

Scope: message:read

GET/api/v1/groups

List owned inbox groups

Scope: group:read

POST/api/v1/groups

Create an atomic 3–10 inbox group

Scope: group:create

Rate-limit headers

X-RateLimit-Limit: 120
X-RateLimit-Remaining: 119
X-RateLimit-Reset: 1800000000

Status codes

401 invalid, revoked, or expired key
403 required scope missing
404 owned resource not found
429 rate limit exceeded

No sending endpoint

SuperAzeroMail remains receive-only. Developer API Keys cannot activate /api/send or access admin operations.