Kalo te dokumentacioni
API

Enkriptimi

Çdo veprim në këtë grup: çfarë pranon, çfarë kthen dhe gabimet me të cilat mund të përgjigjet.

Veprimet

The OpenPGP public keys that let senders seal mail to an address, the directory the Encryption page of the app publishes to. Only public keys travel here: the private key stays on the device that made it, so nothing in this API can read sealed mail.

Published keys belong to a person. A key reads and publishes the keys of the workspace owner, and an app those of the person who connected it.

GET/encryption/keys

List your published keys

Lejetemails:readLexon

Every key published for an address in this workspace, newest first, retired ones included with revokedAt and revokedReason. Published keys belong to a person. A key reads and publishes the keys of the workspace owner, and an app those of the person who connected it. A key limited to particular addresses lists only the keys of those addresses.

Requires the emails:read scope.

Kthen

The keys, newest first.

Gabimet

Gabimet që mund të kthejë çdo veprim400401403404422500Katalogu i gabimeve

E disponueshme edhe në

SDK
encryption.listKeys()
CLI
openemail encryption list-keys
MCP
listEncryptionKeys

POST/encryption/keys

Publish a public key for an address

Lejetemails:readNdryshon të dhëna
Kërkon një kod verifikimi

Publishes an armored OpenPGP public key for one of your addresses, so that senders can seal mail to it, as Publish on the Encryption page does. The address has to be an address of this workspace on a verified domain, switched on, and one you may use.

An address keeps one live key. Publishing another while one is live is a 409 key_already_published; to rotate, send the fingerprint of the live key in replaces, and it is retired as the new one is published. Mail already sealed to the old key stays readable only with the old private key.

Published keys belong to a person. A key reads and publishes the keys of the workspace owner, and an app those of the person who connected it.

Requires the emails:read scope.

Trupi i kërkesës

addressstringE detyrueshme

The address the key is for.

Deri në 320 karaktere
publicKeystringE detyrueshme

The armored OpenPGP PUBLIC KEY BLOCK, up to 64 KB.

Nga 64 deri në 65536 karaktereModeli^-----BEGIN PGP PUBLIC KEY BLOCK-----[\s\S]+-----END PGP PUBLIC KEY BLOCK-----\s*$
fingerprintstringE detyrueshme

The fingerprint of the key, 40 upper-case hexadecimal characters.

Modeli^[0-9A-F]{40}$
algorithmstring

The algorithm of the key, such as ed25519, for display only.

Deri në 32 karaktere
replacesstring

The fingerprint of the live key this one replaces, to rotate it.

Modeli^[0-9A-F]{40}$

Kthen

The key, now published.

Gabimet

403

The key lacks the scope, or may not send as that address.

step_up_required: the call was made with an OAuth access token that has not been verified in the last 60 minutes. Ask for a code with POST /security/step-up, send it to POST /security/step-up/verify, then repeat the call. The person can also choose Allow changes for 60 minutes on the app in Account settings, Connected apps, on the OpenEmail website. An API key is never asked for a code.

409

key_already_published: the address has a live key and replaces was not given, or this key was published for it before. domain_not_verified: the domain of the address is not verified yet.

Gabimet që mund të kthejë çdo veprim400401404422500Katalogu i gabimeve

E disponueshme edhe në

SDK
encryption.publishKey()
CLI
openemail encryption publish-key
MCP
publishEncryptionKey

GET/encryption/keys/lookup

Find the keys to seal mail to

Lejetemails:sendLexon

The live public keys published for each address, the lookup the composer makes before it seals a message. An address with no key comes back with keys empty, so mail to it cannot be sealed. Only keys published by somebody who can read the address count, so a key a former member left behind is never offered.

Requires the emails:send scope.

Parametrat e pyetjes

addressesstringE detyrueshme

Comma-separated recipient addresses, at most 51. A display name in angle brackets is read as its address.

Kthen

One row per address asked about.

Gabimet

Gabimet që mund të kthejë çdo veprim400401403404422500Katalogu i gabimeve

E disponueshme edhe në

SDK
encryption.lookupKeys()
CLI
openemail encryption lookup-keys
MCP
lookupEncryptionKeys

Objektet

AddressKeysobject

objectstringE detyrueshme
Një nga"address_keys"
addressstringE detyrueshme

The address as it was read, lower-cased.

keysobject[]E detyrueshme
fingerprintstringE detyrueshme
publicKeystringE detyrueshme
createdAtstringE detyrueshme
Formatidate-time

EncryptionKeyobject

objectstringE detyrueshme
Një nga"encryption_key"
idstringE detyrueshme

pgpk_ and 24 hex.

addressstringE detyrueshme
fingerprintstringE detyrueshme

40 upper-case hexadecimal characters.

publicKeystringE detyrueshme

The armored OpenPGP PUBLIC KEY BLOCK.

algorithmstringE detyrueshme
createdAtstringE detyrueshme
Formatidate-time
revokedAtstringE detyrueshme

When it was retired. Null on the live key.

Mund të jetë nullFormatidate-time
revokedReasonstringE detyrueshme
Mund të jetë null