Authentication

API keys

All API requests require a Bearer token. API keys are scoped to a single organization — they can only access that organization's emails.

Creating an API key

1. Go to Organization Settings (/org/edit)
2. Click the API Keys tab
3. Enter a name for the key
4. Optionally set an expiration (1–3650 days)
5. Click Create

The key is shown once after creation — copy it immediately. It cannot be retrieved later.

Key format

API keys are prefixed with mo_ followed by a random string:

mo_abc123def456...

Using the key

Include the key in the Authorization header:

curl -H "Authorization: Bearer mo_your_api_key" \
  https://mailoven.com/api/v1/emails?to=test

Revoking a key

Go to Organization Settings → API Keys and click Delete next to the key you want to revoke. The key stops working immediately.

Error responses

Status	Error	Meaning
401	Missing API key	No Authorization header provided
401	Invalid API key format	Header doesn't match Bearer <token>
401	Invalid API key	Key not found or has been deleted
401	API key expired	Key has passed its expiration date
429	API rate limit exceeded	You've hit the per-org rate limit