curl -X GET https://win.oneshotagent.com/v1/tools/inbox/email_123 \
-H "X-Agent-ID: <your_agent_uuid>"
const response = await fetch(
`https://win.oneshotagent.com/v1/tools/inbox/${emailId}`,
{
headers: {
"X-Agent-ID": agentUuid,
},
},
);
{
"id": "email_123",
"from": "[email protected]",
"authenticated": true,
"subject": "Re: Your inquiry",
"body": "Thanks for reaching out!",
"body_html": "<p>Thanks for reaching out!</p>",
"received_at": "2025-12-28T12:00:00Z",
"thread_id": "thread_abc",
"attachments": [],
"hidden_removed": 0,
"untrusted_content": true
}
Email Inbox
Read Email
Get a specific inbound email by ID
GET
/
v1
/
tools
/
inbox
/
{emailId}
curl -X GET https://win.oneshotagent.com/v1/tools/inbox/email_123 \
-H "X-Agent-ID: <your_agent_uuid>"
const response = await fetch(
`https://win.oneshotagent.com/v1/tools/inbox/${emailId}`,
{
headers: {
"X-Agent-ID": agentUuid,
},
},
);
{
"id": "email_123",
"from": "[email protected]",
"authenticated": true,
"subject": "Re: Your inquiry",
"body": "Thanks for reaching out!",
"body_html": "<p>Thanks for reaching out!</p>",
"received_at": "2025-12-28T12:00:00Z",
"thread_id": "thread_abc",
"attachments": [],
"hidden_removed": 0,
"untrusted_content": true
}
Returns one inbound email by ID, with its plain text body, HTML body, and attachments. Free.
Provider verification sets
Authentication
Requires theX-Agent-ID header with your wallet address.
Reads require a signed read proof (x-agent-proof header) showing you control that wallet.
Path Parameters
string
required
Email ID
authenticated to true only when From-domain alignment is established. Failed, missing and historical results are false. This authenticates the domain, not the safety of the message content.
Response
string
Email identifier
string
Sender email address
string
Email subject
string
Readable body derived from filtered HTML when available (its visible text if the HTML cannot be converted to Markdown)
string
HTML body with comments, hidden elements, image alt text, zero-width characters and bidi controls removed
number
Number of removed segments across the subject and bodies. Each removed subtree, comment, alt attribute or consecutive run of control characters counts once. The message also carries
untrusted_content: true.string
ISO 8601 timestamp
string
Thread identifier
array
Attachment objects (same format as the list endpoint)
curl -X GET https://win.oneshotagent.com/v1/tools/inbox/email_123 \
-H "X-Agent-ID: <your_agent_uuid>"
const response = await fetch(
`https://win.oneshotagent.com/v1/tools/inbox/${emailId}`,
{
headers: {
"X-Agent-ID": agentUuid,
},
},
);
{
"id": "email_123",
"from": "[email protected]",
"authenticated": true,
"subject": "Re: Your inquiry",
"body": "Thanks for reaching out!",
"body_html": "<p>Thanks for reaching out!</p>",
"received_at": "2025-12-28T12:00:00Z",
"thread_id": "thread_abc",
"attachments": [],
"hidden_removed": 0,
"untrusted_content": true
}