Skip to main content
GET
List API-side send rejections
Requires the IAM action email:ListRejections. See EMAIL permissions for the full list, what each one covers, and an example policy.

Authorizations

Authorization
string
header
required

An OAuth 2.0 bearer token, sent as Authorization: Bearer <token>. This is the recommended way to authenticate.

Get one by exchanging a service account's access key pair at POST /v1/oauth/token with grant_type=client_credentials. It is the standard client-credentials grant, so any OAuth-aware library will obtain and refresh it for you.

Tokens last an hour by default. The same access key pair is separately your AWS SigV4 credential for the S3-compatible object endpoint, which speaks nothing else.

Query Parameters

crn
string

Exact rejection event CRN. Foreign scope or a missing event returns an empty page.

before
string<date-time>

RFC 3339 timestamp — return only rejections older than this. Omit to start from the newest. This is what meta.marker carries.

limit
integer
default:50
Required range: 1 <= x <= 200
identity
string

Identity UUID, CRN or account-unique name; missing or foreign references return empty results.

reason
enum<string>

Narrow to one rejection reason.

Available options:
ALL_RECIPIENTS_SUPPRESSED,
IDENTITY_SUSPENDED,
IDENTITY_NOT_VERIFIED,
FROM_DOMAIN_MISMATCH,
RATE_LIMIT

Response

Paginated rejection list.

rejections
object[]
required
meta
object
required