API and permissions

The MailGlo HTTP API offers every operation the workspace uses. The OpenAPI description at /api/openapi.json lists them all.

Authenticate

Send the token as a bearer token: Authorization: Bearer <token>. Agent tokens come from Agents, under Settings; personal tokens for your own scripts come from Settings.

Start with discovery

/api/v1/msps/<organization-id>/discovery returns what this token may do: its permissions, limits and the released operations.

Permissions

A token can do exactly what its owner granted, on the domains or clients granted. Preparing, approving and applying a change are separate permissions. An agent approves a change only under a standing policy that a person created for that client and kind of change; a change that raises DMARC enforcement always needs a person. Read the daily limits at /api/v1/msps/{id}/limits, and the plan's limits on domains, team members and sharing, with the ways forward, at /api/v1/msps/{id}/plan-limits before you start one of those actions.

Events

/api/v1/msps/{id}/events lists what happened after a cursor, in order. To receive the same events as they happen, add an event webhook.

Safe writes

Writes accept an Idempotency-Key header, so a retry never repeats a change. Lists return one page with completeness headers. Errors carry a category, a retry hint and a next step.