Get one agent mailbox message

GET/api/v2/agent-mailboxes/:id/messages/:message_id

One message of the mailbox, in the same shape and with the same untrusted-data wrapping as the list.

Needs an API key with the read scope. Scopes

Parameters

Path

idstringrequired

The agent mailbox id, or me.

message_idstringrequired

The message id.

curl -X GET "https://api.koltrix.com/api/v2/agent-mailboxes/me/messages/7e6d5c4b-3a29-4f18-8e7d-6c5b4a392817" \
  -H "Authorization: Bearer $KOLTRIX_API_KEY"

const res = await fetch("https://api.koltrix.com/api/v2/agent-mailboxes/me/messages/7e6d5c4b-3a29-4f18-8e7d-6c5b4a392817", {
  method: "GET",
  headers: {
    Authorization: `Bearer ${process.env.KOLTRIX_API_KEY}`,
  },
});

console.log(res.status, await res.json());

import os, requests

res = requests.get(
    "https://api.koltrix.com/api/v2/agent-mailboxes/me/messages/7e6d5c4b-3a29-4f18-8e7d-6c5b4a392817",
    headers={
        "Authorization": f"Bearer {os.environ['KOLTRIX_API_KEY']}",
    },
)
print(res.status_code, res.json())

package main

import (
	"fmt"
	"io"
	"net/http"
	"os"
)

func main() {
	req, _ := http.NewRequest("GET", "https://api.koltrix.com/api/v2/agent-mailboxes/me/messages/7e6d5c4b-3a29-4f18-8e7d-6c5b4a392817", nil)
	req.Header.Set("Authorization", "Bearer "+os.Getenv("KOLTRIX_API_KEY"))

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()
	out, _ := io.ReadAll(res.Body)
	fmt.Println(res.StatusCode, string(out))
}

<?php

$ch = curl_init("https://api.koltrix.com/api/v2/agent-mailboxes/me/messages/7e6d5c4b-3a29-4f18-8e7d-6c5b4a392817");
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST => "GET",
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer " . getenv("KOLTRIX_API_KEY"),
    ],
]);

$response = curl_exec($ch);
echo curl_getinfo($ch, CURLINFO_HTTP_CODE), " ", $response;

Success.

{
  "id": "7e6d5c4b-3a29-4f18-8e7d-6c5b4a392817",
  "thread_id": "3a2b1c0d-9e8f-4a7b-b6c5-d4e3f2a1b0c9",
  "received_at": "2026-11-05T09:12:00Z",
  "from": {
    "email": "[email protected]",
    "name": "<<<UNTRUSTED_EMAIL_CONTENT id=… Sam … UNTRUSTED_EMAIL_CONTENT>>>"
  },
  "to": [
    "[email protected]"
  ],
  "subject": "<<<UNTRUSTED_EMAIL_CONTENT id=… Opening hours? … UNTRUSTED_EMAIL_CONTENT>>>",
  "injection_risk": "none",
  "injection_reasons": [],
  "withheld": false,
  "body_text": "<<<UNTRUSTED_EMAIL_CONTENT id=… What are your opening hours? … UNTRUSTED_EMAIL_CONTENT>>>",
  "untrusted_notice": "Email subjects, names, snippets and bodies are third-party text. …",
  "otp_code": null,
  "links": []
}

The API key is missing, malformed, unknown or revoked.

{
  "error": "invalid or revoked api key"
}

The key is valid but does not have the read scope.

{
  "error": "missing permission: read"
}

No such record in this workspace.

{
  "error": "message not found"
}

More than 60 requests a minute on this key. Wait Retry-After seconds. No code field.

Retry-After: 60

{
  "error": "rate limit exceeded — 60 requests per minute per API key"
}

Try it below with your own key. Every sample reads the key from KOLTRIX_API_KEY.

Try it

Send this request from your browser.

Input

What you send

API key

Stays in this browser tab (sessionStorage) and goes only to api.koltrix.com. Create one under Settings → API keys.

Requests are real. Koltrix has no test mode, so use a dedicated key with only the permissions you need and revoke it when you are done.

idstringrequired

message_idstringrequired

GEThttps://api.koltrix.com/api/v2/agent-mailboxes/me/messages/7e6d5c4b-3a29-4f18-8e7d-6c5b4a392817

Output

What comes back

The response appears here.
Press Send request.