Authentication

Every request to the ClawdMail API must include a valid API key. Keys identify your account, enforce rate limits, and scope access to your workspace.

API Keys

API keys follow the format cm_live_xxxxxxxxxxxxxxxx. You can create keys in Settings → API Keys or ask Oliver to generate one for you in chat.

Each key is tied to a single workspace. You can create multiple keys to separate environments (e.g. production vs. staging) and revoke them independently.

Bearer Token

Pass your API key in the Authorization header as a Bearer token with every request.

curl https://app.clawdmail.ai/api/v1/emails \
  -H "Authorization: Bearer cm_live_xxxxxxxxxxxxxxxx" \
  -H "Content-Type: application/json"

Rate Limiting

The API allows 100 requests per minute per API key. If you exceed the limit you’ll receive a 429 Too Many Requests response.

Every response includes headers so you can track your usage:

X-RateLimit-Limit: 100
X-RateLimit-Remaining: 97
X-RateLimit-Reset: 1709562000

Keep your keys safe. API keys are only displayed once when created. Store them in a secure location like an environment variable or a secrets manager. If a key is compromised, revoke it immediately in Settings and generate a new one.