API Keys Guide

const response = await fetch('https://api.centerleap.com/emails', {
  method: 'POST',
  headers: {
    'Authorization': `Bearer ${process.env.CENTERLEAP_API_KEY}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    from: 'hello@yourdomain.com',
    to: 'recipient@example.com',
    subject: 'Hello from CenterLeap',
    html: '<p>This email was sent via REST API.</p>',
  }),
});

const { id } = await response.json();
console.log('Email sent:', id);

curl -X POST 'https://api.centerleap.com/emails' \
  -H 'Authorization: Bearer bm_live_xxx' \
  -H 'Content-Type: application/json' \
  -d '{
    "from": "hello@yourdomain.com",
    "to": "recipient@example.com",
    "subject": "Hello from CenterLeap",
    "html": "<p>Hello!</p>"
  }'

// Works in any Deno or edge-runtime environment
const response = await fetch('https://api.centerleap.com/emails', {
  method: 'POST',
  headers: {
    'Authorization': `Bearer ${Deno.env.get('CENTERLEAP_API_KEY')}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    from: 'noreply@yourdomain.com',
    to: 'user@example.com',
    subject: 'Welcome!',
    html: '<h1>Welcome to our app!</h1>',
  }),
});

const { id } = await response.json();

{
  "id": "49a3999c-0ce1-4ea6-ab68-afcd6dc2e794"
}

{
  "object": "list",
  "data": [
    {
      "id": "<message-id@example.com>",
      "from": "sender@example.com",
      "to": "bot@yourdomain.com",
      "subject": "Hello from a customer",
      "preview": "First 200 characters of the email body...",
      "date": "2026-03-19T18:00:00Z",
      "is_read": false,
      "is_starred": false,
      "is_sent": false,
      "folder": "INBOX",
      "has_attachments": false
    }
  ],
  "total": 42,
  "has_more": true,
  "page": 1,
  "page_size": 20
}

{
  "object": "email",
  "id": "<message-id@example.com>",
  "from": "sender@example.com",
  "from_name": "John Doe",
  "to": "bot@yourdomain.com",
  "subject": "Hello from a customer",
  "html": "<p>Full HTML body of the email...</p>",
  "text": "Full plaintext body of the email...",
  "date": "2026-03-19T18:00:00Z",
  "folder": "INBOX",
  "is_read": false,
  "is_starred": false,
  "is_sent": false,
  "has_attachments": false
}

// Step 1: List inbox (preview only — fast)
const listRes = await fetch('https://api.centerleap.com/emails?folder=INBOX&limit=10', {
  headers: { 'Authorization': `Bearer ${process.env.CENTERLEAP_API_KEY}` },
});
const { data: emails } = await listRes.json();

// Show previews
for (const email of emails) {
  console.log(`[${email.is_read ? 'READ' : 'NEW'}] ${email.subject}`);
  console.log(`  Preview: ${email.preview}`);
}

// Step 2: User opens an email — fetch full body
const emailId = encodeURIComponent(emails[0].id);
const detailRes = await fetch(`https://api.centerleap.com/emails/${emailId}`, {
  headers: { 'Authorization': `Bearer ${process.env.CENTERLEAP_API_KEY}` },
});
const fullEmail = await detailRes.json();

// Now you have the complete HTML/text body
console.log(fullEmail.html);  // Full HTML
console.log(fullEmail.text);  // Full plaintext

// Mark as read
await fetch('https://api.centerleap.com/emails/12345?folder=INBOX', {
  method: 'PATCH',
  headers: {
    'Authorization': `Bearer ${process.env.CENTERLEAP_API_KEY}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ is_read: true }),
});

// Mark as unread
await fetch('https://api.centerleap.com/emails/12345?folder=INBOX', {
  method: 'PATCH',
  headers: {
    'Authorization': `Bearer ${process.env.CENTERLEAP_API_KEY}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ is_read: false }),
});

// Star an email
await fetch('https://api.centerleap.com/emails/12345?folder=INBOX', {
  method: 'PATCH',
  headers: {
    'Authorization': `Bearer ${process.env.CENTERLEAP_API_KEY}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ is_starred: true }),
});

// Move to a folder
await fetch('https://api.centerleap.com/emails/12345?folder=INBOX', {
  method: 'PATCH',
  headers: {
    'Authorization': `Bearer ${process.env.CENTERLEAP_API_KEY}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ folder: 'Archive' }),
});

// Reply to an email
await fetch('https://api.centerleap.com/emails', {
  method: 'POST',
  headers: {
    'Authorization': `Bearer ${process.env.CENTERLEAP_API_KEY}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    from: 'bot@yourdomain.com',
    to: 'sender@example.com',
    subject: 'Re: Original Subject',
    html: '<p>Thanks for your email!</p>',
    in_reply_to: '<original-message-id@example.com>',  // Links to parent
  }),
});

{
  "object": "thread",
  "thread_id": "dc4b68b5-2d24-4220-a95f-1ac284e5a0e2",
  "subject": "Project Update",
  "message_count": 3,
  "data": [
    { "id": "msg-1", "from": "client@example.com", "subject": "Project Update", "is_sent": false, "thread_position": 0 },
    { "id": "msg-2", "from": "bot@yourdomain.com", "subject": "Re: Project Update", "is_sent": true, "thread_position": 1 },
    { "id": "msg-3", "from": "client@example.com", "subject": "Re: Project Update", "is_sent": false, "thread_position": 2 }
  ]
}

const fileContent = btoa('Hello World');  // Base64 encode

const response = await fetch('https://api.centerleap.com/emails', {
  method: 'POST',
  headers: {
    'Authorization': `Bearer ${process.env.CENTERLEAP_API_KEY}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    from: 'bot@yourdomain.com',
    to: 'recipient@example.com',
    subject: 'Report attached',
    html: '<p>Please find the report attached.</p>',
    attachments: [
      {
        filename: 'report.pdf',
        content: fileContent,        // Base64-encoded file
        content_type: 'application/pdf',
      }
    ],
  }),
});

{
  "object": "list",
  "data": [
    {
      "id": "attachment-uuid",
      "filename": "report.pdf",
      "content_type": "application/pdf",
      "size_bytes": 245000,
      "is_inline": false,
      "content_id": null
    }
  ]
}

// List attachments on an email
const listRes = await fetch(`https://api.centerleap.com/emails/${emailId}/attachments`, {
  headers: { 'Authorization': `Bearer ${process.env.CENTERLEAP_API_KEY}` },
});
const { data: attachments } = await listRes.json();

// Download the first attachment
const fileRes = await fetch(
  `https://api.centerleap.com/emails/${emailId}/attachments/${attachments[0].id}`,
  { headers: { 'Authorization': `Bearer ${process.env.CENTERLEAP_API_KEY}` } }
);
const fileBuffer = await fileRes.arrayBuffer();
// Save or process the file...

event: connected
data: {"email":"bot@yourdomain.com","timestamp":"2026-03-19T18:00:00Z"}

event: new_email
data: {"email":"bot@yourdomain.com","mailbox":"INBOX","uid":12345,"timestamp":"2026-03-19T18:05:00Z"}

event: heartbeat
data: {"timestamp":"2026-03-19T18:05:30Z"}

// Subscribe to real-time email notifications
const eventSource = new EventSource(
  'https://api.centerleap.com/emails/stream',
  { headers: { 'Authorization': `Bearer ${process.env.CENTERLEAP_API_KEY}` } }
);

// Note: In Node.js, use the 'eventsource' npm package with custom headers
// import EventSource from 'eventsource';

eventSource.addEventListener('connected', (e) => {
  console.log('Connected:', JSON.parse(e.data));
});

eventSource.addEventListener('new_email', (e) => {
  const { email, mailbox, uid } = JSON.parse(e.data);
  console.log(`New email in ${mailbox}! UID: ${uid}`);
  // Fetch the new email
  // await fetch(`https://api.centerleap.com/emails?folder=${mailbox}&limit=1`, ...)
});

eventSource.addEventListener('heartbeat', () => {
  // Connection is alive
});

eventSource.onerror = () => {
  console.log('Connection lost, will auto-reconnect');
};

curl -N 'https://api.centerleap.com/emails/stream' \
  -H 'Authorization: Bearer bm_live_your_key_here'

Revoking a Key

If a key is compromised or no longer needed, revoke it immediately:

1. Go to your domain's API Keys tab
2. Find the key you want to revoke
3. Click the revoke button
4. Confirm the action

Revocation is immediate - all pending requests with that key will be rejected.

Key Rotation

To rotate keys safely without downtime:

1. Create a new API key
2. Update your application with the new key
3. Verify the new key is working
4. Revoke the old key

Key Expiration

You can set an optional expiration date when creating a key. Expired keys are automatically deactivated and cannot be used.