Quickstart

curl https://www.threadcamp.com/v1/inboxes \
  -H "Authorization: Bearer sk_test_sandbox_threadcamp_public_demo" \
  -H "Content-Type: application/json" \
  -d '{ "display_name": "Support Agent" }'

# -> 201
# { "id": "inbox_...", "object": "inbox",
#   "address": "support-agent@relay.threadcamp.com",
#   "autonomy": "auto", "webhook_secret": "..." }

curl https://www.threadcamp.com/v1/emails \
  -H "Authorization: Bearer sk_test_sandbox_threadcamp_public_demo" \
  -H "Content-Type: application/json" \
  -d '{
    "from": "support-agent@relay.threadcamp.com",
    "to": ["you@example.com"],
    "subject": "Hello from ThreadCamp",
    "text": "Sent in one call."
  }'

# -> 200 (sandbox key is test mode: validated, not delivered)
# { "id": "msg_test_...", "object": "message",
#   "status": "test", "mode": "test", "delivered": false, ... }
#
# With a live key (sk_live_...) the same call returns:
# -> 201
# { "id": "msg_...", "object": "message", "status": "sent", ... }

# 1. Add the domain
curl https://www.threadcamp.com/v1/domains \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{ "name": "acme-agents.email" }'

# -> 201 with dns_records: THREE CNAME (dkim), TXT (spf),
#    MX (receiving), TXT (dmarc). Place them at your DNS host.
#
#    The MX goes on mail.acme-agents.email, not the root. MX is the one
#    record that cannot be shared: ours at your root domain would take
#    over every mailbox on it, so Google Workspace or Microsoft 365
#    there would break. Your sending identity stays on the root, so you
#    still send as you@acme-agents.email. Pass inbound_host to choose
#    the root deliberately.

# 2. Run a verification check once the records are live.
curl -X POST https://www.threadcamp.com/v1/domains/dom_.../verify \
  -H "Authorization: Bearer sk_live_..."

# -> Every record comes back annotated, so you can see which one is
#    holding you up instead of guessing:
# {
#   "status": "pending",
#   "sending_ready": false,
#   "dns_records": [
#     { "purpose": "dkim", "status": "verified", "found": ["..."] },
#     { "purpose": "dkim", "status": "missing",  "found": [] },
#     { "purpose": "spf",  "status": "conflict",
#       "found": ["v=spf1 include:_spf.google.com ~all"],
#       "detail": "Add include:amazonses.com to the EXISTING record -
#                  a second v=spf1 record breaks SPF entirely." }
#   ]
# }
#
# Or from a terminal:  npx @threadcamp/cli dns check acme-agents.email