API Reference · Guest sessions

Resume

Exchange a one-time resume token

POST/v1/resume

Public (no credentials needed)

Unclaimed drafts get a fresh guest credential (+ cookie). Tokens expire after 24h and work once; otherwise 410 resume_link_expired.

cURL example

cURL request

curl -X POST "https://api.verifiedinbox.ai/v1/resume" \
  -H "Content-Type: application/json" \
  -d '{
    "token": "string"
  }'

Request body

application/json · required

Field	Type	Description
tokenrequired	string	One-time `rt_…` token from a resume link.

Example request payload (ResumeRequest)

{
  "token": "string"
}

Response

200 OKWhere to continue.

application/json

Field	Type	Description
application_idrequired	string (uuid)	—
guest_tokenrequired	string \| null	A new guest credential for unclaimed drafts; null when the draft belongs to an account.
requires_sign_inrequired	boolean	—
steprequired	string	— Allowed: `domain`, `email-security`, `logo`, `trademark`, `eligibility`, `checkout`, `business`, `logo-approval`, `dns`, `certificate`, `go-live`

Example 200 response (ResumeResult)

{
  "application_id": "0192a5e0-1234-7000-8000-000000000001",
  "guest_token": "string",
  "requires_sign_in": true,
  "step": "domain"
}

Other responses & possible errors

Expand a status code below to see the error code, description, and example error payload.

400 (invalid_request)`invalid_request` — the request is malformed.

`invalid_request` — the request is malformed.

Example 400 error response

{
  "error": {
    "code": "invalid_request",
    "message": "Please provide a valid domain name."
  }
}

422 (unprocessable)`unprocessable` / `blocked_provider` — understood but can't be done (plain-English reason).

`unprocessable` / `blocked_provider` — understood but can't be done (plain-English reason).

Example 422 error response

{
  "error": {
    "code": "unprocessable",
    "message": "Shared mailbox providers like gmail.com cannot be verified."
  }
}

429 (rate_limited)`rate_limited` — retry after `Retry-After` seconds (`details.retry_after_seconds`). `limit_reached` — a quota is used up; `details.limit` names it and `next_action` offers support.

`rate_limited` — retry after `Retry-After` seconds (`details.retry_after_seconds`). `limit_reached` — a quota is used up; `details.limit` names it and `next_action` offers support.

Example 429 error response

{
  "error": {
    "code": "rate_limited",
    "message": "Too many requests. Please wait a moment and try again."
  }
}

Was it helpful?