List all email aliases on the authenticated EmailAlias account. Returns id, alias_email, destination_email, active, label, emails_forwarded, emails_blocked.

Create a new email alias. 'random' generates a short code; 'custom' uses custom_code; 'tagged' prepends a random code to a user-provided tag. destination_email must be the user's primary email OR a verified forwarding destination. display_name is Premium-only and shown as the sender on outbound mail.

Update an alias: toggle active (enable/disable) or rename its label. To change the sender display name, use update_alias_display_name (separate 24h-cooldown endpoint).

Schedule a display-name change on an alias (Premium-only). Edits do NOT take effect immediately — the new value lands in display_name_pending and promotes 24h after the most recent edit. Editing again resets the clock. Capped at 3 edits per rolling 24h per alias. Pass display_name=null (or empty string) to clear; clearing follows the same cooldown. Brand-impersonation patterns (PayPal, Apple, banks, etc.) are rejected with 400.

Permanently delete an alias. This cannot be undone. Prefer update_alias with active=false if the user might want it back.

List domains the user can create aliases on (system domains + their verified custom domains).

List the user's forwarding destinations (primary email plus verified extras). is_primary=true marks the account email.

Add a new forwarding destination. Triggers a verification email to that address; the destination is unusable until the recipient clicks the link. Premium feature.

Remove a forwarding destination. Fails with 409 if any alias still forwards to it — reassign those aliases first.

Send an email from one of the user's aliases. The recipient sees only the alias address. Requires Premium and a verified, active alias.

Account-wide counters: total aliases, active aliases, emails forwarded, emails blocked, exposure alerts.

Paginated email-forwarding log covering the last 90 days. Each item has sender, subject, direction, status, block_reason.

Suspicious-sender alerts scored against the user's aliases. Use this to identify risky senders and decide which aliases to disable.