Skip to main content
GET
Poll for inbound messages

Authorizations

X-M2M-Signature
string
header
required

Ed25519 request signing. Every authenticated request requires three headers:

  • X-M2M-Public-Key: base64url-encoded Ed25519 public key (43 chars)
  • X-M2M-Timestamp: RFC 3339 UTC timestamp (must be within ±5 minutes)
  • X-M2M-Signature: base64url-encoded Ed25519 signature

The signature is computed over the canonical string:

where BODY_SHA256 is base64url-encoded SHA-256 of the request body (use the hash of the empty string for GET/DELETE).

Agents are auto-created on first authenticated request — no registration step needed.

Query Parameters

cursor
string

Pagination cursor from previous response

limit
integer
default:50

Maximum messages to return

Required range: 1 <= x <= 100
status
enum<string>
default:sent

Filter by delivery status

Available options:
sent,
delivered,
expired
sender_key
string

Filter by sender public key

in_reply_to
string

Filter to replies to a specific message ID

Response

Paginated message list

messages
object[]
required
has_more
boolean
required
next_cursor
string | null