# flow2act · Sandbox test mailbox

Disabled: authenticated accounts assigned to the active approval or reviewer group are required.

This compatibility endpoint denies content access and decisions. Existing guest links cannot authorize access. Assign an internal group and upload files to private storage instead.

## GET /v1/sandbox/mailbox

Authentication: restricted integration key (scope: flows:write) or flow2act sign-in access token
Required tenant header: X-Organization-Id.
Required user permissions: Administrator or Sandbox developer required. The API checks current membership, roles, key scopes and resource permissions on every request. Documentation visibility grants no access.

## Request example (replace example IDs)

```sh
curl "https://api.flow2act.com/v1/sandbox/mailbox" \
  -H "authorization: Bearer $FLOW2ACT_API_KEY" \
  -H "x-organization-id: 10000000-0000-4000-8000-000000000001"
```

## Response excerpt

```json
{
  "error": "EXTERNAL_ACCOUNT_REQUIRED"
}
```

Source: /docs/sandbox-mailbox
Full schemas: /docs/openapi.json
