Verification

Read the raw request body, verify a signature using the endpoint secret, and reject stale timestamps.

Rotation

Rotate an endpoint secret if it may be exposed. An exact signature algorithm will be defined by the backend.

Proposed code example

// Illustrative only — proposed interface
const response = await mailflow.messages.send({
  projectId: "prj_example",
  to: "recipient@example.com",
  templateId: "tpl_welcome"
});

Illustrative response

{
  "id": "msg_example",
  "status": "accepted",
  "environment": "test"
}

Error response example

{
  "error": {
    "code": "validation_error",
    "message": "A required field is missing."
  }
}