Your account

Every workspace your Nextmail account can open, the ones you own and the ones you joined, as the workspace switcher of the app lists them, with the one the app opens for you. It is about your account, not this connection: getConnections lists what these tools can act on, and switchAppWorkspace changes only what the app opens, never what these tools act on.

Choose which workspace the Nextmail app opens for you, as the workspace switcher does. Pass a workspace id from listAccountWorkspaces. It changes the app only: these tools keep acting on the workspace they act on now.

Create a new workspace that you own, on the Free plan, and make it the one the app opens for you, as creating one in the app does. An account can own one Free workspace, so while you own one this is refused until you upgrade it.

Delete the workspace these tools act on, with its domains, addresses, mail and members, and cancel its plan. It cannot be undone. Only its owner may do it, never through an app limited to some addresses, and your first workspace can never be deleted. confirm has to be the name of the workspace, as listAccountWorkspaces shows it.

Which kinds of email Nextmail sends you, as Account, Notifications shows them, and the workspaces whose notifications are muted on your phone. Account and billing email are always on.

Turn one kind of email from Nextmail on or off for you. activity and product can be turned off; account and billing cannot.

Mute or unmute the notifications of one workspace on your phone, on every phone you signed in on. Pass a workspace id from listAccountWorkspaces.

Set your profile photo, replacing any there was, as Account, Profile does. Pass the picture in base64 as image, with its type as contentType: image/png, image/jpeg, image/webp, image/gif, up to 5 MB. It is fitted into a 512 pixel square.

Remove your profile photo and delete the stored image, so the app shows your initials again. Removing it when there is none changes nothing.

Your Nextmail username, whether you chose it or it was made for you, and the free address it gives you. A username you chose never changes.

Whether you could choose a username, without choosing it, and why not when you could not. It is lowercased and its spaces become dots before it is checked.

Choose your username, and with it your free address, for good. Once chosen it never changes, so check it with checkUsername first and make sure it is the one you want.

Every app you connected to your account with OAuth, as Account, Connected apps lists them: what each may reach, until when, and its client id, which revokeConnectedApp takes. What an app may reach is changed in the app, never from here.

Remove an app you connected: every token it holds and the access you gave it are deleted, so its next call is refused and it has to ask again. Pass its client id from listConnectedApps. Removing the app you are talking through disconnects it.

The invitations to join a workspace that are waiting for you, oldest first, each with the id acceptInvitation and declineInvitation take. It is not listInvitations, which lists the invitations this workspace sent.

Accept an invitation that is waiting for you and join its workspace with the role and the addresses it gives. activate also makes it the workspace the app opens for you. A workspace that asks for two-factor sign-in is refused until you turn it on.

Decline an invitation that is waiting for you. Its link stops working and whoever sent it is told. It cannot be taken back: they would have to invite you again.

Every browser and phone you are signed in on, as Account, Security lists them: the browser and system, the country and city it was last used from, how it signed in, when it was last used, and its id, which revokeSession takes. No address is recorded, only the place.

Sign one browser or phone out of your account. Its next request is refused at once, and a phone stops getting notifications. Pass its id from listSessions.

Sign every browser and phone out of your account at once, for when a device is lost or a password may have leaked. That includes the browser or phone you are using, if you are signed in there. With connectedApps true, every connected app is removed as well, the one you are talking through included.

Your security log, newest first: each sign-in with its device and place, devices signed out, password changes and resets, two-factor turned on or off, and passkeys added or removed. Nothing is ever removed from it.

The passkeys that can sign in to your account, with the name of each, whether it is synced between your devices, when it was last used, and its id, which renamePasskey and removePasskey take. A passkey is added on the device that holds it, in Account, Security, never from here.

Give a passkey a name you will recognise. Pass its id from listPasskeys.

Remove a passkey from your account, so it can no longer sign in or confirm a change. You are told by email. The passkey stays on the device until you delete it there. Pass its id from listPasskeys.

The request log of an app you connected, newest first: each REST call it made with the access you gave it, with the method, the path, the status, how long it took and the error code of a refusal. Pass its client id from listConnectedApps. failedOnly keeps the refused calls, and cursor takes the cursor of the previous answer.