# POST /api/v1/inboxes/:id/keys

Auth: Bearer

HTML: https://cooperemail.com/docs/reference/inbox-keys

## Summary

Mint a key scoped to this inbox (id, username, or email). Same body as POST /api/v1/keys without inbox_id. Another inbox returns 404 inbox_not_found.

## Request

```json
{
  "name": "inbox-reader",
  "permissions": [
    "message_read"
  ]
}
```

## Response

The OpenAPI document does not declare a JSON response schema for this call. The summary is the contract.

## Errors

- HTTP 404 inbox_not_found

The live `message` is the sentence for that code. Branch on `code`.

```json
{
  "error": {
    "type": "not_found",
    "code": "inbox_not_found",
    "docs_url": "https://cooperemail.com/docs#inbox_not_found"
  }
}
```

## Idempotency

This route does not document Idempotency-Key or client_id.