# GET/POST /api/v1/questions/answer?token=

Auth: public

HTML: https://cooperemail.com/docs/reference/question-answer

## Summary

Owner answer link. GET shows Answer: and a Confirm button and does not record the answer. POST records it. The first answer wins. A later POST is HTTP 200 and shows Already answered, and the stored answer does not change. Expired and canceled questions show a clear page. The page sends Content-Security-Policy frame-ancestors 'none', X-Frame-Options DENY, and Referrer-Policy same-origin. Origin null from a same-origin form post is accepted. A cross-site post is rejected. A stale page nonce shows the Confirm button again. An API key cannot submit the link. A quoted link that lands in an agent inbox burns the token.

## Query

```json
?token=
```

## Response

The OpenAPI document does not declare a JSON response schema for this call. The summary is the contract.

## Errors

The summary and the OpenAPI operation do not name an error code.

## Idempotency

This route does not document Idempotency-Key or client_id.