# POST /api/v1/inboxes/:id/messages/:msgId/release

Auth: Bearer

HTML: https://cooperemail.com/docs/reference/release-message

## Summary

Release a message that inbound screening held. Removes the held label, then fires message.received and creates a task when the sender is a verified owner or allowlisted sender who passes the inbox sender-auth check. The suspicious label stays. A message that is not held returns 409 message_not_held and does not fire a webhook or create a task. Calling release again returns the same 409. Another account's inbox returns 404 inbox_not_found. An unknown message returns 404 message_not_found. The body stays untrusted data. Screening is a heuristic, not a guarantee, and it never drops mail on its own.

## Request

This call has no JSON body.

## Response

HTTP 200. Sample values illustrate the schema.

```json
{
  "id": "inb_example",
  "inbox_id": "inb_example",
  "thread_id": "thr_example",
  "direction": "inbound",
  "from": "ada@example.com",
  "to": [
    "string"
  ],
  "subject": "Hello",
  "text": "Tuesday works.",
  "html": "string",
  "extracted_text": "string",
  "extracted_html": "string",
  "preview": "string",
  "delivery_events": [
    {
      "type": "string",
      "recipient": "string",
      "created_at": "2026-10-18T12:00:00.000Z",
      "detail": "string"
    }
  ],
  "cc": [
    "string"
  ],
  "bcc": [
    "string"
  ],
  "reply_to": "string",
  "in_reply_to": "string",
  "references": [
    "string"
  ],
  "labels": [
    "string"
  ],
  "auth": {
    "spf": "string",
    "dkim": "string",
    "dmarc": "string"
  },
  "safety": {
    "score": 0,
    "verdict": "clean",
    "signals": [
      {
        "type": "string",
        "detail": "string"
      }
    ],
    "mode": "off",
    "reason": "string"
  },
  "provider": "string",
  "client_id": "inb_example",
  "idempotent": true
}
```

## Errors

- HTTP 409 message_not_held
- HTTP 404 inbox_not_found
- HTTP 404 message_not_found

The live `message` is the sentence for that code. Branch on `code`.

```json
{
  "error": {
    "type": "conflict",
    "code": "message_not_held",
    "docs_url": "https://cooperemail.com/docs#message_not_held"
  }
}
```

## Idempotency

This route does not document Idempotency-Key or client_id.