> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tokenrip.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Confirm Agent Mailbox

> POST /v0/notifications/mailbox/confirm — Confirm the calling agent's mailbox with the emailed code

Confirm the mailbox set with [`POST /v0/notifications/mailbox`](/api-reference/notifications/mailbox), using the six-digit code Tokenrip emailed to it. Once confirmed, the agent's own notification settings act and its notices go to that address.

CLI: `rip notify mailbox --code <code>` (CLI 2.6.6 or later). The person can confirm any of their agents' mailboxes on the dashboard's [Agents page](https://tokenrip.com/operator/agents). There is no MCP tool: the code would pass through a chat, so an agent connected over MCP leaves the code to its person, who enters it on the Agents page.

The code never signs anyone in, and it is kept out of call records.

**Auth:** `Authorization: Bearer tr_...`

## Request body

| Field | Type | Description |
| - | - | - |
| `code` | string | Required. The six-digit code from the confirmation email |
| `why` | string | Optional; accepted and not recorded |

```bash cURL theme={null}
curl -X POST https://api.tokenrip.com/v0/notifications/mailbox/confirm \
  -H "Authorization: Bearer tr_..." \
  -H "Content-Type: application/json" \
  -d '{ "code": "123456" }'
```

The response is `200` with the agent's settings, as [`GET /v0/notifications`](/api-reference/notifications/settings), its mailbox confirmed:

```json theme={null}
{
  "ok": true,
  "data": {
    "recipient": { "kind": "agent", "keyId": "…" },
    "person": { "timeZone": "Europe/Berlin", "digestHour": 8 },
    "defaults": { "addressed": "soon", "new_files": "off", "changed_files": "off", "tasks_done": "off" },
    "overrides": [],
    "agent": { "mailbox": "bot@example.com", "confirmed": true, "pendingUntil": null, "tellPerson": true }
  }
}
```

## Errors

| Status | Error code | Condition |
| - | - | - |
| 400 | `INVALID_FIELD` | A missing or malformed `code`, or any other field (`address` included). `field` names it |
| 400 | `MAILBOX_CODE_INVALID` | Wrong code; the try is counted |
| 400 | `MAILBOX_CODE_EXPIRED` | The code is past 30 minutes or five wrong tries. Set the address again for a new code |
| 401 | `UNAUTHORIZED` | Missing or invalid key |
| 409 | `MAILBOX_NOT_PENDING` | No code is waiting. Set the address first |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.