Test your app's emails without parsing a single email

import { expect, test } from "@playwright/test";

const API = "https://api.mailbay.dev";
const headers = {
  Authorization: `Bearer ${process.env.MAILBAY_API_KEY}`,
  "Content-Type": "application/json",
};

test("sign up with an emailed code", async ({ page }) => {
  // A fresh inbox just for this test
  const inbox = await (
    await fetch(`${API}/v1/inboxes`, {
      method: "POST",
      headers,
      body: JSON.stringify({ local_part: `signup-${Date.now()}` }),
    })
  ).json();

  await page.goto("/signup");
  await page.getByLabel("Email").fill(inbox.address);
  await page.getByRole("button", { name: "Send code" }).click();

  // Wait for the email. The code is already pulled out for you.
  const res = await fetch(`${API}/v1/inboxes/${inbox.id}/wait?timeout=60`, { headers });
  const { codes } = await res.json();
  await page.getByLabel("Code").fill(codes[0]);
  await page.getByRole("button", { name: "Continue" }).click();
  await expect(page.getByRole("heading", { name: "Welcome" })).toBeVisible();

  // Clean up
  await fetch(`${API}/v1/inboxes/${inbox.id}`, { method: "DELETE", headers });
});

# 1. Find your private domain and your catch-all inbox (once per test run)
curl https://api.mailbay.dev/v1/me -H "Authorization: Bearer $MAILBAY_API_KEY"
#   "shared_domain": "k7m3qz.mailbay.email"
curl https://api.mailbay.dev/v1/inboxes -H "Authorization: Bearer $MAILBAY_API_KEY"
#   the one with "catch_all": true, for example ibx_01jbz8w4k2q9

# 2. Sign up in your app with any new address, for example
#    signup-42@k7m3qz.mailbay.email. No setup needed.

# 3. Wait for the email sent to exactly that address (up to 60 seconds)
curl "https://api.mailbay.dev/v1/inboxes/ibx_01jbz8w4k2q9/wait?to=signup-42@k7m3qz.mailbay.email&timeout=60" \
  -H "Authorization: Bearer $MAILBAY_API_KEY"
# {"message": {...}, "codes": ["482913"], "links": ["https://app.example.com/verify?..."]}

# Your app sends through Sukhovei Mail. Point a test at these addresses:
#   delivered@test.mailbay.dev    -> a "delivered" event
#   bounced@test.mailbay.dev      -> a "bounced" event (a permanent 550 5.1.1)
#   complained@test.mailbay.dev   -> a "complained" event (a spam report)
curl -X POST https://api.mailbay.dev/v1/emails \
  -H "Authorization: Bearer $MAILBAY_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"from": "you@yourdomain.com", "to": "bounced@test.mailbay.dev", "subject": "Bounce test", "text": "Hello"}'