ResellerHQ
Log inTry the sandbox free
GuidesAPI reference
Mailboxes

Upload a mailbox profile photo

POST
/v1/mailboxes/{id}/picture

Sets the Google profile photo of a set-up mailbox from an uploaded PNG, JPEG, WebP or GIF (at most 1 MB): the photo people see beside its mail. To use an image already online, send its address as profilePictureUrl to PATCH /mailboxes/:id.

Authorization

apiKey
headerAuthorizationBearer <token>

An API key from the Developers page. rhq_test_ keys reach the sandbox, rhq_live_ keys the live side.

Path Parameters

id*string

Request Body

application/json
  1. body
dataUrl*string

A data: URL, such as FileReader.readAsDataURL() produces in a browser. The declared mime type in it is ignored - the real type is read from the file’s own bytes

Response Body

Success

application/json
  1. response

Success

id*string
mailboxDomainId*string
email*string
username*string
firstName*string
lastName*string
profilePictureUrl*string|null
isAdmin*boolean

The domain's first mailbox, which administers its Google account. OAuth client IDs are granted through it

status*string

queued until the domain is connected; provisioning while it is being set up (minutes to a few hours); active with its sign-in details ready; failed if it could not be set up, when nothing is charged for it; cancelled once its domain is deleted

Value in"queued""provisioning""active""failed""cancelled"
setupStage*|

Where setup has got to while provisioning

failure*|

Why the mailbox is failed

customerId*string|null
activatedAt*|null
actor*|

Who did it; null for anything done before we recorded that

createdAt*string
Formatdate-time
curl -X POST "https://example.com/v1/mailboxes/mbx_01K6XJ4Q8ZT3M9R5V2B7WDHNCA/picture" \  -H "Content-Type: application/json" \  -d '{    "dataUrl": "string"  }'
{  "id": "mbx_01K6XJ4Q8ZT3M9R5V2B7WDHNCA",  "mailboxDomainId": "mdm_01K6XJ4Q8ZT3M9R5V2B7WDHNCA",  "email": "[email protected]",  "username": "jo",  "firstName": "Jo",  "lastName": "Bloggs",  "profilePictureUrl": "string",  "isAdmin": true,  "status": "queued",  "setupStage": "configuring_dns",  "failure": {    "code": "DOMAIN_IN_USE_GOOGLE",    "message": "Domain is already in use in Google Workspace."  },  "customerId": "cus_01K6XJ4Q8ZT3M9R5V2B7WDHNCA",  "activatedAt": "2026-10-07T11:04:31.000Z",  "actor": {    "kind": "user",    "label": "string"  },  "createdAt": "2026-10-07T11:04:31.000Z"}

Update a mailbox PATCH

Changes the name, username (and so the address), profile picture or password of a set-up mailbox.

Reveal sign-in details POST

The mailbox's password, app password and two-step verification secret, with the Gmail IMAP and SMTP settings. Each reveal is recorded in your activity log. Two ways to connect: sign in through OAuth with a client ID granted on the domain, or use the app password over IMAP/SMTP.