Lumora

API reference

The Lumora REST API lets you send transactional email, manage domains, and work with templates. Base URL Loading....

Authentication

Authenticate every request with your secret API key. Keys are created per app in your dashboard and carry that app's permissions. Never expose a secret key in client-side code.

Authorization header

Authentication

x-api-key: lum_sk_your_api_key_here

Use x-api-key for integrations and onboarding. The API also accepts Authorization: Bearer ... for compatibility. Missing or invalid keys return 401.

Errors

Lumora uses conventional HTTP status codes. Error bodies include a stable error code and an optional message.

Example error · 403

{
  "error": "sender_domain_not_verified",
  "message": "Sender domain is not verified or does not belong to this tenant"
}

POST/v1/email/send

Send email

Send a transactional email. The from.email domain must be verified and configured with DKIM in your portal.

Body parameters

name	type	description
from	object	Sender object: { email, name }. If omitted, uses app default sender.
to	string[]	Recipients. Required.
subject	string	Email subject. Required.
html	string	Inline HTML body. Optional if template sending exists.
text	string	Plain text body. Optional.

cURL

curl /v1/email/send \
  -H "x-api-key: lum_sk_..." \
  -H "Content-Type: application/json" \
  -d '{
    "from": { "email": "hello@mail.acme.com", "name": "Acme" },
    "to": ["jordan@globex.com"],
    "subject": "Welcome to Acme",
    "html": "<p>Hello Jordan</p>"
  }'

Response · 202

{
  "messageId": "msg_9f3a21",
  "status": "queued",
  "idempotentReplay": false
}

GET/v1/messages/{messageId}

Retrieve email

Fetch the current status and delivery detail for a single message.

Response · 200

{
  "message": {
    "id": "msg_9f3a21",
    "status": "delivered",
    "subject": "Welcome to Acme",
    "createdAt": "2026-04-21T14:32:08Z"
  },
  "recipients": [],
  "events": []
}

GET/v1/emails/logs

Email logs

List delivery events for the authenticated application.

Example

curl /v1/emails/logs \
  -H "x-api-key: lum_sk_..."

GET/v1/emails/stats

Email stats

Get aggregate stats for the authenticated application.

Example

curl /v1/emails/stats \
  -H "x-api-key: lum_sk_..."

POST/v1/portal/domains

Add domain (portal)

Request

{
  "domain": "mail.acme.com"
}

POST/v1/portal/domains/{id}/verify-dns

Verify DNS (portal)

Verifies SPF/DKIM/DMARC records for a portal domain. Use this after adding DNS records.

POST/v1/templates

Create template

Create a reusable email template. Reference it later by slug when sending.

Response · 201

{
  "id": "tpl_71xV",
  "slug": "welcome-email",
  "name": "Welcome email",
  "status": "active"
}

POST/v1/portal/apps/{appId}/api-keys

Create API key (portal)

Creates an API key for an app. The secret is returned once.

Request

{
  "name": "Server key",
  "rateLimitPerMinute": 60,
  "scopes": { "email:send": true }
}

GET/v1/portal/apps/{appId}/api-keys

List API keys (portal)

Lists keys for an app, including prefixes and status.