agentmail 0.5.23 → 0.5.25

package/reference.md

@@ -408,8 +408,7 @@ await client.inboxes.delete("inbox_id");
 </dl>
 </details>
 
-## Pods
-<details><summary><code>client.pods.<a href="/src/api/resources/pods/client/Client.ts">list</a>({ ...params }) -> AgentMail.ListPodsResponse</code></summary>
+<details><summary><code>client.inboxes.<a href="/src/api/resources/inboxes/client/Client.ts">authorize</a>(inbox_id, { ...params }) -> AgentMail.PublicKeyCredential</code></summary>
 <dl>
 <dd>
 
@@ -421,10 +420,9 @@ await client.inboxes.delete("inbox_id");
 <dl>
 <dd>
 
-**CLI:**
-```bash
-agentmail pods list
-```
+Authorizes the AgentID sign-in a client is already waiting in, for the
+inbox in the path, and returns the pending public key it will activate. A
+repeat for the same token, inbox, and bearer returns the same key.
 </dd>
 </dl>
 </dd>
@@ -439,7 +437,9 @@ agentmail pods list
 <dd>
 
 ```typescript
-await client.pods.list();
+await client.inboxes.authorize("inbox_id", {
+    authToken: "blackcurrant.........."
+});
 
 ```
 </dd>
@@ -455,73 +455,15 @@ await client.pods.list();
 <dl>
 <dd>
 
-**request:** `AgentMail.pods.ListPodsRequest` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**requestOptions:** `PodsClient.RequestOptions` 
+**inbox_id:** `AgentMail.InboxId` 
     
 </dd>
 </dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.pods.<a href="/src/api/resources/pods/client/Client.ts">get</a>(pod_id) -> AgentMail.Pod</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**CLI:**
-```bash
-agentmail pods get --pod-id <pod_id>
-```
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### 🔌 Usage
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-```typescript
-await client.pods.get("pod_id");
-
-```
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### ⚙️ Parameters
-
-<dl>
-<dd>
 
 <dl>
 <dd>
 
-**pod_id:** `AgentMail.PodId` 
+**request:** `AgentMail.AuthorizeInboxRequest` 
     
 </dd>
 </dl>
@@ -529,7 +471,7 @@ await client.pods.get("pod_id");
 <dl>
 <dd>
 
-**requestOptions:** `PodsClient.RequestOptions` 
+**requestOptions:** `InboxesClient.RequestOptions` 
     
 </dd>
 </dl>
@@ -541,7 +483,8 @@ await client.pods.get("pod_id");
 </dl>
 </details>
 
-<details><summary><code>client.pods.<a href="/src/api/resources/pods/client/Client.ts">create</a>({ ...params }) -> AgentMail.Pod</code></summary>
+## Pods
+<details><summary><code>client.pods.<a href="/src/api/resources/pods/client/Client.ts">list</a>({ ...params }) -> AgentMail.ListPodsResponse</code></summary>
 <dl>
 <dd>
 
@@ -555,7 +498,7 @@ await client.pods.get("pod_id");
 
 **CLI:**
 ```bash
-agentmail pods create --client-id my-pod
+agentmail pods list
 ```
 </dd>
 </dl>
@@ -571,7 +514,7 @@ agentmail pods create --client-id my-pod
 <dd>
 
 ```typescript
-await client.pods.create({});
+await client.pods.list();
 
 ```
 </dd>
@@ -587,7 +530,7 @@ await client.pods.create({});
 <dl>
 <dd>
 
-**request:** `AgentMail.CreatePodRequest` 
+**request:** `AgentMail.pods.ListPodsRequest` 
     
 </dd>
 </dl>
@@ -607,7 +550,7 @@ await client.pods.create({});
 </dl>
 </details>
 
-<details><summary><code>client.pods.<a href="/src/api/resources/pods/client/Client.ts">delete</a>(pod_id) -> void</code></summary>
+<details><summary><code>client.pods.<a href="/src/api/resources/pods/client/Client.ts">get</a>(pod_id) -> AgentMail.Pod</code></summary>
 <dl>
 <dd>
 
@@ -621,7 +564,7 @@ await client.pods.create({});
 
 **CLI:**
 ```bash
-agentmail pods delete --pod-id <pod_id>
+agentmail pods get --pod-id <pod_id>
 ```
 </dd>
 </dl>
@@ -637,7 +580,7 @@ agentmail pods delete --pod-id <pod_id>
 <dd>
 
 ```typescript
-await client.pods.delete("pod_id");
+await client.pods.get("pod_id");
 
 ```
 </dd>
@@ -673,8 +616,7 @@ await client.pods.delete("pod_id");
 </dl>
 </details>
 
-## Webhooks
-<details><summary><code>client.webhooks.<a href="/src/api/resources/webhooks/client/Client.ts">list</a>({ ...params }) -> AgentMail.ListWebhooksResponse</code></summary>
+<details><summary><code>client.pods.<a href="/src/api/resources/pods/client/Client.ts">create</a>({ ...params }) -> AgentMail.Pod</code></summary>
 <dl>
 <dd>
 
@@ -688,7 +630,7 @@ await client.pods.delete("pod_id");
 
 **CLI:**
 ```bash
-agentmail webhooks list
+agentmail pods create --client-id my-pod
 ```
 </dd>
 </dl>
@@ -704,7 +646,7 @@ agentmail webhooks list
 <dd>
 
 ```typescript
-await client.webhooks.list();
+await client.pods.create({});
 
 ```
 </dd>
@@ -720,7 +662,7 @@ await client.webhooks.list();
 <dl>
 <dd>
 
-**request:** `AgentMail.webhooks.ListWebhooksRequest` 
+**request:** `AgentMail.CreatePodRequest` 
     
 </dd>
 </dl>
@@ -728,7 +670,7 @@ await client.webhooks.list();
 <dl>
 <dd>
 
-**requestOptions:** `WebhooksClient.RequestOptions` 
+**requestOptions:** `PodsClient.RequestOptions` 
     
 </dd>
 </dl>
@@ -740,7 +682,7 @@ await client.webhooks.list();
 </dl>
 </details>
 
-<details><summary><code>client.webhooks.<a href="/src/api/resources/webhooks/client/Client.ts">get</a>(webhook_id) -> AgentMail.Webhook</code></summary>
+<details><summary><code>client.pods.<a href="/src/api/resources/pods/client/Client.ts">delete</a>(pod_id) -> void</code></summary>
 <dl>
 <dd>
 
@@ -754,77 +696,13 @@ await client.webhooks.list();
 
 **CLI:**
 ```bash
-agentmail webhooks get --webhook-id <webhook_id>
-```
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### 🔌 Usage
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-```typescript
-await client.webhooks.get("webhook_id");
-
+agentmail pods delete --pod-id <pod_id>
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**webhook_id:** `AgentMail.WebhookId` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**requestOptions:** `WebhooksClient.RequestOptions` 
-    
-</dd>
-</dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.webhooks.<a href="/src/api/resources/webhooks/client/Client.ts">getHeaders</a>(webhook_id) -> AgentMail.WebhookHeaderNamesResponse</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-List the names of custom HTTP headers included with deliveries to this webhook. Header values are
-write-only and are never returned.
-</dd>
-</dl>
-</dd>
-</dl>
-
 #### 🔌 Usage
 
 <dl>
@@ -834,7 +712,7 @@ write-only and are never returned.
 <dd>
 
 ```typescript
-await client.webhooks.getHeaders("webhook_id");
+await client.pods.delete("pod_id");
 
 ```
 </dd>
@@ -850,7 +728,7 @@ await client.webhooks.getHeaders("webhook_id");
 <dl>
 <dd>
 
-**webhook_id:** `AgentMail.WebhookId` 
+**pod_id:** `AgentMail.PodId` 
     
 </dd>
 </dl>
@@ -858,7 +736,7 @@ await client.webhooks.getHeaders("webhook_id");
 <dl>
 <dd>
 
-**requestOptions:** `WebhooksClient.RequestOptions` 
+**requestOptions:** `PodsClient.RequestOptions` 
     
 </dd>
 </dl>
@@ -870,7 +748,8 @@ await client.webhooks.getHeaders("webhook_id");
 </dl>
 </details>
 
-<details><summary><code>client.webhooks.<a href="/src/api/resources/webhooks/client/Client.ts">create</a>({ ...params }) -> AgentMail.Webhook</code></summary>
+## Webhooks
+<details><summary><code>client.webhooks.<a href="/src/api/resources/webhooks/client/Client.ts">list</a>({ ...params }) -> AgentMail.ListWebhooksResponse</code></summary>
 <dl>
 <dd>
 
@@ -884,7 +763,7 @@ await client.webhooks.getHeaders("webhook_id");
 
 **CLI:**
 ```bash
-agentmail webhooks create --url https://example.com/webhook --event-types message.received
+agentmail webhooks list
 ```
 </dd>
 </dl>
@@ -900,10 +779,7 @@ agentmail webhooks create --url https://example.com/webhook --event-types messag
 <dd>
 
 ```typescript
-await client.webhooks.create({
-    url: "url",
-    eventTypes: ["message.received", "message.received"]
-});
+await client.webhooks.list();
 
 ```
 </dd>
@@ -919,7 +795,7 @@ await client.webhooks.create({
 <dl>
 <dd>
 
-**request:** `AgentMail.CreateWebhookRequest` 
+**request:** `AgentMail.webhooks.ListWebhooksRequest` 
     
 </dd>
 </dl>
@@ -939,7 +815,7 @@ await client.webhooks.create({
 </dl>
 </details>
 
-<details><summary><code>client.webhooks.<a href="/src/api/resources/webhooks/client/Client.ts">update</a>(webhook_id, { ...params }) -> AgentMail.Webhook</code></summary>
+<details><summary><code>client.webhooks.<a href="/src/api/resources/webhooks/client/Client.ts">get</a>(webhook_id) -> AgentMail.Webhook</code></summary>
 <dl>
 <dd>
 
@@ -951,12 +827,9 @@ await client.webhooks.create({
 <dl>
 <dd>
 
-Update inbox or pod subscriptions, or replace the webhook's `event_types` in full when you pass a
-non-empty `event_types` array (see request field docs). Inbox and pod changes use add/remove lists.
-
 **CLI:**
 ```bash
-agentmail webhooks update --webhook-id <webhook_id> --add-inbox-ids <inbox_id>
+agentmail webhooks get --webhook-id <webhook_id>
 ```
 </dd>
 </dl>
@@ -972,7 +845,7 @@ agentmail webhooks update --webhook-id <webhook_id> --add-inbox-ids <inbox_id>
 <dd>
 
 ```typescript
-await client.webhooks.update("webhook_id", {});
+await client.webhooks.get("webhook_id");
 
 ```
 </dd>
@@ -996,14 +869,6 @@ await client.webhooks.update("webhook_id", {});
 <dl>
 <dd>
 
-**request:** `AgentMail.UpdateWebhookRequest` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
 **requestOptions:** `WebhooksClient.RequestOptions` 
     
 </dd>
@@ -1016,7 +881,7 @@ await client.webhooks.update("webhook_id", {});
 </dl>
 </details>
 
-<details><summary><code>client.webhooks.<a href="/src/api/resources/webhooks/client/Client.ts">updateHeaders</a>(webhook_id, { ...params }) -> void</code></summary>
+<details><summary><code>client.webhooks.<a href="/src/api/resources/webhooks/client/Client.ts">getHeaders</a>(webhook_id) -> AgentMail.WebhookHeaderNamesResponse</code></summary>
 <dl>
 <dd>
 
@@ -1028,8 +893,8 @@ await client.webhooks.update("webhook_id", {});
 <dl>
 <dd>
 
-Atomically set, replace, or remove custom HTTP headers included with deliveries to this webhook.
-Header values remain write-only.
+List the names of custom HTTP headers included with deliveries to this webhook. Header values are
+write-only and are never returned.
 </dd>
 </dl>
 </dd>
@@ -1044,7 +909,7 @@ Header values remain write-only.
 <dd>
 
 ```typescript
-await client.webhooks.updateHeaders("webhook_id", {});
+await client.webhooks.getHeaders("webhook_id");
 
 ```
 </dd>
@@ -1068,14 +933,6 @@ await client.webhooks.updateHeaders("webhook_id", {});
 <dl>
 <dd>
 
-**request:** `AgentMail.UpdateWebhookHeadersRequest` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
 **requestOptions:** `WebhooksClient.RequestOptions` 
     
 </dd>
@@ -1088,7 +945,7 @@ await client.webhooks.updateHeaders("webhook_id", {});
 </dl>
 </details>
 
-<details><summary><code>client.webhooks.<a href="/src/api/resources/webhooks/client/Client.ts">delete</a>(webhook_id) -> void</code></summary>
+<details><summary><code>client.webhooks.<a href="/src/api/resources/webhooks/client/Client.ts">create</a>({ ...params }) -> AgentMail.Webhook</code></summary>
 <dl>
 <dd>
 
@@ -1102,7 +959,7 @@ await client.webhooks.updateHeaders("webhook_id", {});
 
 **CLI:**
 ```bash
-agentmail webhooks delete --webhook-id <webhook_id>
+agentmail webhooks create --url https://example.com/webhook --event-types message.received
 ```
 </dd>
 </dl>
@@ -1118,7 +975,10 @@ agentmail webhooks delete --webhook-id <webhook_id>
 <dd>
 
 ```typescript
-await client.webhooks.delete("webhook_id");
+await client.webhooks.create({
+    url: "url",
+    eventTypes: ["message.received", "message.received"]
+});
 
 ```
 </dd>
@@ -1134,7 +994,7 @@ await client.webhooks.delete("webhook_id");
 <dl>
 <dd>
 
-**webhook_id:** `AgentMail.WebhookId` 
+**request:** `AgentMail.CreateWebhookRequest` 
     
 </dd>
 </dl>
@@ -1154,8 +1014,7 @@ await client.webhooks.delete("webhook_id");
 </dl>
 </details>
 
-## Accounts
-<details><summary><code>client.accounts.<a href="/src/api/resources/accounts/client/Client.ts">list</a>({ ...params }) -> AgentMail.ListAccountsResponse</code></summary>
+<details><summary><code>client.webhooks.<a href="/src/api/resources/webhooks/client/Client.ts">update</a>(webhook_id, { ...params }) -> AgentMail.Webhook</code></summary>
 <dl>
 <dd>
 
@@ -1167,7 +1026,13 @@ await client.webhooks.delete("webhook_id");
 <dl>
 <dd>
 
-Lists accounts across all providers.
+Update inbox or pod subscriptions, or replace the webhook's `event_types` in full when you pass a
+non-empty `event_types` array (see request field docs). Inbox and pod changes use add/remove lists.
+
+**CLI:**
+```bash
+agentmail webhooks update --webhook-id <webhook_id> --add-inbox-ids <inbox_id>
+```
 </dd>
 </dl>
 </dd>
@@ -1182,7 +1047,7 @@ Lists accounts across all providers.
 <dd>
 
 ```typescript
-await client.accounts.list();
+await client.webhooks.update("webhook_id", {});
 
 ```
 </dd>
@@ -1198,407 +1063,15 @@ await client.accounts.list();
 <dl>
 <dd>
 
-**request:** `AgentMail.ListAccountsRequest` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**requestOptions:** `AccountsClient.RequestOptions` 
+**webhook_id:** `AgentMail.WebhookId` 
     
 </dd>
 </dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.accounts.<a href="/src/api/resources/accounts/client/Client.ts">get</a>(account_id) -> AgentMail.Account</code></summary>
-<dl>
-<dd>
-
-#### 🔌 Usage
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-```typescript
-await client.accounts.get("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32");
-
-```
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**account_id:** `AgentMail.AccountId` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**requestOptions:** `AccountsClient.RequestOptions` 
-    
-</dd>
-</dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-## Agent
-<details><summary><code>client.agent.<a href="/src/api/resources/agent/client/Client.ts">signUp</a>({ ...params }) -> AgentMail.AgentSignupResponse</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-Create a new agent organization with an inbox and API key. This endpoint is for signing up for the first time. If you've already signed up, you're all set — just use your existing API key.
-
-A 6-digit OTP is sent to the human's email for verification.
-
-This endpoint is idempotent. Calling it again with the same `human_email` will rotate the API key and resend the OTP if expired.
-
-The returned API key has limited permissions until the organization is verified via the verify endpoint.
-
-**CLI:**
-```bash
-agentmail agent sign-up --human-email user@example.com --username my-agent
-```
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### 🔌 Usage
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-```typescript
-await client.agent.signUp({
-    humanEmail: "human_email",
-    username: "username"
-});
-
-```
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**request:** `AgentMail.AgentSignupRequest` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**requestOptions:** `AgentClient.RequestOptions` 
-    
-</dd>
-</dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.agent.<a href="/src/api/resources/agent/client/Client.ts">verify</a>({ ...params }) -> AgentMail.AgentVerifyResponse</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-Verify an agent organization using the 6-digit OTP sent to the human's email during sign-up.
-
-On success, the organization is upgraded from `agent_unverified` to `agent_verified`, the send allowlist is removed, and free plan entitlements are applied.
-
-The OTP expires after 24 hours and allows a maximum of 10 attempts. If you run into any difficulties receiving the OTP code, you can also create an account on [console.agentmail.to](https://console.agentmail.to) using the human email address you provided to verify your account.
-
-**CLI:**
-```bash
-agentmail agent verify --otp-code 123456
-```
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### 🔌 Usage
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-```typescript
-await client.agent.verify({
-    otpCode: "otp_code"
-});
-
-```
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**request:** `AgentMail.AgentVerifyRequest` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**requestOptions:** `AgentClient.RequestOptions` 
-    
-</dd>
-</dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-## ApiKeys
-<details><summary><code>client.apiKeys.<a href="/src/api/resources/apiKeys/client/Client.ts">list</a>({ ...params }) -> AgentMail.ListApiKeysResponse</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**CLI:**
-```bash
-agentmail api-keys list
-```
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### 🔌 Usage
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-```typescript
-await client.apiKeys.list();
-
-```
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**request:** `AgentMail.ListApiKeysRequest` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**requestOptions:** `ApiKeysClient.RequestOptions` 
-    
-</dd>
-</dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.apiKeys.<a href="/src/api/resources/apiKeys/client/Client.ts">create</a>({ ...params }) -> AgentMail.CreateApiKeyResponse</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**CLI:**
-```bash
-agentmail api-keys create --name "My Key"
-```
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### 🔌 Usage
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-```typescript
-await client.apiKeys.create({});
-
-```
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**request:** `AgentMail.CreateApiKeyRequest` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**requestOptions:** `ApiKeysClient.RequestOptions` 
-    
-</dd>
-</dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.apiKeys.<a href="/src/api/resources/apiKeys/client/Client.ts">delete</a>(api_key_id) -> void</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**CLI:**
-```bash
-agentmail api-keys delete --api-key-id <api_key_id>
-```
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### 🔌 Usage
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-```typescript
-await client.apiKeys.delete("api_key_id");
-
-```
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### ⚙️ Parameters
-
-<dl>
-<dd>
 
 <dl>
 <dd>
 
-**api_key_id:** `AgentMail.ApiKeyId` 
+**request:** `AgentMail.UpdateWebhookRequest` 
     
 </dd>
 </dl>
@@ -1606,7 +1079,7 @@ await client.apiKeys.delete("api_key_id");
 <dl>
 <dd>
 
-**requestOptions:** `ApiKeysClient.RequestOptions` 
+**requestOptions:** `WebhooksClient.RequestOptions` 
     
 </dd>
 </dl>
@@ -1618,7 +1091,7 @@ await client.apiKeys.delete("api_key_id");
 </dl>
 </details>
 
-<details><summary><code>client.apiKeys.<a href="/src/api/resources/apiKeys/client/Client.ts">listPublicKeys</a>({ ...params }) -> AgentMail.ListPublicKeysResponse</code></summary>
+<details><summary><code>client.webhooks.<a href="/src/api/resources/webhooks/client/Client.ts">updateHeaders</a>(webhook_id, { ...params }) -> void</code></summary>
 <dl>
 <dd>
 
@@ -1630,9 +1103,8 @@ await client.apiKeys.delete("api_key_id");
 <dl>
 <dd>
 
-List only public-key credentials visible to the bearer caller's scope.
-Bearer credentials are never returned, even though both credential types
-share storage and pagination indexes. Requires `api_key_read`.
+Atomically set, replace, or remove custom HTTP headers included with deliveries to this webhook.
+Header values remain write-only.
 </dd>
 </dl>
 </dd>
@@ -1647,7 +1119,7 @@ share storage and pagination indexes. Requires `api_key_read`.
 <dd>
 
 ```typescript
-await client.apiKeys.listPublicKeys();
+await client.webhooks.updateHeaders("webhook_id", {});
 
 ```
 </dd>
@@ -1663,7 +1135,7 @@ await client.apiKeys.listPublicKeys();
 <dl>
 <dd>
 
-**request:** `AgentMail.ListPublicKeysRequest` 
+**webhook_id:** `AgentMail.WebhookId` 
     
 </dd>
 </dl>
@@ -1671,7 +1143,15 @@ await client.apiKeys.listPublicKeys();
 <dl>
 <dd>
 
-**requestOptions:** `ApiKeysClient.RequestOptions` 
+**request:** `AgentMail.UpdateWebhookHeadersRequest` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**requestOptions:** `WebhooksClient.RequestOptions` 
     
 </dd>
 </dl>
@@ -1683,7 +1163,7 @@ await client.apiKeys.listPublicKeys();
 </dl>
 </details>
 
-<details><summary><code>client.apiKeys.<a href="/src/api/resources/apiKeys/client/Client.ts">createPublicKey</a>({ ...params }) -> AgentMail.PublicKeyCredential</code></summary>
+<details><summary><code>client.webhooks.<a href="/src/api/resources/webhooks/client/Client.ts">delete</a>(webhook_id) -> void</code></summary>
 <dl>
 <dd>
 
@@ -1695,10 +1175,10 @@ await client.apiKeys.listPublicKeys();
 <dl>
 <dd>
 
-Register a public P-256 JWK using an existing AgentMail bearer API key
-with `api_key_create`. Re-registering the same JWK creates a new
-credential ID; it does not replace or recover an earlier credential.
-The private key must never be sent to AgentMail.
+**CLI:**
+```bash
+agentmail webhooks delete --webhook-id <webhook_id>
+```
 </dd>
 </dl>
 </dd>
@@ -1713,14 +1193,7 @@ The private key must never be sent to AgentMail.
 <dd>
 
 ```typescript
-await client.apiKeys.createPublicKey({
-    publicKey: {
-        kty: "EC",
-        crv: "P-256",
-        x: "blackcurrant...............................",
-        y: "blackcurrant..............................."
-    }
-});
+await client.webhooks.delete("webhook_id");
 
 ```
 </dd>
@@ -1736,7 +1209,7 @@ await client.apiKeys.createPublicKey({
 <dl>
 <dd>
 
-**request:** `AgentMail.CreatePublicKeyRequest` 
+**webhook_id:** `AgentMail.WebhookId` 
     
 </dd>
 </dl>
@@ -1744,7 +1217,7 @@ await client.apiKeys.createPublicKey({
 <dl>
 <dd>
 
-**requestOptions:** `ApiKeysClient.RequestOptions` 
+**requestOptions:** `WebhooksClient.RequestOptions` 
     
 </dd>
 </dl>
@@ -1756,7 +1229,8 @@ await client.apiKeys.createPublicKey({
 </dl>
 </details>
 
-<details><summary><code>client.apiKeys.<a href="/src/api/resources/apiKeys/client/Client.ts">updatePublicKeyName</a>(api_key_id, { ...params }) -> AgentMail.PublicKeyCredential</code></summary>
+## Accounts
+<details><summary><code>client.accounts.<a href="/src/api/resources/accounts/client/Client.ts">list</a>({ ...params }) -> AgentMail.ListAccountsResponse</code></summary>
 <dl>
 <dd>
 
@@ -1768,8 +1242,7 @@ await client.apiKeys.createPublicKey({
 <dl>
 <dd>
 
-Rename the credential. All security-relevant fields are immutable.
-Requires `api_key_update`.
+Lists accounts across all providers.
 </dd>
 </dl>
 </dd>
@@ -1784,9 +1257,7 @@ Requires `api_key_update`.
 <dd>
 
 ```typescript
-await client.apiKeys.updatePublicKeyName("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32", {
-    name: "x"
-});
+await client.accounts.list();
 
 ```
 </dd>
@@ -1802,15 +1273,7 @@ await client.apiKeys.updatePublicKeyName("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32",
 <dl>
 <dd>
 
-**api_key_id:** `string` — Public-key credential ID returned by registration.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**request:** `AgentMail.UpdatePublicKeyNameRequest` 
+**request:** `AgentMail.ListAccountsRequest` 
     
 </dd>
 </dl>
@@ -1818,7 +1281,7 @@ await client.apiKeys.updatePublicKeyName("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32",
 <dl>
 <dd>
 
-**requestOptions:** `ApiKeysClient.RequestOptions` 
+**requestOptions:** `AccountsClient.RequestOptions` 
     
 </dd>
 </dl>
@@ -1830,26 +1293,10 @@ await client.apiKeys.updatePublicKeyName("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32",
 </dl>
 </details>
 
-<details><summary><code>client.apiKeys.<a href="/src/api/resources/apiKeys/client/Client.ts">revokePublicKey</a>(api_key_id) -> void</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
+<details><summary><code>client.accounts.<a href="/src/api/resources/accounts/client/Client.ts">get</a>(account_id) -> AgentMail.Account</code></summary>
 <dl>
 <dd>
 
-Permanently revoke one public-key credential. This hard-deletes the
-credential; repeating the request returns not found. Requires
-`api_key_delete`.
-</dd>
-</dl>
-</dd>
-</dl>
-
 #### 🔌 Usage
 
 <dl>
@@ -1859,7 +1306,7 @@ credential; repeating the request returns not found. Requires
 <dd>
 
 ```typescript
-await client.apiKeys.revokePublicKey("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32");
+await client.accounts.get("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32");
 
 ```
 </dd>
@@ -1875,7 +1322,7 @@ await client.apiKeys.revokePublicKey("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32");
 <dl>
 <dd>
 
-**api_key_id:** `string` — Public-key credential ID returned by registration.
+**account_id:** `AgentMail.AccountId` 
     
 </dd>
 </dl>
@@ -1883,7 +1330,7 @@ await client.apiKeys.revokePublicKey("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32");
 <dl>
 <dd>
 
-**requestOptions:** `ApiKeysClient.RequestOptions` 
+**requestOptions:** `AccountsClient.RequestOptions` 
     
 </dd>
 </dl>
@@ -1895,7 +1342,8 @@ await client.apiKeys.revokePublicKey("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32");
 </dl>
 </details>
 
-<details><summary><code>client.apiKeys.<a href="/src/api/resources/apiKeys/client/Client.ts">revokeAllAgentIdSignInKeys</a>({ ...params }) -> AgentMail.RevokeAllAgentIdSignInKeysResponse</code></summary>
+## Agent
+<details><summary><code>client.agent.<a href="/src/api/resources/agent/client/Client.ts">signUp</a>({ ...params }) -> AgentMail.AgentSignupResponse</code></summary>
 <dl>
 <dd>
 
@@ -1907,15 +1355,18 @@ await client.apiKeys.revokePublicKey("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32");
 <dl>
 <dd>
 
-Invalidate every current public-key credential in the caller's
-organization by advancing its AgentID key generation. The caller must be
-organization-scoped and either have `api_key_delete` or, for a verified
-self-serve agent organization, use an unrestricted unmanaged bearer
-credential. No request body is accepted.
+Create a new agent organization with an inbox and API key. This endpoint is for signing up for the first time. If you've already signed up, you're all set — just use your existing API key.
+
+A 6-digit OTP is sent to the human's email for verification.
+
+This endpoint is idempotent. Calling it again with the same `human_email` will rotate the API key and resend the OTP if expired.
+
+The returned API key has limited permissions until the organization is verified via the verify endpoint.
 
-`Idempotency-Key` is required and must be a UUID. Reusing the same UUID
-returns the original permanent receipt without advancing the generation
-again. A new UUID performs a new generation advance.
+**CLI:**
+```bash
+agentmail agent sign-up --human-email user@example.com --username my-agent
+```
 </dd>
 </dl>
 </dd>
@@ -1930,8 +1381,9 @@ again. A new UUID performs a new generation advance.
 <dd>
 
 ```typescript
-await client.apiKeys.revokeAllAgentIdSignInKeys({
-    idempotencyKey: "Idempotency-Key"
+await client.agent.signUp({
+    humanEmail: "human_email",
+    username: "username"
 });
 
 ```
@@ -1948,7 +1400,7 @@ await client.apiKeys.revokeAllAgentIdSignInKeys({
 <dl>
 <dd>
 
-**request:** `AgentMail.RevokeAllAgentIdSignInKeysRequest` 
+**request:** `AgentMail.AgentSignupRequest` 
     
 </dd>
 </dl>
@@ -1956,7 +1408,7 @@ await client.apiKeys.revokeAllAgentIdSignInKeys({
 <dl>
 <dd>
 
-**requestOptions:** `ApiKeysClient.RequestOptions` 
+**requestOptions:** `AgentClient.RequestOptions` 
     
 </dd>
 </dl>
@@ -1968,7 +1420,7 @@ await client.apiKeys.revokeAllAgentIdSignInKeys({
 </dl>
 </details>
 
-<details><summary><code>client.apiKeys.<a href="/src/api/resources/apiKeys/client/Client.ts">listBrowserCredentials</a>({ ...params }) -> AgentMail.ListBrowserCredentialsResponse</code></summary>
+<details><summary><code>client.agent.<a href="/src/api/resources/agent/client/Client.ts">verify</a>({ ...params }) -> AgentMail.AgentVerifyResponse</code></summary>
 <dl>
 <dd>
 
@@ -1980,7 +1432,16 @@ await client.apiKeys.revokeAllAgentIdSignInKeys({
 <dl>
 <dd>
 
-List active browser credentials visible to the caller's scope. Requires `api_key_read`.
+Verify an agent organization using the 6-digit OTP sent to the human's email during sign-up.
+
+On success, the organization is upgraded from `agent_unverified` to `agent_verified`, the send allowlist is removed, and free plan entitlements are applied.
+
+The OTP expires after 24 hours and allows a maximum of 10 attempts. If you run into any difficulties receiving the OTP code, you can also create an account on [console.agentmail.to](https://console.agentmail.to) using the human email address you provided to verify your account.
+
+**CLI:**
+```bash
+agentmail agent verify --otp-code 123456
+```
 </dd>
 </dl>
 </dd>
@@ -1995,7 +1456,9 @@ List active browser credentials visible to the caller's scope. Requires `api_key
 <dd>
 
 ```typescript
-await client.apiKeys.listBrowserCredentials();
+await client.agent.verify({
+    otpCode: "otp_code"
+});
 
 ```
 </dd>
@@ -2011,7 +1474,7 @@ await client.apiKeys.listBrowserCredentials();
 <dl>
 <dd>
 
-**request:** `AgentMail.ListBrowserCredentialsRequest` 
+**request:** `AgentMail.AgentVerifyRequest` 
     
 </dd>
 </dl>
@@ -2019,7 +1482,7 @@ await client.apiKeys.listBrowserCredentials();
 <dl>
 <dd>
 
-**requestOptions:** `ApiKeysClient.RequestOptions` 
+**requestOptions:** `AgentClient.RequestOptions` 
     
 </dd>
 </dl>
@@ -2031,7 +1494,8 @@ await client.apiKeys.listBrowserCredentials();
 </dl>
 </details>
 
-<details><summary><code>client.apiKeys.<a href="/src/api/resources/apiKeys/client/Client.ts">listBrowserCredentialEvents</a>({ ...params }) -> AgentMail.ListBrowserLifecycleEventsResponse</code></summary>
+## ApiKeys
+<details><summary><code>client.apiKeys.<a href="/src/api/resources/apiKeys/client/Client.ts">list</a>({ ...params }) -> AgentMail.ListApiKeysResponse</code></summary>
 <dl>
 <dd>
 
@@ -2043,7 +1507,14 @@ await client.apiKeys.listBrowserCredentials();
 <dl>
 <dd>
 
-List owner-facing browser credential and consent lifecycle events. Requires `api_key_read`.
+Lists every credential, newest first. Filter one family with `type`.
+Page to token exhaustion: a page can be empty and still carry a
+`next_page_token`.
+
+**CLI:**
+```bash
+agentmail api-keys list
+```
 </dd>
 </dl>
 </dd>
@@ -2058,7 +1529,7 @@ List owner-facing browser credential and consent lifecycle events. Requires `api
 <dd>
 
 ```typescript
-await client.apiKeys.listBrowserCredentialEvents();
+await client.apiKeys.list();
 
 ```
 </dd>
@@ -2074,7 +1545,7 @@ await client.apiKeys.listBrowserCredentialEvents();
 <dl>
 <dd>
 
-**request:** `AgentMail.ListBrowserCredentialEventsRequest` 
+**request:** `AgentMail.ListApiKeysRequest` 
     
 </dd>
 </dl>
@@ -2094,7 +1565,7 @@ await client.apiKeys.listBrowserCredentialEvents();
 </dl>
 </details>
 
-<details><summary><code>client.apiKeys.<a href="/src/api/resources/apiKeys/client/Client.ts">deleteBrowserCredential</a>(credential_id) -> void</code></summary>
+<details><summary><code>client.apiKeys.<a href="/src/api/resources/apiKeys/client/Client.ts">get</a>(api_key_id) -> AgentMail.ApiKey</code></summary>
 <dl>
 <dd>
 
@@ -2106,7 +1577,8 @@ await client.apiKeys.listBrowserCredentialEvents();
 <dl>
 <dd>
 
-Permanently revoke one active browser credential. Requires `api_key_delete`.
+Returns one credential of any family. Public keys also resolve by
+`client_id`. Poll a sign-in key until `status` is `active`.
 </dd>
 </dl>
 </dd>
@@ -2121,7 +1593,7 @@ Permanently revoke one active browser credential. Requires `api_key_delete`.
 <dd>
 
 ```typescript
-await client.apiKeys.deleteBrowserCredential("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32");
+await client.apiKeys.get("api_key_id");
 
 ```
 </dd>
@@ -2137,7 +1609,7 @@ await client.apiKeys.deleteBrowserCredential("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc
 <dl>
 <dd>
 
-**credential_id:** `string` 
+**api_key_id:** `AgentMail.ApiKeyId` 
     
 </dd>
 </dl>
@@ -2157,7 +1629,7 @@ await client.apiKeys.deleteBrowserCredential("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc
 </dl>
 </details>
 
-<details><summary><code>client.apiKeys.<a href="/src/api/resources/apiKeys/client/Client.ts">cancelBrowserEnrollment</a>(enrollment_id) -> void</code></summary>
+<details><summary><code>client.apiKeys.<a href="/src/api/resources/apiKeys/client/Client.ts">create</a>({ ...params }) -> AgentMail.CreateApiKeyResult</code></summary>
 <dl>
 <dd>
 
@@ -2169,7 +1641,13 @@ await client.apiKeys.deleteBrowserCredential("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc
 <dl>
 <dd>
 
-Cancel one pending, unexpired browser enrollment intent. Requires `api_key_delete`.
+Creates a bearer key, or registers a public key when the body carries
+`public_key`. The route selects the scope. Bearer secrets are returned once.
+
+**CLI:**
+```bash
+agentmail api-keys create --name "My Key"
+```
 </dd>
 </dl>
 </dd>
@@ -2184,7 +1662,7 @@ Cancel one pending, unexpired browser enrollment intent. Requires `api_key_delet
 <dd>
 
 ```typescript
-await client.apiKeys.cancelBrowserEnrollment("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32");
+await client.apiKeys.create({});
 
 ```
 </dd>
@@ -2200,7 +1678,7 @@ await client.apiKeys.cancelBrowserEnrollment("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc
 <dl>
 <dd>
 
-**enrollment_id:** `string` 
+**request:** `AgentMail.CreateApiKeyRequest` 
     
 </dd>
 </dl>
@@ -2220,7 +1698,7 @@ await client.apiKeys.cancelBrowserEnrollment("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc
 </dl>
 </details>
 
-<details><summary><code>client.apiKeys.<a href="/src/api/resources/apiKeys/client/Client.ts">listBrowserConsents</a>({ ...params }) -> AgentMail.ListBrowserConsentsResponse</code></summary>
+<details><summary><code>client.apiKeys.<a href="/src/api/resources/apiKeys/client/Client.ts">update</a>(api_key_id, { ...params }) -> AgentMail.ApiKey</code></summary>
 <dl>
 <dd>
 
@@ -2232,7 +1710,9 @@ await client.apiKeys.cancelBrowserEnrollment("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc
 <dl>
 <dd>
 
-List remembered AgentID client approvals for one live inbox. Requires `api_key_read`.
+Renames a credential or changes its permissions. Public keys also resolve
+by `client_id`; a sign-in key accepts only `provider_connect` and
+`provider_share_owner`.
 </dd>
 </dl>
 </dd>
@@ -2247,9 +1727,7 @@ List remembered AgentID client approvals for one live inbox. Requires `api_key_r
 <dd>
 
 ```typescript
-await client.apiKeys.listBrowserConsents({
-    inboxId: "inbox_id"
-});
+await client.apiKeys.update("api_key_id", {});
 
 ```
 </dd>
@@ -2265,7 +1743,15 @@ await client.apiKeys.listBrowserConsents({
 <dl>
 <dd>
 
-**request:** `AgentMail.ListBrowserConsentsRequest` 
+**api_key_id:** `AgentMail.ApiKeyId` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**request:** `AgentMail.UpdateApiKeyRequest` 
     
 </dd>
 </dl>
@@ -2285,7 +1771,7 @@ await client.apiKeys.listBrowserConsents({
 </dl>
 </details>
 
-<details><summary><code>client.apiKeys.<a href="/src/api/resources/apiKeys/client/Client.ts">deleteBrowserConsent</a>(consent_id) -> void</code></summary>
+<details><summary><code>client.apiKeys.<a href="/src/api/resources/apiKeys/client/Client.ts">delete</a>(api_key_id) -> void</code></summary>
 <dl>
 <dd>
 
@@ -2297,7 +1783,13 @@ await client.apiKeys.listBrowserConsents({
 <dl>
 <dd>
 
-Revoke one remembered AgentID client approval. Requires `api_key_delete`.
+Deletes one credential of any family. A pending sign-in key is
+cancelled; an active one is revoked. Public keys also resolve by `client_id`.
+
+**CLI:**
+```bash
+agentmail api-keys delete --api-key-id <api_key_id>
+```
 </dd>
 </dl>
 </dd>
@@ -2312,7 +1804,7 @@ Revoke one remembered AgentID client approval. Requires `api_key_delete`.
 <dd>
 
 ```typescript
-await client.apiKeys.deleteBrowserConsent("consent_id");
+await client.apiKeys.delete("api_key_id");
 
 ```
 </dd>
@@ -2328,7 +1820,7 @@ await client.apiKeys.deleteBrowserConsent("consent_id");
 <dl>
 <dd>
 
-**consent_id:** `string` 
+**api_key_id:** `AgentMail.ApiKeyId` 
     
 </dd>
 </dl>
@@ -3227,7 +2719,7 @@ await client.inboxes.apiKeys.list("inbox_id");
 </dl>
 </details>
 
-<details><summary><code>client.inboxes.apiKeys.<a href="/src/api/resources/inboxes/resources/apiKeys/client/Client.ts">create</a>(inbox_id, { ...params }) -> AgentMail.CreateApiKeyResponse</code></summary>
+<details><summary><code>client.inboxes.apiKeys.<a href="/src/api/resources/inboxes/resources/apiKeys/client/Client.ts">create</a>(inbox_id, { ...params }) -> AgentMail.CreateApiKeyResult</code></summary>
 <dl>
 <dd>
 
@@ -3301,7 +2793,7 @@ await client.inboxes.apiKeys.create("inbox_id", {});
 </dl>
 </details>
 
-<details><summary><code>client.inboxes.apiKeys.<a href="/src/api/resources/inboxes/resources/apiKeys/client/Client.ts">delete</a>(inbox_id, api_key_id) -> void</code></summary>
+<details><summary><code>client.inboxes.apiKeys.<a href="/src/api/resources/inboxes/resources/apiKeys/client/Client.ts">update</a>(inbox_id, api_key_id, { ...params }) -> AgentMail.ApiKey</code></summary>
 <dl>
 <dd>
 
@@ -3315,7 +2807,7 @@ await client.inboxes.apiKeys.create("inbox_id", {});
 
 **CLI:**
 ```bash
-agentmail inboxes api-keys delete --inbox-id <inbox_id> --api-key-id <api_key_id>
+agentmail inboxes api-keys update --inbox-id <inbox_id> --api-key-id <api_key_id> --name "Renamed"
 ```
 </dd>
 </dl>
@@ -3331,7 +2823,7 @@ agentmail inboxes api-keys delete --inbox-id <inbox_id> --api-key-id <api_key_id
 <dd>
 
 ```typescript
-await client.inboxes.apiKeys.delete("inbox_id", "api_key_id");
+await client.inboxes.apiKeys.update("inbox_id", "api_key_id", {});
 
 ```
 </dd>
@@ -3363,6 +2855,14 @@ await client.inboxes.apiKeys.delete("inbox_id", "api_key_id");
 <dl>
 <dd>
 
+**request:** `AgentMail.UpdateApiKeyRequest` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
 **requestOptions:** `ApiKeysClient.RequestOptions` 
     
 </dd>
@@ -3375,8 +2875,7 @@ await client.inboxes.apiKeys.delete("inbox_id", "api_key_id");
 </dl>
 </details>
 
-## Inboxes BrowserCredentials
-<details><summary><code>client.inboxes.browserCredentials.<a href="/src/api/resources/inboxes/resources/browserCredentials/client/Client.ts">createEnrollment</a>(inbox_id, { ...params }) -> AgentMail.BrowserEnrollmentAccepted</code></summary>
+<details><summary><code>client.inboxes.apiKeys.<a href="/src/api/resources/inboxes/resources/apiKeys/client/Client.ts">delete</a>(inbox_id, api_key_id) -> void</code></summary>
 <dl>
 <dd>
 
@@ -3388,31 +2887,10 @@ await client.inboxes.apiKeys.delete("inbox_id", "api_key_id");
 <dl>
 <dd>
 
-Attach a browser enrollment intent to the inbox. Requires
-`api_key_create`. Before submitting `transaction_jti`, independently
-verify that the browser page's final origin is exactly
-`https://auth.agentid.com`.
-
-This endpoint is available to every organization using US production.
-It is not available in EU production.
-
-Select `inbox_id` from trusted AgentMail configuration. An AgentID
-`login_hint` is not authoritative for selecting the inbox; when the
-transaction includes one, it must match the path inbox.
-
-**AgentMail API keys are sent only to `https://api.agentmail.to`; AgentID never requests them.**
-
-A new intent returns `202`; an idempotent retry for the same pending
-transaction, inbox, and bearer key returns `200` with the same receipt.
-An intent lasts at most five minutes. An activated credential lasts at
-most 30 days and cannot outlive its authorizing bearer API key.
-
-Creation is limited to 20 intents per bearer API key per hour, 100 per
-organization per hour, and five live unused intents per bearer API key.
-Browser activation is separately limited to 20 activations per
-authorizing bearer API key per UTC day. Either kind of limit can return
-`429`; honor the `Retry-After` header. Cancelling an enrollment releases
-its live-intent slot but does not reset the daily activation counter.
+**CLI:**
+```bash
+agentmail inboxes api-keys delete --inbox-id <inbox_id> --api-key-id <api_key_id>
+```
 </dd>
 </dl>
 </dd>
@@ -3427,9 +2905,7 @@ its live-intent slot but does not reset the daily activation counter.
 <dd>
 
 ```typescript
-await client.inboxes.browserCredentials.createEnrollment("inbox_id", {
-    transactionJti: "blackcurrant.........."
-});
+await client.inboxes.apiKeys.delete("inbox_id", "api_key_id");
 
 ```
 </dd>
@@ -3453,7 +2929,7 @@ await client.inboxes.browserCredentials.createEnrollment("inbox_id", {
 <dl>
 <dd>
 
-**request:** `AgentMail.CreateBrowserEnrollmentRequest` 
+**api_key_id:** `AgentMail.ApiKeyId` 
     
 </dd>
 </dl>
@@ -3461,7 +2937,7 @@ await client.inboxes.browserCredentials.createEnrollment("inbox_id", {
 <dl>
 <dd>
 
-**requestOptions:** `BrowserCredentialsClient.RequestOptions` 
+**requestOptions:** `ApiKeysClient.RequestOptions` 
     
 </dd>
 </dl>
@@ -5808,7 +5284,7 @@ await client.inboxes.threads.search("inbox_id", {
 </dl>
 </details>
 
-<details><summary><code>client.inboxes.threads.<a href="/src/api/resources/inboxes/resources/threads/client/Client.ts">get</a>(inbox_id, thread_id) -> AgentMail.Thread</code></summary>
+<details><summary><code>client.inboxes.threads.<a href="/src/api/resources/inboxes/resources/threads/client/Client.ts">get</a>(inbox_id, thread_id, { ...params }) -> AgentMail.Thread</code></summary>
 <dl>
 <dd>
 
@@ -5870,6 +5346,14 @@ await client.inboxes.threads.get("inbox_id", "thread_id");
 <dl>
 <dd>
 
+**request:** `AgentMail.inboxes.GetInboxThreadRequest` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
 **requestOptions:** `ThreadsClient.RequestOptions` 
     
 </dd>
@@ -7332,6 +6816,88 @@ await client.pods.apiKeys.create("pod_id", {});
 </dl>
 
 
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.pods.apiKeys.<a href="/src/api/resources/pods/resources/apiKeys/client/Client.ts">update</a>(pod_id, api_key_id, { ...params }) -> AgentMail.ApiKey</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**CLI:**
+```bash
+agentmail pods api-keys update --pod-id <pod_id> --api-key-id <api_key_id> --name "Renamed"
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```typescript
+await client.pods.apiKeys.update("pod_id", "api_key_id", {});
+
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**pod_id:** `AgentMail.PodId` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**api_key_id:** `AgentMail.ApiKeyId` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**request:** `AgentMail.UpdateApiKeyRequest` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**requestOptions:** `ApiKeysClient.RequestOptions` 
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
 </dd>
 </dl>
 </details>
@@ -9304,7 +8870,7 @@ await client.pods.threads.search("pod_id", {
 </dl>
 </details>
 
-<details><summary><code>client.pods.threads.<a href="/src/api/resources/pods/resources/threads/client/Client.ts">get</a>(pod_id, thread_id) -> AgentMail.Thread</code></summary>
+<details><summary><code>client.pods.threads.<a href="/src/api/resources/pods/resources/threads/client/Client.ts">get</a>(pod_id, thread_id, { ...params }) -> AgentMail.Thread</code></summary>
 <dl>
 <dd>
 
@@ -9366,6 +8932,14 @@ await client.pods.threads.get("pod_id", "thread_id");
 <dl>
 <dd>
 
+**request:** `AgentMail.pods.GetPodThreadRequest` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
 **requestOptions:** `ThreadsClient.RequestOptions` 
     
 </dd>
@@ -10400,7 +9974,7 @@ await client.providers.listAccounts("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32");
 </dl>
 </details>
 
-<details><summary><code>client.providers.<a href="/src/api/resources/providers/client/Client.ts">connect</a>(provider_id, { ...params }) -> AgentMail.ConnectProviderAccepted</code></summary>
+<details><summary><code>client.providers.<a href="/src/api/resources/providers/client/Client.ts">connect</a>(provider_id, { ...params }) -> AgentMail.ConnectAccepted</code></summary>
 <dl>
 <dd>
 
@@ -10412,9 +9986,10 @@ await client.providers.listAccounts("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32");
 <dl>
 <dd>
 
-Starts signing an inbox in to a provider. Returns a `magic_url` valid
-for five minutes; open it in the browser that will hold the sign-in.
-Requires `api_key_create` and an `Idempotency-Key` header.
+Starts signing an inbox in to a provider. Returns a single-use `magic_url`,
+valid for five minutes, to open in the client that will hold the sign-in;
+the client enrolls as the inbox and continues to the provider. Poll
+[Get API Key](/api-reference/api-keys/get) with `api_key_id` for `status`.
 </dd>
 </dl>
 </dd>
@@ -10461,7 +10036,7 @@ await client.providers.connect("d5e9c84f-c2b2-4bf4-b4b0-7ffd7a9ffc32", undefined
 <dl>
 <dd>
 
-**requestOptions:** `ProvidersClient.IdempotentRequestOptions` 
+**requestOptions:** `ProvidersClient.RequestOptions` 
     
 </dd>
 </dl>
@@ -10615,7 +10190,7 @@ await client.threads.search({
 </dl>
 </details>
 
-<details><summary><code>client.threads.<a href="/src/api/resources/threads/client/Client.ts">get</a>(thread_id) -> AgentMail.Thread</code></summary>
+<details><summary><code>client.threads.<a href="/src/api/resources/threads/client/Client.ts">get</a>(thread_id, { ...params }) -> AgentMail.Thread</code></summary>
 <dl>
 <dd>
 
@@ -10669,6 +10244,14 @@ await client.threads.get("thread_id");
 <dl>
 <dd>
 
+**request:** `AgentMail.GetThreadRequest` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
 **requestOptions:** `ThreadsClient.RequestOptions` 
     
 </dd>