API keys changelog

• API keys created before keys had the secret_ prefix are accepted on /v2 again.
• Retrieve an email returns the full email object, including object, from and to.
• Domain responses return track_loads and track_clicks as 0 or 1, as documented.

Sending-only keys could previously list and retrieve emails and call some other read endpoints. They’re now limited to Send an email and the actions on an existing email: reschedule, cancel, retry and forward. Other endpoints reject sending keys.

If your integration also reads emails, domains or other resources, use a full access key for those calls. See API keys.

API keys replace credentials. A key has the full or sending scope, a sending key can be restricted to one sending domain, and you can manage keys through the API. API v1 stayed available while you migrated.

See the API reference.