Allocate the scan's disposable mailbox.

POST 
/v1/scans/:scan_id/scan-mail

Worker-facing. Mints (or returns the existing) per-scan e-mail address — scan-<hex>@incoming.zeroquarry.com — that the scan's agents use for target account registrations, e-mail verification codes and magic-link logins, then read via /scan-mail/messages. Idempotent per scan. The gates live here on the control plane: the platform mail subsystem must be configured, and the scan's account tier must carry allow_incoming_email_triage. Worker auth is required.

Request

Responses

200

The live mailbox: {address, address_id, created, label}.

401

Missing or invalid bearer token.

403

The account's tier does not include scan mailboxes.

404

Unknown scan.

503

The platform mail subsystem is not configured.