Team & account API

Endpoints for organising and administering a team: projects, API keys, webhooks, the audit log, API mocks, failure scenarios, your own email preferences and the service status. Authentication, roles, errors and paging are described in the API overview.

#Projects and systems

A project groups the systems of one app or environment: email inboxes, SMS inboxes, request bins, API mocks, WhatsApp sandboxes and push inboxes. Mock identity providers belong to the whole team.

{
  "projects": [
    {
      "id": "cm5f1…",
      "name": "Checkout · staging",
      "createdAt": "2026-10-01T09:00:00.000Z",
      "inboxCount": 2,
      "systems": { "inboxes": 2, "smsInboxes": 1, "requestBins": 1, "apiMocks": 3, "whatsappSandboxes": 0, "pushInboxes": 0 },
      "total": 7
    }
  ],
  "ungrouped": { "inboxes": 1, "smsInboxes": 0, "requestBins": 0, "apiMocks": 0, "whatsappSandboxes": 0, "pushInboxes": 0 }
}

To move a system into a project, PATCH it with { "projectId": "<id>" } (or null to ungroup it) on its own endpoint, for example PATCH /api/inboxes/:id. Each entry of GET /api/projects/:id/systems names that endpoint in patch.

#API keys

API keys are managed by signed-in owners and admins only; API keys get 403.

Creating more keys than the plan allows answers 402.

#Webhooks

Testlie's own event notifications: a signed POST to your URL when mail, a text, a call, a WhatsApp message or a push notification arrives. Included from the Team plan. Payloads, signatures and retries are described in Webhooks.

curl -X POST https://app.testlie.com/api/webhooks \
  -H "Authorization: Bearer $TESTLIE_API_KEY" -H "Content-Type: application/json" \
  -d '{ "url": "https://ci.example.com/hooks/testlie", "events": ["sms.received", "call.completed"] }'

{
  "webhook": {
    "id": "cm6a3…",
    "inboxId": null,
    "url": "https://ci.example.com/hooks/testlie",
    "format": "json",
    "events": ["sms.received", "call.completed"],
    "enabled": true,
    "lastStatus": null,
    "lastError": null,
    "lastDeliveredAt": null,
    "createdAt": "2026-10-23T10:30:00.000Z",
    "secret": "whsec_…"
  }
}

On a plan without webhooks, creating one answers 402 with "code": "feature_unavailable".

#Team data

Export everything the team holds, or delete the team. See also the privacy policy.

#Audit log

#Getting started checklist

#Email preferences

Your own preferences, not the team's. These endpoints need a signed-in session; API keys get 401.

Every product email also has a one-click unsubscribe link.

#API mocks

Payment gateways and the other API mocks share these endpoints. Each mock has an id (used below) and a slug, the 14-hexadecimal-character segment of its baseUrl (https://testlie.com/mock/<slug>), which your app calls.

The provider APIs themselves (/mock/<slug>/...) are described in Mock payment gateways, API mocks and the page for each provider. Creating more mocks than the plan allows answers 402.

#Failure scenarios

Switch on outage presets across the team or one project. See Failure scenarios.

#SDK downloads

#Service status

These endpoints take no authentication.