Recipient allowlist
Get the recipient allowlist
The closed list of people your agents may write to. Off by default: with no list, agents write to anyone.
Required scope: recipient-allowlist:read.
Headers
Lelemon-Subaccount^sub_[0-9A-Za-z]{22}…The subaccount (sub_…) this request acts on. Only for the keys of a platform account; without it the request acts on the account itself.
Get the recipient allowlist › Responses
objectenabledWhile true, nothing is sent to anyone who is not in entries. While false, the list is kept but ignored.
entriesPhones in E.164, emails, or whole domains written as @domain. A domain does not include its subdomains.
updatedAtdryRunPresent and true only on a dry run: the list shown is what would be saved, and nothing was saved.
Replace the recipient allowlist
While enabled, a message, template, contact event, campaign or agent reply to anyone outside the list is rejected with 422 recipient_not_allowed (a campaign recipient or a trigger is skipped with not_allowed instead). It applies to the organization or subaccount the key acts on. It replaces the whole list, so a wrong call locks people out: send ?dryRun=true first to validate the entries and see the list that would result without saving it. Idempotent: the same body leaves the same list.
Required scope: recipient-allowlist:write.
query Parameters
dryRunWhen true, the request goes through the same validation as the real one and is answered with what would happen (always 200), and nothing is saved, sent or charged. The answer has the same shape as the real one plus dryRun: true; an id in it is not saved. It does not use the Idempotency-Key.
Headers
Lelemon-Subaccount^sub_[0-9A-Za-z]{22}…The subaccount (sub_…) this request acts on. Only for the keys of a platform account; without it the request acts on the account itself.
Replace the recipient allowlist › Request Body
enabledentriesReplaces the whole list. Phones in E.164 (+56912345678), emails (ana@empresa.cl) or domains (@empresa.cl).
Replace the recipient allowlist › Responses
objectenabledWhile true, nothing is sent to anyone who is not in entries. While false, the list is kept but ignored.
entriesPhones in E.164, emails, or whole domains written as @domain. A domain does not include its subdomains.
updatedAtdryRunPresent and true only on a dry run: the list shown is what would be saved, and nothing was saved.