Web hooks

Email It In can call a URL of yours each time it files an attachment, so your own systems can act on it.

Setting up

Enter your URL in the web hook setting of your Email It In account. Use an address that only you know.

What we send

One POST request per attachment, after the attachment has been filed.
The body is JSON (Content-Type: application/json).
Each request is sent once. Respond quickly with any 2xx status.
Requests are not signed, so do not act on them without checking the details.

Payload

headers: The email's headers. Names are lowercase; each value is an array of decoded strings, because a header can appear more than once.
envelope.mail_from: The sender address from the SMTP envelope.
envelope.rcpt_to: The recipient addresses from the SMTP envelope (an array).
storage_response: What your storage provider returned for the upload. Its shape depends on the provider (below).

Example (Google Drive)

{
  "headers": {
    "from": ["Jane Doe <jane@example.com>"],
    "to": ["jane42otter+invoices@emailitin.com"],
    "subject": ["[invoices] March statement"],
    "date": ["Mon, 06 Oct 2026 15:00:42 -0400"],
    "message-id": ["<CAF1x2y3z@mail.gmail.com>"],
    "mime-version": ["1.0"],
    "content-type": ["multipart/mixed; boundary=\"000000000000a1b2c3\""],
    "received": ["from mail-lb0-f182.google.com ...", "by 10.114.92.204 with HTTP ..."]
  },
  "envelope": {
    "mail_from": "jane@example.com",
    "rcpt_to": ["jane42otter+invoices@emailitin.com"]
  },
  "storage_response": {
    "kind": "drive#file",
    "id": "1AbCdEfGhIjKlMnOpQrStUvWxYz",
    "title": "statement.pdf",
    "mimeType": "application/pdf",
    "fileSize": "248113",
    "md5Checksum": "5d41402abc4b2a76b9719d911017c592",
    "alternateLink": "https://drive.google.com/file/d/1AbCdEfGhIjKlMnOpQrStUvWxYz/view",
    "parents": [{ "kind": "drive#parentReference", "id": "0BxYz..." }]
  }
}

storage_response by provider

Google Drive: The Drive API v2 file resource for the uploaded file: kind ("drive#file"), id, title, mimeType, fileSize (a string), md5Checksum, alternateLink, parents and more.
Dropbox: The file metadata Dropbox returns for the upload: id, name, path_lower, path_display, size, rev, client_modified, server_modified, content_hash.
OneDrive: An object whose _responseBody is the uploaded drive item (id, name, size, webUrl, file.mimeType and more), with fileSize (bytes) added. A _location field may also be present.
Egnyte: The HTTP headers of Egnyte's upload response, with lowercase names, for example etag and last-modified.

Treat fields not listed here as optional: providers add fields from time to time.

Questions

Email support@emailitin.com.