Create email forwarder

POST /api/v2/shared-hosting/{accountId}/email-forwarders

Create an email forwarder or discard/noreply address inside a shared-hosting account.

Use this route only when the source domain is attached to this hosting account; verify that with GET /api/v2/shared-hosting/{accountId}/domains before writing.

Send the source address as localPart plus domain; if the caller gives info@example.com, split it into localPart: "info" and domain: "example.com".

This route manages the hosting account's mail-forwarder bindings and does not enable or replace domain-level email routing.

If the customer does not have shared hosting, or this domain is not attached to the hosting account, use POST /api/v2/domains/{id}/email-forwarding for source-address rules or PUT /api/v2/domains/{id}/email-forwarding for catch-all forwarding.

There is no /api/v2/shared-hosting/{accountId}/catch-all route.

For normal forwarding send action: "forward" or omit action, plus one to twenty destination email addresses in destinations.

A singular destination string is accepted only as a compatibility alias for one recipient; prefer destinations.

For a noreply/drop mailbox send action: "discard" and omit destinations; do not send cPanel-specific values such as :blackhole: or /dev/null.

Web Hosting Email

Authentication

Required API scopes: write:hostingconsole:services

Authenticate with an API key in the Authorization: Bearer <token> header.

Context

Related endpoints

GET /api/v2/shared-hosting/{accountId}/email-forwarders List email forwarders DELETE /api/v2/shared-hosting/{accountId}/email-forwarders/{address} Delete email forwarder destinations GET /api/v2/shared-hosting/{accountId}/domains List hosting domains

Path Parameters

accountId string required Example: acct_01hxa3b4c5d6e7f8g9h0j1k2m3

Public shared-hosting account ID. Get it from GET /api/v2/shared-hosting data[].id. Do not invent this value; use the exact ID returned by the referenced API response.

Headers

Authorization Bearer <token>

Accept application/json

Content-Type application/json

Body

required

application/json

localPart string required · Example: info

Address part before @. For info@example.com, send info.

domain string required · Example: example.com

Hosted domain attached to this shared-hosting account. Get it from GET /api/v2/shared-hosting/{accountId}/domains.

destinations array<string> · Example: ["anna@example.net"]

Destination mailbox addresses for action: "forward". Omit for action: "discard".

destination string deprecated · Example: anna@example.net

Compatibility alias for a single destination address. Prefer destinations: ["anna@example.net"]; do not send both fields.

action string · enum · Example: forward

Use forward to send mail to destinations. Use discard for noreply/drop behavior; the API translates this to the control-panel discard mode.

forward

discard

Responses

201 Email forwarder created. 6 fields

id string required · Example: efwd_01hxa3b4c5d6e7f8g9h0j1k2m3

email string required

domain string required

localPart string required

action string · enum required

forward

discard

destinations array<string> required

400 Invalid request. The response body is an RFC 7807 Problem Details document. 10 fields

type string · Example: https://developer.hostup.se/errors/invalid_request

title string · Example: Validation failed

status integer · Example: 400

detail string · Example: The request body failed validation.

code string · Example: invalid_request

Stable machine-readable code. Branch on this field, not on detail.

instance string · Example: /api/v2/orders

requestId string · Example: req_01hxa3b4c5d6e7f8g9h0j1k2m3

timestamp string · Example: 2026-04-27T12:34:56.000Z

errors array<object>

Field-level validation errors when code is invalid_request.

errors[].pointer string required · Example: /items/0/eppCode

errors[].detail string required · Example: `eppCode` is required for this transfer.

errors[].code string required · Example: missing_required

extensions object

401 Unauthorized. Authentication is required. 10 fields

type string · Example: https://developer.hostup.se/errors/invalid_request

title string · Example: Validation failed

status integer · Example: 400

detail string · Example: The request body failed validation.

code string · Example: invalid_request

Stable machine-readable code. Branch on this field, not on detail.

instance string · Example: /api/v2/orders

requestId string · Example: req_01hxa3b4c5d6e7f8g9h0j1k2m3

timestamp string · Example: 2026-04-27T12:34:56.000Z

errors array<object>

Field-level validation errors when code is invalid_request.

errors[].pointer string required · Example: /items/0/eppCode

errors[].detail string required · Example: `eppCode` is required for this transfer.

errors[].code string required · Example: missing_required

extensions object

403 Forbidden. The caller lacks a required scope or does not own the resource. 10 fields

type string · Example: https://developer.hostup.se/errors/invalid_request

title string · Example: Validation failed

status integer · Example: 400

detail string · Example: The request body failed validation.

code string · Example: invalid_request

Stable machine-readable code. Branch on this field, not on detail.

instance string · Example: /api/v2/orders

requestId string · Example: req_01hxa3b4c5d6e7f8g9h0j1k2m3

timestamp string · Example: 2026-04-27T12:34:56.000Z

errors array<object>

Field-level validation errors when code is invalid_request.

errors[].pointer string required · Example: /items/0/eppCode

errors[].detail string required · Example: `eppCode` is required for this transfer.

errors[].code string required · Example: missing_required

extensions object

404 Not found. The resource does not exist or is not owned by the caller. 10 fields

type string · Example: https://developer.hostup.se/errors/invalid_request

title string · Example: Validation failed

status integer · Example: 400

detail string · Example: The request body failed validation.

code string · Example: invalid_request

Stable machine-readable code. Branch on this field, not on detail.

instance string · Example: /api/v2/orders

requestId string · Example: req_01hxa3b4c5d6e7f8g9h0j1k2m3

timestamp string · Example: 2026-04-27T12:34:56.000Z

errors array<object>

Field-level validation errors when code is invalid_request.

errors[].pointer string required · Example: /items/0/eppCode

errors[].detail string required · Example: `eppCode` is required for this transfer.

errors[].code string required · Example: missing_required

extensions object

429 Rate limited. Retry after the limit resets. 429 responses include Retry-After seconds plus X-RateLimit-* headers. 10 fields

type string · Example: https://developer.hostup.se/errors/invalid_request

title string · Example: Validation failed

status integer · Example: 400

detail string · Example: The request body failed validation.

code string · Example: invalid_request

Stable machine-readable code. Branch on this field, not on detail.

instance string · Example: /api/v2/orders

requestId string · Example: req_01hxa3b4c5d6e7f8g9h0j1k2m3

timestamp string · Example: 2026-04-27T12:34:56.000Z

errors array<object>

Field-level validation errors when code is invalid_request.

errors[].pointer string required · Example: /items/0/eppCode

errors[].detail string required · Example: `eppCode` is required for this transfer.

errors[].code string required · Example: missing_required

extensions object

500 Internal error. Retry later or contact support if the issue persists. 10 fields

type string · Example: https://developer.hostup.se/errors/invalid_request

title string · Example: Validation failed

status integer · Example: 400

detail string · Example: The request body failed validation.

code string · Example: invalid_request

Stable machine-readable code. Branch on this field, not on detail.

instance string · Example: /api/v2/orders

requestId string · Example: req_01hxa3b4c5d6e7f8g9h0j1k2m3

timestamp string · Example: 2026-04-27T12:34:56.000Z

errors array<object>

Field-level validation errors when code is invalid_request.

errors[].pointer string required · Example: /items/0/eppCode

errors[].detail string required · Example: `eppCode` is required for this transfer.

errors[].code string required · Example: missing_required

extensions object

POST https://cloud.hostup.se/api/v2/shared-hosting/{accountId}/email-forwarders

For AI assistants

View as Markdown

cURL

curl -X POST "https://cloud.hostup.se/api/v2/shared-hosting/acct_01hxa3b4c5d6e7f8g9h0j1k2m3/email-forwarders" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Accept: application/json" \
  -H "Content-Type: application/json" \
  -d '{
    "localPart": "info",
    "domain": "example.com",
    "action": "forward",
    "destinations": [
      "anna@example.net"
    ]
  }'

Response

{
  "id": "efwd_01hxa3b4c5d6e7f8g9h0j1k2m3",
  "email": "info@example.com",
  "domain": "example.com",
  "localPart": "info",
  "action": "forward",
  "destinations": [
    "anna@example.net"
  ]
}

{
  "type": "object",
  "properties": {
    "id": {
      "type": "string"
    },
    "email": {
      "type": "string"
    },
    "domain": {
      "type": "string"
    },
    "localPart": {
      "type": "string"
    },
    "action": {
      "type": "string",
      "enum": [
        "forward",
        "discard"
      ]
    },
    "destinations": {
      "type": "array",
      "items": {
        "type": "string"
      }
    }
  }
}

Request Body Forward to one recipient

{
  "localPart": "info",
  "domain": "example.com",
  "action": "forward",
  "destinations": [
    "anna@example.net"
  ]
}