Aurinko Email API vs Gmail API

Aurinko Email API

One REST interface covers message search with 17 query operators, drafts, sending, folders and delta sync across seven mailbox types, at $1.50 an active account a month and with send-only and read-only scopes. No status page, SLA, changelog, idempotency key on send or official SDK was found, and SOC 2 is not yet held.

Gmail API

Fourteen OAuth scopes separate labels, sending, metadata and read-only access, and the quota page gives every method a unit cost. Eight of the scopes are restricted, read-only and metadata among them, so a public app that reads mail needs Google's verification and an annual third-party security assessment. Gmail mailboxes only.

Aurinko Email API

1. Use https://api.aurinko.io/v1. Several cURL examples in the docs print https:/api.aurinko.io with one slash, and one search example names the host asti.aurinko.io
2. Do not retry POST /v1/email/messages blindly after a timeout. There is no idempotency key, so check Sent mail with q=rfc822msgid: or by subject first
3. Call POST /v1/email/sync until ready is true, then page /v1/email/sync/updated with pageToken until a nextDeltaToken appears and store it
4. Check the omitted array on message lists. Full bodies come only from Google and Office 365, and other providers return a snippet
5. Request Mail.Read plus Mail.Send for read and send without modify rights. The docs example names Mail.ReadOnly, which is not in the scope list

Gmail API

1. Ask for the narrowest scope. gmail.labels is non-sensitive and gmail.send is sensitive, while every scope that reads mail is restricted
2. List with messages.list and q in Gmail search syntax, then fetch each ID with format=metadata or full. List calls return IDs only
3. Send by posting an RFC 2822 message, base64url encoded, in raw. Set threadId and matching reply headers to stay in a thread
4. Store the historyId and call history.list. On a 404, run a full sync. Call watch again at least every 7 days
5. Back off exponentially on 403 and 429 rate errors, and keep batches to 50 requests or fewer