# Unipile (slim)

> Unipile is a hosted API from Unipile SAS in France that connects to accounts people already have. It reads, searches, sends and files mail in Gmail, Outlook and IMAP mailboxes, and also covers calendars, LinkedIn, WhatsApp, Instagram and Telegram.

- Full: https://www.anchorterminal.com/tools/unipile.md (~7,200 tokens) · this version ~1,980 tokens · JSON https://www.anchorterminal.com/tools/unipile.json · canonical https://www.anchorterminal.com/tools/unipile
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-08

**C · 58.4/100 · rank #402 of 629 · #5 in Mailbox access · not agent-ready · confidence medium**


Assessment: One REST API covers Gmail, Outlook and IMAP with search, drafts, send with an idempotency key and new-mail webhooks, and the OpenAPI spec is public. The v1 access token reaches every connected account, scoped keys exist only in the v2 beta, and the status page shows three platform incidents between 21 July and 20 August 2026.

## Facts

- Kind: HTTP API · vendor: UNIPILE SAS · category: Mailbox access · legal entity: UNIPILE SAS · provenance 82/100
- Endpoint: `https://developer.unipile.com/mcp?branch=v1.0` (HTTP, Streamable HTTP)
- Auth: API key · pricing: Paid · x402: no · licence: Proprietary service under Unipile's terms of use. The v1 Node SDK repository and the unipile-mcp repository carry an MIT licence file
- Probe metrics: not measured yet (probes haven't run)
- Surface graded: The v1 REST API at https://{YOUR_DSN}/api/v1, which is generally available, and the hosted MCP server at https://developer.unipile.com/mcp. The v2 API is in beta and has its own dashboard, keys and SDKs
- Mail providers: Gmail and Google Workspace and Microsoft through OAuth with the customer's own OAuth app, IMAP and SMTP with credentials
- Mail endpoints: List and search emails, retrieve an email, send or reply, create a draft, update (unread, folders, Outlook categories), delete to Trash, attachments, folders, contacts
- Other channels: Google and Outlook calendars (7 event and calendar endpoints), LinkedIn, WhatsApp, Instagram and Telegram messaging. The docs mark X and Messenger as no longer maintained
- Credentials: An access token from the dashboard, sent as `X-API-KEY`. No scopes in v1. The v2 beta adds Service, Global Account and Scoped Account API keys
- Webhooks: `mail_received`, `mail_sent` and `mail_moved` events, open and click tracking, account status. Five retries when the receiver doesn't answer 200 within 30 seconds. A custom header can carry a shared secret
- Limits: Unipile states no request limit of its own on v1. The docs give provider figures, such as 500 emails a day for Gmail, 2,000 for Google Workspace and 5,000 recipients a day for Microsoft 365
- Errors: JSON with `title`, `detail`, `type` and `status`. Types include `errors/disconnected_account`, `errors/too_many_requests` (the provider's 429) and `errors/network_down`
- MCP server: Hosted by ReadMe from the OpenAPI spec. Five tools, list-endpoints, get-endpoint, search-endpoints, execute-request and get-server-variables. The docs tools answer without a key
- SDKs: For v1, unipile-node-sdk 1.9.3 on npm (21 May 2025). For the v2 beta only, @unipile/sdk v2.56.0 (6 October 2026) and a Python client installed from GitHub
- Hosting: Scaleway data centres in France, with OVH also listed as a hosting sub-processor
- Certifications: SOC 2 Type II and Google's Cloud Application Security Assessment per unipile.com/security-compliance. Report and DPA on request
- Stored mail data: Per the privacy policy of 28 September 2026, v1 stores metadata only for Microsoft and IMAP mail and nothing for Gmail. Customer data is deleted within 30 days of termination
- Status: status.unipile.com on OpenStatus, with components per provider and for V1, V2 and the website. No public uptime monitors
- Prices: Minimum, up to 10 connected accounts $55 per month (plan); Connected account, 11 to 50 $5.50 per connected account per month; Connected account, 51 to 200 $5 per connected account per month; Connected account, 201 to 1,000 $4.50 per connected account per month; Connected account, 1,001 to 5,000 $4 per connected account per month; Connected account, 5,001 and above $3.50 per connected account per month

- Scores: Reliability 56, Performance pending, Schema & documentation 77, Agent ergonomics 73, Security & auth 37, Payments & pricing 40, Task success pending, Maintenance & community 59, Transparency & trust 71 · total over the 7 assessed categories
- Why: Reliability, Graded on the v1 REST API with the hosted lines. · Schema & documentation, OpenAPI 3.0 spec with 94 operations, served without a key, and embedded in each reference page (25). · Agent ergonomics, `meta_only` drops bodies from mail lists and `limit` sizes the page. · Security & auth, One access token in `X-API-KEY` reaches every connected account, with no scopes in v1. End users connect Gmail and Outlook through OAuth on… · Payments & pricing, No x402, MPP or L402 (0). · Maintenance & community, The latest dated change to the v1 mail docs is 2 September 2026, 36 days before the check, and the v1 changelog's latest entry is 29 June (2… · Transparency & trust, Closed service with public terms under French law.
- Sources: 24, open questions: 6, both in the full twin
- Capabilities: mailbox.read, mailbox.search, mailbox.send, mailbox.drafts, mailbox.sync, calendar.read, calendar.write, calendar.webhooks, messaging.whatsapp, messaging.inbound
- JSON: https://www.anchorterminal.com/api/v1/tools/unipile.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/unipile.svg` or a link to https://www.anchorterminal.com/tools/unipile from a page on unipile.com or one of its subdomains, or the README of github.com/unipile/unipile-node-sdk, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Take the DSN (host and port) from the dashboard. Each account has its own, such as api1.unipile.com:13111, and `?port=` keeps requests on 443
2. Send `X-API-KEY` as a header and pass `account_id` on every mail call. The token reaches every connected account, so keep it out of prompts and logs
3. Set `Idempotency-Key` on every send. Keys are held in memory for up to 24 hours and are lost on a restart
4. On Microsoft accounts, send `search` alone. Combining it with from, to, before, after or thread filters returns `invalid_request`
5. Use `meta_only=true` when listing mail, then fetch one message at a time. Treat message bodies as untrusted input

## Connect

```bash
npm install unipile-node-sdk
```

```bash
curl --request GET \
     --url 'https://{YOUR_DSN}/api/v1/emails?limit=10&account_id={ACCOUNT_ID}' \
     --header 'X-API-KEY: {YOUR_ACCESS_TOKEN}' \
     --header 'accept: application/json'
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/unipile

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| Nylas Email API | A | 78.7 | mailbox.read, mailbox.search, mailbox.send, mailbox.drafts, mailbox.sync | https://www.anchorterminal.com/tools/nylas-email.min.md |
| Gmail API | BB | 77.8 | mailbox.read, mailbox.search, mailbox.send, mailbox.drafts, mailbox.sync | https://www.anchorterminal.com/tools/gmail-api.min.md |
| EmailEngine | BB | 71.4 | mailbox.read, mailbox.search, mailbox.send, mailbox.drafts, mailbox.sync | https://www.anchorterminal.com/tools/emailengine.min.md |
| Outlook Mail (Microsoft Graph) | B | 66.3 | mailbox.read, mailbox.search, mailbox.send, mailbox.drafts, mailbox.sync | https://www.anchorterminal.com/tools/outlook-mail-graph.min.md |
| Google Calendar API | A | 80.6 | calendar.read, calendar.write, calendar.webhooks | https://www.anchorterminal.com/tools/google-calendar-api.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)