> ## Documentation Index > Fetch the complete documentation index at: https://developers.conveyour.com/llms.txt > Use this file to discover all available pages before exploring further. # List email addresses > Returns all email senders for the org. List all senders **Not callable with an API key.** Every Senders endpoint requires org admin and returns `403 You are not authorized to access this resource` otherwise. Service accounts cannot be admin, so this is unreachable with any API key — use a signed-in admin session. **Response shape:** `data` is a **flat array** of records. This endpoint ignores `page` — the full matching set comes back in one response. **Permission:** org **admin**. A non-admin receives HTTP 403 with the message `You are not authorized to access this resource`. ## OpenAPI ````yaml /api-reference/specs/senders.json get /api/senders openapi: 3.1.0 info: title: ConveYour API — Senders description: Manage the email from-identities your organization sends messages from. version: 1.0.0 servers: - url: https://{subdomain}.conveyour.com description: Your organization's ConveYour instance variables: subdomain: default: acme description: >- Your organization's slug — the subdomain you sign in on. Replace `acme` with yours: if you sign in at `bigco.conveyour.com`, enter `bigco`. security: - conveyourToken: [] tags: - name: Senders description: Manage the email from-identities your organization sends messages from. paths: /api/senders: get: tags: - Senders summary: List email addresses description: >- Returns all email senders for the org. List all senders **Not callable with an API key.** Every Senders endpoint requires org admin and returns `403 You are not authorized to access this resource` otherwise. Service accounts cannot be admin, so this is unreachable with any API key — use a signed-in admin session. **Response shape:** `data` is a **flat array** of records. This endpoint ignores `page` — the full matching set comes back in one response. **Permission:** org **admin**. A non-admin receives HTTP 403 with the message `You are not authorized to access this resource`. operationId: listAllSenders parameters: - $ref: '#/components/parameters/teams' responses: '200': description: Success. content: application/json: schema: allOf: - $ref: '#/components/schemas/Envelope' - type: object properties: data: type: array items: $ref: '#/components/schemas/Sender' example: status: ok message: success data: - id: 64a1b2c3d4e5f6a7b8c9d0e1 org_id: 990 user_id: 123 name: Acme Recruiting email: hello@acme.com domain: acme.com default_sender: true default_reply: false verified: true dkim_public: MIGfMA0GCSqGSIb3DQ... dkim_selector: scph0123 dkim_headers: from dkim_signing_domain: acme.com dkim_status: valid spf_status: valid spf_record: v=spf1 include:sparkpostmail.com ~all ready: true '403': $ref: '#/components/responses/Forbidden' components: parameters: teams: name: teams[] in: query description: >- Team scope for the request, as one or more team ObjectIds. The brackets are required: PHP keeps only the last value for a repeated plain key, so `teams=A&teams=B` silently resolves to B alone. On requests with a JSON body you may send `teams` (no brackets) in the body instead. **Values that are not valid ObjectIds are silently ignored** — a mistyped team ID behaves as if no team was sent. See the [teams section of the API conventions guide](/guides/api-conventions#team-scoping). style: form explode: true schema: type: array items: type: string example: - 64a1b2c3d4e5f6a7b8c9d0ff schemas: Envelope: type: object description: The common response envelope shared by all ConveYour endpoints. properties: status: type: string enum: - ok - failed description: '`ok` on success, `failed` on error.' message: type: string description: Human-readable description of the result. data: description: >- The response payload — an object or an array depending on the endpoint. Sender: type: object description: >- A sender identity (email from-address). `spf_record` and `ready` are computed per request. The internal `hash` is never returned. The list endpoint removes `hash` from the response. properties: id: type: string description: Sender ID. org_id: type: integer description: Owning organization. name: type: string description: Display name shown as the sender. email: type: string description: The from-address. domain: type: string description: Domain parsed from the address. default_sender: type: boolean description: Whether this is the org's default sending address. default_reply: type: boolean description: Whether this is the org's default reply-to address. dkim_public: type: string description: DKIM public key. dkim_selector: type: string description: DKIM selector. dkim_headers: type: string description: DKIM headers. dkim_signing_domain: type: string description: DKIM signing domain. dkim_status: type: string description: DKIM verification status. spf_status: type: string description: SPF verification status. spf_record: type: string description: Computed — the SPF record to publish for this domain. ready: type: boolean description: Computed — whether the sender is verified and usable. created_at: type: integer description: Unix timestamp. updated_at: type: integer description: Unix timestamp. required: - name - email responses: Forbidden: description: >- The token is missing or invalid, or the service account behind it lacks the permission this endpoint requires. content: application/json: example: status: failed message: Lacking necessary permission add_contacts data: permission: add_contacts securitySchemes: conveyourToken: type: apiKey in: header name: x-conveyour-token description: >- Your API key token. Contacts endpoints require a **Server-only — Full API** key — see [Authentication](/quickstart). ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.