Developer API | LuckyLava Protocol

🛡 Protocol Authentication

Most endpoints require a protocol token. You can pass this in two ways:

Header: Authorization: Bearer [token]
Parameter: ?token=[token] (GET or POST)

GET / POST /api/v1/generate.php

Initialize New Protocol

Generates a fresh, anonymous email address and a high-security access token.

Parameter	Type	Description
domain	string	Optional. Specify a domain from the active pool.

// Example Response
{
  "address": "skymail24@luckylava.com",
  "token": "a1b2c3d4...",
  "expires_at": "2026-05-02T22:04:48+00:00",
  "domain": "luckylava.com"
}

GET / POST /api/v1/restore.php

Magic Restore Session

Recover an existing inbox on a new device using either the address or the token.

Parameter	Type	Description
address	string	Optional. The email address to recover.
token	string	Optional. The session token to recover.

// Example Response (Success)
{
  "address": "skymail24@luckylava.com",
  "token": "a1b2c3d4...",
  "expires_at": "..."
}

GET / POST /api/v1/inbox.php

Fetch Incoming Transmission

Retrieves a list of emails for the authenticated session.

Parameter	Type	Description
token	string	Required (if no header).
since	int	Optional. Fetch only messages newer than this ID.

// Response Array
[
  {
    "id": 105,
    "from_address": "sender@external.com",
    "subject": "Encrypted Data",
    "received_at": "2026-05-02 14:00:00",
    "is_read": 0
  }
]

GET / POST /api/v1/message.php

Decrypt Message Body

Fetches the full content and metadata of a specific message.

Parameter	Type	Description
id	int	Required. Message ID.
token	string	Required (if no header).

💡 Frontend Integration Guide

How to implement LuckyLava features in your own UI:

📱 QR Code Generation

Use any QR API (like api.qrserver.com) and point it to the address returned by generate.php.

🔗 Share Access

Generate a link to your app with the token: https://your-site.com/?access_token=[token].

📋 Clipboard Copy

Simply use navigator.clipboard.writeText(data.address) from the generation response.