id: mailinblack
name: Mailinblack
version: 1.0.0
description: "Mailinblack (email protection API) — anti-phishing operations: list quarantined messages, release a message, and manage sender allow/block lists. Bearer-token authentication; stdlib-only, no extra Python dependencies. (French vendor. NOTE: exact API paths are best-effort — verify against the Mailinblack API documentation before production use.)"
changelog: "1.0.0 — Initial release: list quarantine, release message, block/allow sender."
category: email

# Per-instance configuration. Auth header 'Authorization: Bearer <api_token>'.
config_schema:
  properties:
    base_url:
      type: string
      description: "Mailinblack API base URL"
    api_token:
      type: string
      description: "API token"
      x-soar-sensitive: true
  required:
    - base_url
    - api_token

commands:
  - id: list_quarantine
    name: mailinblack-list-quarantine
    description: "List quarantined messages."
    risk: read
    inputs_schema:
      properties:
        recipient: { type: string, description: "Optional recipient filter" }
        limit: { type: number, description: "Max messages (default 25)" }
      required: []
    outputs_schema: { properties: {} }
  - id: release_message
    name: mailinblack-release-message
    description: "Release a quarantined message for delivery."
    inputs_schema:
      properties:
        message_id: { type: string, description: "Message ID" }
      required: [message_id]
    outputs_schema: { properties: {} }
  - id: block_sender
    name: mailinblack-block-sender
    description: "Add a sender to the block list."
    inputs_schema:
      properties:
        sender: { type: string, description: "Sender address to block" }
      required: [sender]
    outputs_schema: { properties: {} }
  - id: allow_sender
    name: mailinblack-allow-sender
    description: "Add a sender to the allow list."
    inputs_schema:
      properties:
        sender: { type: string, description: "Sender address to allow" }
      required: [sender]
    outputs_schema: { properties: {} }

  - id: test_connection
    name: mailinblack-test-connection
    description: "Verify the API token (used by the Test button)."
    risk: read
    inputs_schema:
      properties: {}
      required: []
    outputs_schema: { properties: {} }