Hey there!

As you may know, the Graph API operates all aspects and services of OnXbox, as well as your own service(s).

The Graph API can now be fully used to interact with the mail system, but only through authorised oauth clients, such as our own browser mail client. Preview of the API in a "production" environment would look like.

You may also now use the Graph API to get just your Xbox profile picture by calling https://graph.onxbox.co/me/picture with a valid access token either by query string or authorization header.

• Send and Receive Emails: That's right! You can now send emails directly from your @onxbox.net address, in addition to receiving them. This opens up a whole new world of possibilities for how you use your OnXbox email!
  
• More Reliable Service: This direct integration provides a more robust and efficient connection to your mailbox.
  

Hello everyone!

We're currently allowing free email (at time of writing, receive only) to your [email protected]!

Please check out OnXbox Mail

Service Status

Hello everyone!

Just another quick update regarding the application portal. It's almost ready to start accepting your applications, but we're just ensuring that it looks and functions as expected before opening it to the public. 

We can't wait to see what you're going to develop using OnXbox! 

~MrKirbeh

Exciting New Scopes: Access OnXbox Community Data with Granular Control!

Hey everyone!

We've got some great news regarding how you can access different types of data through our service. We're introducing new, specific scopes to give you incredibly fine-grained control and access to our OnXbox Community information!

•    
  
• community.profile.read: Allows reading basic user profile information (e.g., username, registration date, custom profile fields, excluding sensitive data).
     
  
• community.profile.write: Allows modifying user profile information (e.g., updating custom profile fields, location, interests).
     
  
• community.avatar.read: Allows reading a user's current avatar/profile picture URL.
     
  
• community.avatar.write: Allows uploading or changing a user's avatar/profile picture.
  

•    
  
• community.pm.all: Grants comprehensive access to all private message functions, including reading all messages (inbox, sent, drafts, trash, custom folders), sending new messages, creating and deleting custom folders (users cannot delete default folders), and deleting messages.
     
  
• community.pm.read: Allows reading all private messages across all folders (inbox, sent, drafts, trash, custom folders). This is a broad read scope.
     
  
• community.pm.read.inbox: Specifically allows reading messages only in the user's inbox.
     
  
• community.pm.read.sent: Specifically allows reading messages only in the user's sent items folder.
     
  
• community.pm.read.drafts: Specifically allows reading messages only in the user's drafts folder.
     
  
• community.pm.read.trash: Specifically allows reading messages only in the user's trash folder.
     
  
• community.pm.send: Allows sending new private messages to other users.
     
  
• community.pm.create_draft: Allows creating new private message drafts.
     
  
• community.pm.manage_folders: Allows creating, renaming, or deleting custom private message folders.
     
  
• community.pm.delete: Allows deleting private messages from any folder.
  

•    
  
• community.threads.read: Allows reading content of forum threads/topics.
     
  
• community.threads.create: Allows creating new forum threads/topics in permitted forums.
     
  
• community.threads.edit: Allows editing existing forum threads/topics created by the user (or if the user has moderation permissions).
     
  
• community.threads.delete: Allows deleting forum threads/topics created by the user (or if the user has moderation permissions).
     
  
• community.posts.read: Allows reading individual posts within forum threads.
     
  
• community.posts.create: Allows creating new replies/posts within existing forum threads.
     
  
• community.posts.edit: Allows editing existing posts created by the user (or if the user has moderation permissions).
     
  
• community.posts.delete: Allows deleting posts created by the user (or if the user has moderation permissions).
  

•    
  
• community.warnings.read: Allows reading a user's warning history on the forum.
     
  
• community.reputation.read: Allows reading a user's reputation score.
     
  
• community.reputation.write: Allows giving or modifying reputation to other users.
     
  
• community.search: Allows performing searches across the forum content.
  

•    
  
• "friends" scope will continue to provide Xbox friends data.
     
  
• "profile" scope will continue to provide your Xbox profile data.
  

• Each OAuth2 application you create with OnXbox must have a valid HTTPS redirect URI.
  
• If you're developing locally, http://localhost:<port> is also accepted.