## POST /api/v2/shared-hosting/{accountId}/email-accounts

**Create email account**

Create a mailbox on a cPanel-backed shared-hosting account. Get `accountId` from `GET /api/v2/shared-hosting` `data[].id`. Send `localPart` and `domain`; do not send a full email address. The domain must belong to the hosting account. Omit `quotaMb` to use the HostUp default of 32768 MB (32 GB). If this returns `account_not_eligible_cpanel`, use the control panel SSO link manually or contact support to migrate the account to a newer cPanel-backed plan.

### Related Endpoints

- `GET /api/v2/shared-hosting/{accountId}/email-accounts`: List email accounts
- `DELETE /api/v2/shared-hosting/{accountId}/email-accounts/{address}`: Delete mailbox
- `PUT /api/v2/shared-hosting/{accountId}/email-accounts/{address}/quota`: Replace mailbox quota

### Headers

- `Accept`: application/json
- `Authorization`: Bearer YOUR_API_KEY
- Required API scopes: `write:hosting`, `console:services`
- `Content-Type`: application/json

### Parameters

- `accountId` (path, string, required): Public shared-hosting account ID. Get it from GET /api/v2/shared-hosting `data[].id`. Do not invent this value; use the exact ID returned by the referenced API response. Example: `acct_01hxa3b4c5d6e7f8g9h0j1k2m3`

### Request Body

- `localPart` (string, required): Mailbox local part only. Do not include @domain. Example: `hello`
- `domain` (string, required): Domain hosted on this shared-hosting account. Example: `example.com`
- `password` (string, required) Example: `YOUR_MAILBOX_PASSWORD`
- `quotaMb` (number, optional) [min: 0, max: 1048576]: Mailbox quota in megabytes. Omit for the default 32768 MB. Example: `1024`

### Request Examples

#### Create mailbox

```bash
curl -X POST "https://cloud.hostup.se/api/v2/shared-hosting/acct_01hxa3b4c5d6e7f8g9h0j1k2m3/email-accounts" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Accept: application/json" \
  -H "Content-Type: application/json" \
  -d '{
    "localPart": "hello",
    "domain": "example.com",
    "password": "YOUR_MAILBOX_PASSWORD",
    "quotaMb": 1024
  }'
```

```json
{
  "localPart": "hello",
  "domain": "example.com",
  "password": "YOUR_MAILBOX_PASSWORD",
  "quotaMb": 1024
}
```

### Response Schema

- `id` (string, required) Example: `mail_01hxa3b4c5d6e7f8g9h0j1k2m3`
- `email` (string, required) Example: `hello@example.com`
- `domain` (string, required) Example: `example.com`
- `quota` (object, required)
- `quota.usedGb` (number,null, required) Example: `0`
- `quota.limitGb` (number,null, required) Example: `1`
- `quota.usagePercent` (number,null, required) Example: `0`
- `quota.exceeded` (boolean, required) Example: `false`

### Responses

#### 201 - Created email account.
```json
{
  "id": "mail_01hxa3b4c5d6e7f8g9h0j1k2m3",
  "email": "hello@example.com",
  "domain": "example.com",
  "quota": {
    "usedGb": 0,
    "limitGb": 1,
    "usagePercent": 0,
    "exceeded": false
  }
}
```

#### 400 - Invalid request. The response body is an RFC 7807 Problem Details document.
```json
{
  "type": "https://developer.hostup.se/errors/invalid_request",
  "title": "Invalid request",
  "status": 400,
  "detail": "The request body failed validation.",
  "code": "invalid_request",
  "instance": "/api/v2/resource",
  "requestId": "req_01hxa3b4c5d6e7f8g9h0j1k2m3",
  "timestamp": "2026-04-27T12:34:56.000Z",
  "errors": [
    {
      "pointer": "/items/0/domainName",
      "detail": "`domainName` is required.",
      "code": "invalid_request"
    }
  ]
}
```

#### 401 - Unauthorized. Authentication is required.
```json
{
  "type": "https://developer.hostup.se/errors/unauthorized",
  "title": "Unauthorized",
  "status": 401,
  "detail": "Authentication is required.",
  "code": "unauthorized",
  "instance": "/api/v2/resource",
  "requestId": "req_01hxa3b4c5d6e7f8g9h0j1k2m3",
  "timestamp": "2026-04-27T12:34:56.000Z"
}
```

#### 403 - Forbidden. The caller lacks a required scope or does not own the resource.
```json
{
  "type": "https://developer.hostup.se/errors/forbidden",
  "title": "Forbidden",
  "status": 403,
  "detail": "The caller lacks a required scope or does not own the resource.",
  "code": "forbidden",
  "instance": "/api/v2/resource",
  "requestId": "req_01hxa3b4c5d6e7f8g9h0j1k2m3",
  "timestamp": "2026-04-27T12:34:56.000Z"
}
```

#### 404 - Not found. The resource does not exist or is not owned by the caller.
```json
{
  "type": "https://developer.hostup.se/errors/not_found",
  "title": "Not found",
  "status": 404,
  "detail": "The requested resource could not be found.",
  "code": "not_found",
  "instance": "/api/v2/resource",
  "requestId": "req_01hxa3b4c5d6e7f8g9h0j1k2m3",
  "timestamp": "2026-04-27T12:34:56.000Z"
}
```

#### 409 - The hosting account uses HostUp's legacy control panel, so mailbox creation is not available through this API.
```json
{
  "type": "https://developer.hostup.se/errors/account_not_eligible_cpanel",
  "title": "Control panel action unavailable",
  "status": 409,
  "detail": "Email account management is only supported for hosting accounts on the cPanel control panel. This account uses HostUp's legacy control panel. Use the control panel SSO link to make the change manually, or contact support to migrate the account to a newer cPanel-backed plan.",
  "instance": "/api/v2/shared-hosting/acct_01hxa3b4c5d6e7f8g9h0j1k2m3/email-accounts",
  "code": "account_not_eligible_cpanel"
}
```

#### 429 - Rate limited. Retry after the limit resets. 429 responses include `Retry-After` seconds plus `X-RateLimit-*` headers.
```json
{
  "type": "https://developer.hostup.se/errors/rate_limit_exceeded",
  "title": "Too many requests",
  "status": 429,
  "detail": "Too many requests. Retry after the limit resets.",
  "code": "rate_limit_exceeded",
  "instance": "/api/v2/resource",
  "requestId": "req_01hxa3b4c5d6e7f8g9h0j1k2m3",
  "timestamp": "2026-04-27T12:34:56.000Z"
}
```

#### 500 - Internal error. Retry later or contact support if the issue persists.
```json
{
  "type": "https://developer.hostup.se/errors/internal_error",
  "title": "Internal server error",
  "status": 500,
  "detail": "An unexpected error occurred. Retry later or contact support if the issue persists.",
  "code": "internal_error",
  "instance": "/api/v2/resource",
  "requestId": "req_01hxa3b4c5d6e7f8g9h0j1k2m3",
  "timestamp": "2026-04-27T12:34:56.000Z"
}
```