This API endpoint can be used to retrieve detailed information about a specific message.
Pre-requisites
In order to successfully use this endpoint the logged in user must be a Mimecast administrator with at least the Gateway | Tracking | Read permission.
URI
To use this endpoint you send a POST request to:
/api/message-finder/get-message-info
Request Headers
The following request headers must be included in your request:
Field
Description
Authorization
Please see the Authorization guide for more information on building the Authorization header.
x-mc-req-id
A randomly generated GUID, for example,
8578FCFC-A305-4D9A-99CB-F4D5ECEFE297
x-mc-app-id
The Application ID provided with your Registered API Application.
x-mc-date
The current date and time in the following format, for example,
Tue, 24 Nov 2015 12:50:11 UTC
Request Body
{
"data": [
{
"id": "String"
}
]
}
data
Field
Type
Required
Description
id
String
Required
The Mimecast ID of the message to load. This is returned by the /api/message-finder/search endpoint.
Response
{
"fail": [],
"meta": {
"status": 200
},
"data": [
{
"status": "String",
"retentionInfo": {
"currentPurgeDate": "Date String",
"originalPurgeDate": "String",
"retentionAdjustmentDays": -1,
"fbrExpireCheck": [],
"fbrStamps": [],
"audits": [],
"litigationHoldInfo": [],
"smartTags": [],
"purgeBasedOn": "String"
},
"recipientInfo": {
"messageInfo": {
"attachments": [],
"cc": [
"String"
],
"htmlBody": "String",
"transmissionInfo": "String",
"fromHeader": "String",
"subject": "String",
"textBody": "String",
"to": [
"String"
],
"processed": "Date String",
"fromEnvelope": "String",
"sent": "Date String"
},
"recipientMetaInfo": {
"remoteServerGreeting": "String",
"encryptionInfo": "String",
"receiptAcknowledgement": "String",
"receiptEvent": "String",
"transmissionEnd": "Date String",
"spamEvent": "String",
"messageExpiresIn": 3650,
"processingServer": "String",
"binaryEmailSize": 100,
"transmissionSize": 100,
"remoteHost": "String",
"transmissionStart": "Date String",
"remoteIp": "String",
"components": [
{
"mimeType": "String",
"type": "String",
"name": "String",
"extension": "String",
"size": 100
}
]
}
},
"deliveredMessage": {
"user@domain.com": {
"messageInfo": {
"attachments": [],
"cc": [
"String"
],
"htmlBody": "String",
"transmissionInfo": "String",
"fromHeader": "String",
"subject": "String",
"route": "String",
"textBody": "String",
"to": [
"String"
],
"processed": "Date String",
"fromEnvelope": "String",
"sent": "String"
},
"policyInfo": [
{
"policyName": "String",
"policyType": "String",
"inherited": false
}
],
"deliveryMetaInfo": {
"remoteServerGreeting": "String",
"encryptionInfo": "String",
"receiptAcknowledgement": "String",
"emailAddress": "String",
"messageExpiresIn": 3650,
"processingServer": "String",
"transmissionSize": 100,
"remoteHost": "String",
"transmissionStart": "Date String",
"remoteIp": "String",
"components": [
{
"mimeType": "text/plain",
"type": "Email Primary Body Plain Text",
"name": "body.txt",
"extension": "txt",
"size": 4075
}
],
"transmissionEnd": "Date String",
"deliveryEvent": "String"
}
}
},
"spamInfo": {
"spamScore": 0,
"detectionLevel": "moderate",
"spamProcessingDetail": {
"rbl": {
"allow": true,
"info": "String"
},
"greyEmail": true,
"spf": {
"allow": true,
"info": "String"
},
"dkim": {
"allow": true,
"info": "String"
},
"dmarc": {
"allow": true,
"info": "String"
},
"permittedSender": {
"allow": true,
"info": "String"
},
"managedSender": {
"allow": true,
"info": "String"
},
"symbolGroups": [
{
"name": "String",
"description": "String"
}
],
"verdict": {
"decision": "String",
"description": "String",
"risk": "negligible",
"categories": [
{
"name": "String",
"risk": "String",
"subcategories": [
{
"name": "String",
"risk": "String",
"augmentations": [
{
"name": "String",
"risk": "String"
}
]
}
]
}
]
}
}
"id": "String"
}
]
}
meta object
Field
Type
Description
status
Number
The function level status of the request.
data
Field
Type
Description
status
String
The message status.
retentionInfo
Retention Info Object
An object describing the retention information applied to the message.
recipientInfo
Recipient Info Object
An object describing the recipient information applied to the message.
deliveredMessage
Delivered Message Object
If rewriting of this URL in emails is disabled.
spamInfo
spamInfo Object
An object describing the spam scoring information of the message.
id
String
The Mimecast ID of the message.
Retention Info Object
Field
Type
Description
retentionAdjustmentDays
Number
The number of days that a retention adjustment has been applied to the message.
litigationHoldInfo
Array
An array containing objects describing the expiry, description and Mimecast ID of any litigation hold policies applied to the message.
currentPurgeDate
Date String
The date that the message is scheduled to be purged from Mimecast.
purgeBasedOn
String
Describes what the message purge date is based on.
fbrExpireCheck
Array
An array of date strings describing when Granular Retention policies were checked, if applicable.
audits
Array
An array of objects describing the date, type, and information about any audits carried out on the message.
originalPurgeDate
Date String
The message's original purge date.
smartTags
Array
An array of smart tag objects that the message is assigned to.
fbrStamps
Array
An array of objects describing the email address, folder, recipient visibility, expiry, purge, and policy fields applied to the message as a result of a Granular retention policy action, if applicable.
Recipient Info Object
Field
Type
Description
messageInfo
Message Info Object
An object describing recipient message information.
recipientMetaInfo
Message Meta-data Object
An object describing the message meta-data
Delivered Message Object
Field
Type
Description
messageInfo
Message Info Object
An object describing recipient message information.
recipientMetaInfo
Message Meta-data Object
An object describing the message meta-data
spamInfo Object
Field
Type
Description
spamScore
Number
The spam score of the recieved message
detectionLevel
String
The spam scanning level applied to the message
spamProcessingDetail
spamProcessingDetail Object
An object containing the detailed spam scanning information
spamProcessingDetail Object
Field
Type
Description
greyEmail
Boolean
Identifies if message was found to be greymail or bulk
rbl
infoObject
An object containing information about RBL results of the message
spf
infoObject
An object containing information about SPF results of the message
dkim
infoObject
An object containing information about DKIM results of the message
dmarc
infoObject
An object containing information about DMARC results of the message
permittedSender
infoObject
An object to determine if the from address matched a Permitted Sender entry
managedSender
infoObject
An object to determine if the from address matched a Managed Sender entry
verdict
spamVerdict Object
An object containing category and risk info for the spam verdict
spamVerdict Object
Field
Type
Description
descision
String
Displays 'spam' if the message was considered to be spam
description
String
Any description for the reason for the message to be considered spam
risk
String
A risk rating of the message
categories
Array of categories Objects
An array containing categories that applied to the message
categories Object
Field
Type
Description
name
String
Name of the category
risk
String
A risk rating of the category
subcategories
Array of subcategories Objects
An array containing sub-categories that applied to the message
subcategories Object
Field
Type
Description
name
String
Name of the sub-category
risk
String
A risk rating of the sub-category
augmentations
Array of augmentations Objects
An array containing augmentations that applied to the sub-category
augmentations Object
Field
Type
Description
name
String
Name of the augmentation
risk
String
A risk rating of the augmentation
Sample Code
Sample code is provided to demonstrate how to use the API and is not representative of a production application. To use the sample code; complete the required variables as described, populate the desired values in the request body, and execute in your favorite IDE. Please see the Global Base URL's page to find the correct base URL to use for your account.
POST {base_url}/api/message-finder/get-message-info
Authorization: MC {accesskKey}:{Base64 encoded signed Data To Sign}