> For an agent: the map of this documentation is at https://escouade.io/en/mail/docs/llms.txt; every page exists in Markdown, at the same address with `.md` appended.

# `create_app_password`

Connect a phone or an app to an inbox.

Creates an app password for an inbox, to enter in a phone or an application. access = calendar_contacts (the default) opens the inbox's calendar and contacts, meeting requests included (CalDAV, CardDAV); access = mail_read opens read-only access to the inbox over IMAP, for Escouade or an application that reads. Neither sends e-mail: sending always goes through Escouade Mail and its rules. The password is returned once only, with the server and the username to enter; the space's human is told by e-mail. This is a human gesture: it needs the approve permission. Ten at most per inbox; revoke_app_password removes one.

## Access

- **Key**: an Escouade Mail key with `approve`.
- **Space**: a verified space.
- **Changes nothing**: no, it acts.
- **Safe to replay**: use an `idempotency_key` where the tool offers one.

## Parameters

| Parameter | Type | Required | Description |
|---|---|---|---|
| `inbox_id` | string | yes | The inbox (inb_…, see list_inboxes). |
| `access` | one of `calendar_contacts`, `mail_read` | no | What the password opens: calendar_contacts (calendar and contacts, meeting requests included; the default) or mail_read (reading the inbox over IMAP). |
| `label` | string | no | The name of the device or application, for example “Marie's iPhone”. Absent: “Phone”, or “Escouade” for reading. |

## Call it

```sh
curl -s https://api.subagent.fr/v1/create_app_password \
  -H 'Content-Type: application/json' \
  -H 'Authorization: Bearer sak_…' \
  -d '{"inbox_id": "…"}'
```

The full page in French, with the response fields and every refusal the tool can return: [/mail/docs/reference/create_app_password](https://escouade.io/mail/docs/reference/create_app_password).