Upload a suppression list

POST /v1/suppressions

Upload emails, domains, phones, company numbers or title terms, raw or already hashed. Values are normalised and stored as SHA-256 hashes only. The list applies to every later count and order at no charge, and each count reports what it removed. The organisation accepts the Article 28 data processing agreement in force first (POST /v1/account/agreements, or dpa_accepted_version on this upload from a signed-in person); until then the answer is 403 dpa-acceptance-required and nothing is uploaded.

Request

Parameters

Body

Example request

curl -X POST "https://mydatahub.emailmovers.com/v1/suppressions" \
  -H "Authorization: Bearer $MYDATAHUB_API_KEY" \
  -H "Content-Type: application/json" \
  --data '{
  "name": "Existing customers",
  "kind": "email",
  "values": ["[email protected]", "[email protected]"]
}'

Responses

201: The saved list and what was read.

Headers: RateLimit, RateLimit-Policy, Location.

Example response

{
  "list": {
    "id": "sup_01JB4H7Q2V7XN3M9R6T1Y5W8ZA",
    "name": "Existing customers",
    "kind": "email",
    "source": "upload",
    "row_count": 1198,
    "created_at": "2026-09-20T14:02:00Z",
    "updated_at": "2026-09-20T14:02:00Z",
    "created_by": "usr_01JA0Q3V7XN3M9R6T1Y5W8ZAK8"
  },
  "rows_read": 1204,
  "rows_valid": 1198,
  "rows_skipped": [
    {
      "row": 17,
      "reason": "Not an email address."
    }
  ]
}

Errors

Every error is a problem object with a code and a next_step. Every response carries the RateLimit and RateLimit-Policy headers; see Rate limits.