Let your app read its mail.

import { verifySignature } from './verify-webhook'; // the check on /product/webhooks

export async function POST(req: Request) {
  const body = await req.text();
  if (!verifySignature(req.headers, body)) return new Response('Invalid signature', { status: 400 });

  const event = JSON.parse(body);
  if (event.type === 'email.received') {
    // The event carries metadata only. Fetch the body and attachments.
    const res = await fetch(`https://api.refiremail.com/emails/receiving/${event.data.email_id}`, {
      headers: { Authorization: `Bearer ${process.env.REFIREMAIL_API_KEY}` },
    });
    await openTicket(await res.json());
  }
  return new Response(null, { status: 204 });
}

{
  "type": "email.received",
  "created_at": "2026-09-22T05:48:12.640Z",
  "data": {
    "email_id": "01a0c7a8-5293-7f29-8d95-3f48f1a09f76",
    "created_at": "2026-09-22T05:48:12.307Z",
    "from": "[email protected]",
    "to": ["[email protected]"],
    "cc": [],
    "bcc": [],
    "received_for": ["[email protected]"],
    "message_id": "<[email protected]>",
    "subject": "Re: Order #1043 has shipped",
    "attachments": [
      {
        "id": "01a0c7a8-53e0-70be-ac38-98d190f9ebda",
        "filename": "parcel.jpg",
        "content_type": "image/jpeg",
        "content_disposition": "attachment",
        "content_id": null
      }
    ]
  }
}