Stannp
MARKETING · MARKETING
Postcards, letters, campaigns, and recipients posted from the account they connected.
Connecting Stannp in practice
Stannp prints and posts real mail, so a create call returns a `cost` and spends money unless you send `test=true` — there is no sandbox host, only a flag. The key travels as an `api_key` query parameter or as the HTTP basic username, and Stannp warns that a plain HTTP request "could suspend your API key".
Scopes that draw scrutiny
api_key (query parameter or basic-auth username)One account-wide key with no scopes, accepted in the URL. The same key that reads reporting can create campaigns that physically post letters and postcards.test=trueNot a permission but the only guard between a call and real postage, since test and live share one base URL and one key.
Rate limits
- "The majority of our API’s allow up to 300 requests per minute."
- Every response carries X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset (seconds until reset).
- The worked example in the same documentation shows X-RateLimit-Limit as 200 rather than 300, so read the header rather than assuming the prose figure.
- A duplicate request carrying an idempotency key returns 409 rather than replaying the original response.
Worth knowing
- The base URL is region-specific — https://api-eu1.stannp.com/v1/ — so the host is part of your account configuration, not a constant.
- HTTPS is not merely recommended: requests over HTTP "will fail and could suspend your API key".
- Idempotency protects you from double-posting but signals it as a 409, so retry logic that treats 409 as a conflict to resolve will get it wrong.
- Because there is no separate test host, a misconfigured environment variable is the difference between a no-op and a printed mailing.
Checked against Rate limit (2026-09-29), Direct mail API guide (2026-09-29)
What an agent can do
Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.
Often connected alongside
Put Stannp behind one governed endpoint.
Same permissions, same audit trail, whatever else you connect next.