About
For the case where you hold a Microsoft refresh token for a mailbox and want to see the last few messages without setting up a mail client. The token is used for the request you make and is not stored. Use it only for accounts you are entitled to read.
How to use
Paste one line in the form email|refresh_token|client_id. An older four field format is accepted and its password field is ignored. Clear the input when you are finished, especially on a machine you share.
What a refresh token is doing in this exercise
Microsoft issues a refresh token when an account grants an application ongoing access. The token stands in for the sign in, which is why it needs the client ID it was issued against. Nothing here creates one, and nothing here can obtain one for an account that has not granted it. If you do not already hold the token, this page is not the tool you need.
The line you paste, field by field
The address identifies the mailbox, the refresh token authorises the read, and the client ID names the application the token belongs to. All three are required and the pipe characters carry no spaces. Credential exports often arrive in a four field variant with a password in the mix, and that field is skipped rather than used.
Accounts you are allowed to read
Mail is private, and possession of a credential is not the same as permission to use it. Read your own mailboxes and mailboxes you administer with the account holder's knowledge. If you are handling a list of credentials that came from somewhere else, this page is the wrong place to be, and so is the list.
FAQ
Is my token kept anywhere?
It is used for the request and not saved. What does persist is whatever is sitting in the input box in front of you, so clear it before you walk away.
The read failed. What is usually wrong?
An expired token first, a client ID that does not match the token second, and a malformed line third. The three fields are separated by pipes with no spaces around them.
Can I read a mailbox that is not mine?
No. Holding a token for someone else's account does not make reading it acceptable, and this page is not a way around that.
Is this a replacement for a mail client?
No. It lists recent messages so you can find something quickly. There is no folder navigation, no search, and no way to send.
Related tools
- Email tools
- Gmail Address Checker
Check up to ten Gmail addresses per run.
- SMTP Test
Open a short SMTP session and read the banner.
- MX Lookup
Mail servers and priorities for a domain.
- Email Header Analyzer
Parse Received hops and auth lines locally.