{ "email": "jsmith@example.com", "isSuppressed": true, "reason": "<string>" }
Always returns 200 for known and unknown emails to avoid enumeration.
Workspace-scoped API key from the credentials table
Suppression status