Public, token-authenticated endpoint that backs the unsubscribe link in every Agentic Flows notification email. No API key or account is required: authorization is carried entirely by the signed token, which encodes the Flow, the Send Email node, and the recipient address. Idempotent — removing an address that is no longer subscribed still succeeds. The token must have been issued for the {id} in the path.

📘

Endpoint base URL

Unlike the rest of the Flows endpoints, this endpoint is served under https://www.virustotal.com/ui rather than https://www.virustotal.com/api/v3. The full URL is POST https://www.virustotal.com/ui/flows/{id}/unsubscribe.

The unsubscribe link in each notification email has the form https://www.virustotal.com/gui/flows/{id}/unsubscribe/{token}. The last path segment is the token to send in the request body.

{
  "token": "<signed-unsubscribe-token>"
}