skeletal inbox/message API for client