%email% — The sender's email address.
%fromname% — The recipient's name.
%subject% — The subject of the sender's email.
%acct% — The recipient's username.
%msgid% — The message ID of the sender's email.
%headers% — The heading information of the sender's email.
%if can_verify_web% and %endif% — These tags enclose a section that allows BoxTrapper to verify senders through a web link.
Yes, those values are in-fact limited to the confirmation messages. Thank you for further explaining your request. The whitelists, blacklists, and ignore lists are limited to messages, subjects, or email addresses for which you wish to filter. Feel free to open a feature request for additional functionality: