1. Conduid
  2. Security
  3. Agent Inbox
MCP server · Security

Agent Inbox

Give any AI agent a disposable email inbox in one tool call. MCP server for email verification, auth flows, and testing.

44Fair

Scored 7 hours ago · breakdown

About Agent Inbox

Agent Inbox is an MCP server published by gsd-build in the Security category: give any AI agent a disposable email inbox in one tool call. MCP server for email verification, auth flows, and testing.

The repository has 62 stars and 5 forks, with the last commit 6 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/gsd-build/agent-inbox

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Agent Inbox

Powered by Claude · Grounded in docs

I know everything about Agent Inbox. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 4 hours ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • !Tests presentNo tests found. Behaviour changes may go unnoticed between versions.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.

1 check has not been run yet.

README

agent-inbox

Give any AI agent a disposable email inbox in one tool call.

Install

npx gsd-agent-inbox

The interactive installer auto-detects your AI coding agents (Claude Code, Codex CLI, Cursor, Gemini CLI, Windsurf), configures the MCP server, and installs the optional skill for each.

When launched by an MCP client (non-TTY), it starts the MCP server normally. When you run it from a terminal, you get the installer.

What it does

An MCP server that creates real, temporary email addresses on demand. Your agent can sign up for services, receive confirmation emails, extract verification links, and clean up — without you lifting a finger.

No API keys. No accounts. No configuration. Works with any email-sending service — Supabase, Resend, SendGrid, Postmark, AWS SES, whatever.

The problem

AI agents hit a wall when a service requires email verification. They can fill out a sign-up form, but they can't receive the confirmation email. So they stop and ask you to do it.

The fix

Agent: create_inbox({ prefix: "signup", name: "test" })
→ signup-1712345678@somedomain.com (name: test)

Agent: [fills sign-up form with that email]

Agent: verify_email({ address: "test", subject_contains: "confirm" })
→ Email verified successfully!
  Verification URL: https://myapp.supabase.co/auth/v1/verify?token=abc123
  HTTP Status: 200

Agent: delete_inbox({ address: "test" })
→ Done.

Manual setup

If you prefer to configure manually instead of using the installer:

Claude Code

claude mcp add agent-inbox -- npx -y gsd-agent-inbox

Or add to ~/.claude/settings.json:

{
  "mcpServers": {
    "agent-inbox": {
      "command": "npx",
      "args": ["-y", "gsd-agent-inbox"]
    }
  }
}

Codex CLI

Add to ~/.codex/config.toml:

[mcp_servers.agent-inbox]
command = "npx"
args = ["-y", "gsd-agent-inbox"]
env = { }

Cursor

Add to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "agent-inbox": {
      "command": "npx",
      "args": ["-y", "gsd-agent-inbox"]
    }
  }
}

Gemini CLI

Add to ~/.gemini/settings.json:

{
  "mcpServers": {
    "agent-inbox": {
      "command": "npx",
      "args": ["-y", "gsd-agent-inbox"]
    }
  }
}

Windsurf

Add to ~/.codeium/windsurf/mcp_config.json:

{
  "mcpServers": {
    "agent-inbox": {
      "command": "npx",
      "args": ["-y", "gsd-agent-inbox"]
    }
  }
}

Any other MCP client

Any client that supports stdio transport:

{
  "command": "npx",
  "args": ["-y", "gsd-agent-inbox"]
}

Build from source

git clone https://github.com/gsd-build/agent-inbox.git
cd agent-inbox
npm install
npm run build
npm start

Tools

Tool What it does
create_inbox Spin up a temporary email address. Optional prefix for readability, optional name for easy reference.
check_inbox Check for messages. Returns subjects, bodies, and auto-extracted verification links.
wait_for_email Poll until a matching email arrives. Filters by sender and subject. Auto-retries with backoff.
verify_email One-shot verification: polls for confirmation email, extracts the link, visits it via HTTP. Three steps in one tool call.
list_inboxes Show all active inboxes with names and providers.
delete_inbox Destroy an inbox and its backing account.

Named inboxes

Give inboxes a name for easy reference across multiple tool calls:

create_inbox({ prefix: "signup", name: "main" })
wait_for_email({ address: "main", subject_contains: "confirm" })
delete_inbox({ address: "main" })

Skill

The installer can optionally add a skill file that teaches your AI agent when and how to use agent-inbox — so it reaches for the inbox tools automatically when it encounters auth flows, email verification, or sign-up testing.

To install the skill manually:

mkdir -p ~/.claude/skills/agent-inbox
curl -fsSL https://raw.githubusercontent.com/gsd-build/agent-inbox/main/skill/SKILL.md \
  -o ~/.claude/skills/agent-inbox/SKILL.md

How it works

Uses mail.tm as the primary provider with automatic fallback to 1secmail if mail.tm is down. No API keys or accounts required.

  • Fallback providers — if mail.tm fails, 1secmail kicks in automatically
  • Cleanup on exit — inboxes are deleted when the MCP server shuts down (SIGINT/SIGTERM)
  • Smart polling — wait_for_email retries with backoff (3s → 5s → 10s → 15s)
  • Link extraction — confirmation/verification URLs auto-detected via keyword matching

Limitations

  • Some services block disposable email domains. If sign-up is rejected, try a different service or provider.
  • Inboxes don't survive server restarts (in-memory only).
  • Text and HTML bodies only — no attachment support.

License

MIT

README fetched from the repository 4 hours ago. The original is authoritative.

Questions

About Agent Inbox

How do I install Agent Inbox?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Agent Inbox safe to use with an AI agent?

Its trust score is 44 out of 100 (fair). It passes 4 of the 5 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Agent Inbox still maintained?

The last commit was 6 months ago and 1 open issues. That's long enough that you should check whether the maintainer is responding to issues before depending on it.