Task-scoped email inboxes for AI agents: read mail, extract verification codes, and reply.
Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read from a real MCP initialize → tools/list handshake against the declared endpoint. No tool was ever invoked — tools/list is the read-only introspection call the protocol defines for this. It reflects what the server advertised at that moment; a hosted endpoint is not pinned to any version and can change without notice.
https://machineinbox.com/mcp11 tools · 864msget_service_infoRead the Machine Inbox service instructions: pricing, payment rails, endpoints, and limits.Read the Machine Inbox service instructions: pricing, payment rails, endpoints, and limits.
No input schema was published for this tool.
create_inboxRequest a new paid inbox. Buying requires an out-of-band payment (Stripe MPP or x402 USDC on Base); this tool returns the live HTTP 402 payment challenge plus exact instructions to complete the purchase. Standard inbox: $2.00.Request a new paid inbox. Buying requires an out-of-band payment (Stripe MPP or x402 USDC on Base); this tool returns the live HTTP 402 payment challenge plus exact instructions to complete the purchase. Standard inbox: $2.00.
| Parameter | Type | Description |
|---|---|---|
| idempotency_key | string | High-entropy key to bind the eventual paid retry to this request. |
get_inboxRead an inbox: address, status, expiry, limits, and usage.Read an inbox: address, status, expiry, limits, and usage.
| Parameter | Type | Description |
|---|---|---|
| token | string | Mailbox bearer token (mi_live_...) returned when the inbox was purchased. Optional when the MCP request itself carries Authorization: Bearer. |
| inbox_id* | string | Inbox UUID. |
list_messagesList messages in an inbox, newest first. Pass after=<newest createdAt seen> to poll for only new mail.List messages in an inbox, newest first. Pass after=<newest createdAt seen> to poll for only new mail.
| Parameter | Type | Description |
|---|---|---|
| token | string | Mailbox bearer token (mi_live_...) returned when the inbox was purchased. Optional when the MCP request itself carries Authorization: Bearer. |
| inbox_id* | string | Inbox UUID. |
| limit | integer | — |
| after | string | ISO date-time; only messages created after this instant. |
| before | string | ISO date-time cursor for older mail. |
get_messageFetch one message with parsed text, HTML, and attachment download URLs.Fetch one message with parsed text, HTML, and attachment download URLs.
| Parameter | Type | Description |
|---|---|---|
| token | string | Mailbox bearer token (mi_live_...) returned when the inbox was purchased. Optional when the MCP request itself carries Authorization: Bearer. |
| inbox_id* | string | Inbox UUID. |
| message_id* | string | — |
get_verification_codeExtract the newest one-time verification code or confirmation link from inbound mail. Ideal for signup and login flows.Extract the newest one-time verification code or confirmation link from inbound mail. Ideal for signup and login flows.
| Parameter | Type | Description |
|---|---|---|
| token | string | Mailbox bearer token (mi_live_...) returned when the inbox was purchased. Optional when the MCP request itself carries Authorization: Bearer. |
| inbox_id* | string | Inbox UUID. |
| sender | string | Only consider senders whose address contains this substring. |
reply_to_messageSend an included plain-text reply to the authenticated sender of an inbound message.Send an included plain-text reply to the authenticated sender of an inbound message.
| Parameter | Type | Description |
|---|---|---|
| token | string | Mailbox bearer token (mi_live_...) returned when the inbox was purchased. Optional when the MCP request itself carries Authorization: Bearer. |
| inbox_id* | string | Inbox UUID. |
| message_id* | string | — |
| text* | string | — |
| idempotency_key* | string | New unique key for this reply; reuse only to retry the identical reply. |
set_webhookRegister or replace the inbox webhook: an HMAC-signed POST fires on every inbound message with metadata, extracted verification codes, and injection risk (never the body). Returns the signing secret.Register or replace the inbox webhook: an HMAC-signed POST fires on every inbound message with metadata, extracted verification codes, and injection risk (never the body). Returns the signing secret.
| Parameter | Type | Description |
|---|---|---|
| token | string | Mailbox bearer token (mi_live_...) returned when the inbox was purchased. Optional when the MCP request itself carries Authorization: Bearer. |
| inbox_id* | string | Inbox UUID. |
| url* | string | Public https URL that receives the signed POST. |
get_webhookRead the inbox webhook state: URL, delivery counters, and whether it is disabled. The secret is only returned by set_webhook.Read the inbox webhook state: URL, delivery counters, and whether it is disabled. The secret is only returned by set_webhook.
| Parameter | Type | Description |
|---|---|---|
| token | string | Mailbox bearer token (mi_live_...) returned when the inbox was purchased. Optional when the MCP request itself carries Authorization: Bearer. |
| inbox_id* | string | Inbox UUID. |
delete_webhookprivilegedRemove the inbox webhook.Remove the inbox webhook.
| Parameter | Type | Description |
|---|---|---|
| token | string | Mailbox bearer token (mi_live_...) returned when the inbox was purchased. Optional when the MCP request itself carries Authorization: Bearer. |
| inbox_id* | string | Inbox UUID. |
delete_inboxprivilegedDelete an inbox: revokes the token and erases stored mail.Delete an inbox: revokes the token and erases stored mail.
| Parameter | Type | Description |
|---|---|---|
| token | string | Mailbox bearer token (mi_live_...) returned when the inbox was purchased. Optional when the MCP request itself carries Authorization: Bearer. |
| inbox_id* | string | Inbox UUID. |
11 of 11 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Task-scoped email inboxes for AI agents: read mail, extract verification codes, and reply.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.