protogrid

Search / com.machineinbox/machine-inbox

machine-inbox

R0· no sign-in

Task-scoped email inboxes for AI agents: read mail, extract verification codes, and reply.

v0.1.0 · active · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality79good
Trust79of 100
Uptime, 30 days96%
Latency p50386 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "machine-inbox": {
      "type": "http",
      "url": "https://machineinbox.com/mcp"
    }
  }
}
claude mcp add --transport http machine-inbox https://machineinbox.com/mcp
[mcp_servers.machine-inbox]
url = "https://machineinbox.com/mcp"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "machine-inbox": {
      "type": "remote",
      "url": "https://machineinbox.com/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "machine-inbox": {
      "type": "http",
      "url": "https://machineinbox.com/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=machine-inbox&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vbWFjaGluZWluYm94LmNvbS9tY3AifQ%3D%3D"
}
{
  "servers": {
    "machine-inbox": {
      "type": "http",
      "url": "https://machineinbox.com/mcp"
    }
  }
}
{
  "mcpServers": {
    "machine-inbox": {
      "httpUrl": "https://machineinbox.com/mcp"
    }
  }
}
extensions:
  "machine-inbox":
    enabled: true
    name: "machine-inbox"
    type: streamable_http
    uri: "https://machineinbox.com/mcp"
    timeout: 300

Quality 79 / 100good

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene71 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • fail
    tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
  • fail
    tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: get_webhook (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); list_messages (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_message (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
  • pass
    tools.token_costabout 1,328 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability100 · weight 15
  • pass
    stability.changesno tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

11 tools, about 1,328 tokens to load them all · tool set d66f06f76518 · checked 2026-10-20 15:57 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 79 / 100

no-repository
provenance55
liveness98
freshness85
hygiene80

+dns-namespace +website +reachable +uptime-96% ~updated-63d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://machineinbox.com/mcp streamable-httpnoneyes96%386 ms2025-06-182026-10-20

Tools (11)

create_inboxRequest a new paid inbox. Buying requires an out-of-band payment (Stripe MPP or x402 USDC on Base); this tool returns the live HTTP 402 payment challenge plus exact instructions to complete the purchase. Standard inbox: $2.00.
delete_inboxDelete an inbox: revokes the token and erases stored mail.
delete_webhookRemove the inbox webhook.
get_inboxRead an inbox: address, status, expiry, limits, and usage.
get_messageFetch one message with parsed text, HTML, and attachment download URLs.
get_service_infoRead the Machine Inbox service instructions: pricing, payment rails, endpoints, and limits.
get_verification_codeExtract the newest one-time verification code or confirmation link from inbound mail. Ideal for signup and login flows.
get_webhookRead the inbox webhook state: URL, delivery counters, and whether it is disabled. The secret is only returned by set_webhook.
list_messagesList messages in an inbox, newest first. Pass after=<newest createdAt seen> to poll for only new mail.
reply_to_messageSend an included plain-text reply to the authenticated sender of an inbound message.
set_webhookRegister or replace the inbox webhook: an HMAC-signed POST fires on every inbound message with metadata, extracted verification codes, and injection risk (never the body). Returns the signing secret.

Schemas: list_tools.

Similar MCP servers

Official server.json
{
  "name": "com.machineinbox/machine-inbox",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
  "remotes": [
    {
      "url": "https://machineinbox.com/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.1.0",
  "websiteUrl": "https://machineinbox.com",
  "description": "Task-scoped email inboxes for AI agents: read mail, extract verification codes, and reply."
}