MinuteMail

io.github.minutemailcoPublished by GitHub account minutemailcov1.1.3Updated Oct 24, 2026

Ephemeral mailboxes and a mock OAuth IdP for testing email and auth flows — 39 API-driven tools

VerifiedStreamable HTTPWeb executableDeveloper Tools Communication & Collaboration Security & Monitoring

Server details

Identifier: io.github.minutemailco/mcp-server
Transport: Streamable HTTP
Runtime: Web executable
Trust: Verified
Published: Sep 16, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified the GitHub account minutemailco for this listing. That does not show the account is the product's maker.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.minutemailco%2Fmcp-server.svg)](https://sourceweft.com/mcp/io.github.minutemailco%2Fmcp-server?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

Remote MCP server for MinuteMail that lets an assistant create ephemeral mailboxes, read test emails, and manage mock OAuth identities for testing email andauth

What you can do: Create, list, fetch and delete temporary mailboxes, including bulk deletion and archived mailbox recovery or permanent removal. List, read, inject simulated inbound emails and delete them, with attachment listing, adding, downloading and deleting. Register, verify and delete custom domains and check their DNS verification status. Manage team members and invitations, including adding members directly and revoking invites. Create and manage mock identities and OAuth clients, updating profile fields, activation, email verification and custom claims, and rotating client secrets.
When to use it: Useful when an assistant needs to test email-driven flows such as sign-up verification or password reset, or to exercise OAuth and identity flows against mock identities without touching real inboxes or a production identity provider.
Requirements: A remote Streamable HTTP endpoint; no local runtime needed. A MinuteMail account and an API key sent as the Authorization header in Bearer form. Network access to the hosted service; scopes and quotas are enforced by the MinuteMail API.

Before you install

The API key is forwarded to the MinuteMail API and grants access to the tenant's mailboxes, domains, team and identities. Many tools write or delete data, including bulk mailbox and email deletion and permanent deletion of archived mailboxes. OAuth client secrets are returned in plaintext once at creation and on rotation. Team invitations trigger emails sent by the team service.

Installation

In SourceWeft

Open MinuteMail in the dashboard and add it to a workspace.
Connect Authorization token credentials. They are stored privately and never shown on public pages.
Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.minutemailco%2Fmcp-server/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "minutemail": {
      "type": "http",
      "url": "https://mcp.minutemail.co/mcp",
      "headers": {
        "Authorization": "Bearer <YOUR_TOKEN>"
      }
    }
  }
}

README

MinuteMail MCP Server

MinuteMail as MCP (Model Context Protocol) tools: let AI agents and MCP clients operate ephemeral mailboxes, emails, attachments, custom domains, teams, and mock OAuth identities for testing email and auth flows.

[License: MIT] [Docker] [smithery badge]

Endpoint: https://mcp.minutemail.co/mcp (Streamable HTTP, protocol revision 2025-06-18)
Auth: your MinuteMail API key (Bearer mmak_...). The server is a stateless proxy — it holds no credentials, sessions, or local storage of its own; your key is forwarded verbatim to the MinuteMail API, where scopes and quotas are enforced. All state (mailboxes, mails, identities) lives in the MinuteMail platform behind it.
Also listed in the official MCP Registry as io.github.minutemailco/mcp-server and on Smithery.

Get an API key

Sign up at minutemail.co (free during early access)
Create an API key in the dashboard
Configure your MCP client to send it as the Authorization header:

Authorization: Bearer mmak_XXXXXXXX

Connect your MCP client

Claude Code / Claude Desktop / Cursor / any Streamable HTTP client:

URL: https://mcp.minutemail.co/mcp
Header: Authorization: Bearer mmak_...

Claude Code CLI:

bash

claude mcp add --transport http minutemail https://mcp.minutemail.co/mcp \  --header "Authorization: Bearer mmak_XXXXXXXX"

claude mcp add --transport http minutemail https://mcp.minutemail.co/mcp \  --header "Authorization: Bearer mmak_XXXXXXXX"

Claude Desktop / clients with an mcpServers JSON config (e.g. claude_desktop_config.json / ~/.cursor/mcp.json):

json

{  "mcpServers": {    "minutemail": {      "type": "http",      "url": "https://mcp.minutemail.co/mcp",      "headers": {        "Authorization": "Bearer mmak_XXXXXXXX"      }    }  }}

{  "mcpServers": {    "minutemail": {      "type": "http",      "url": "https://mcp.minutemail.co/mcp",      "headers": {        "Authorization": "Bearer mmak_XXXXXXXX"      }    }  }}

Some clients (older Claude Desktop builds) only support local stdio servers in their JSON config. If yours rejects type: "http", use the built-in remote/connectors UI with the URL and header above, or run mcp-remote as a stdio bridge:

json

{  "mcpServers": {    "minutemail": {      "command": "npx",      "args": [        "mcp-remote",        "https://mcp.minutemail.co/mcp",        "--header",        "Authorization: Bearer mmak_XXXXXXXX"      ]    }  }}

{  "mcpServers": {    "minutemail": {      "command": "npx",      "args": [        "mcp-remote",        "https://mcp.minutemail.co/mcp",        "--header",        "Authorization: Bearer mmak_XXXXXXXX"      ]    }  }}

For a guided walkthrough, see the docs: docs.minutemail.co/mcp/getting-started.

Raw JSON-RPC (what the clients do under the hood):

bash

curl -s https://mcp.minutemail.co/mcp \  -H 'Authorization: Bearer mmak_XXXXXXXX' \  -H 'Content-Type: application/json' \  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call",       "params":{"name":"mailboxes.create","arguments":{"expiresIn":30}}}'

curl -s https://mcp.minutemail.co/mcp \  -H 'Authorization: Bearer mmak_XXXXXXXX' \  -H 'Content-Type: application/json' \  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call",       "params":{"name":"mailboxes.create","arguments":{"expiresIn":30}}}'

Tools (39)

Every tool maps 1:1 to a route of the MinuteMail API. All calls require the Bearer API key; write operations require the matching scope (mailboxes, domains, team, identities).

Mailboxes (`mailboxes` scope)

Tool	Purpose
`mailboxes.list`	List active mailboxes (optional exact-address lookup)
`mailboxes.create`	Create a mailbox (optional TTL, domain, recovery tag)
`mailboxes.get` / `mailboxes.delete`	Fetch / delete one mailbox
`mailboxes.delete_bulk`	Delete several mailboxes by ID
`mails.list` / `mails.inject`	List mails / simulate an inbound email (multipart, with attachments)
`mails.get` / `mails.delete` / `mails.delete_bulk`	Read / delete mails
`attachments.list` / `attachments.add` / `attachments.get` / `attachments.delete` / `attachments.delete_bulk`	Attachment CRUD

Archived mailboxes (`mailboxes` scope)

archived.list, archived.get, archived.delete, archived.reactivate.

Custom domains (`domains` scope)

domains.list, domains.register, domains.verify, domains.delete.

Team (`team` scope)

team.members.list, team.members.add, team.members.get, team.members.delete, team.invitations.create, team.invitations.list, team.invitations.delete.

Mock identities & OAuth clients (`identities` scope)

identities.list, identities.create, identities.update, identities.get, identities.delete, oauth.clients.list, oauth.clients.create, oauth.clients.get, oauth.clients.delete, oauth.clients.rotate_secret. identities.update patches profile fields, isActive (activate/deactivate), emailVerified (drives the email_verified claim), and custom claims merged into issued ID tokens and userinfo responses.

Tool results are returned as MCP text content carrying the API's JSON response. Non-2xx responses become isError: true results with the HTTP status and body (401 invalid key, 403 scope/domain, 429 quota with remaining count, 502 upstream down).

Typical agent workflow

mailboxes.create (expiresIn 30)        ↓your app under test sends a verification email to the mailbox address        ↓mails.list → mails.get (extract the code / link)        ↓assert the flow completed — the mailbox expires on its own

mailboxes.create (expiresIn 30)        ↓your app under test sends a verification email to the mailbox address        ↓mails.list → mails.get (extract the code / link)        ↓assert the flow completed — the mailbox expires on its own

Self-hosting

The server is a single static Go binary in a scratch image (~7 MB):

bash

docker run -p 8080:8080 \  -e API_BASE=https://api.minutemail.co \  ghcr.io/minutemailco/mcp-server:latest# or from Docker Hub:docker run -p 8080:8080 \  -e API_BASE=https://api.minutemail.co \  chrptvn/minutemail-mcp:latest

docker run -p 8080:8080 \  -e API_BASE=https://api.minutemail.co \  ghcr.io/minutemailco/mcp-server:latest# or from Docker Hub:docker run -p 8080:8080 \  -e API_BASE=https://api.minutemail.co \  chrptvn/minutemail-mcp:latest

Self-hosting still requires MinuteMail API keys — the server is a stateless proxy over the hosted API, not a standalone implementation. It keeps no sessions or local data; every mailbox, mail, and identity is stored by the MinuteMail API it forwards to.

Env var	Default	Purpose
`PORT`	`8080`	Listen port
`API_BASE`	`http://api-gateway:80`	MinuteMail API base URL (use `https://api.minutemail.co` outside the cluster)
`LOG_LEVEL`	`warn`	`debug`/`info`/`warn`/`error`
`LOG_FORMAT`	`json`	`json`/`text`
`PROFILE`	`dev`	Deployment profile label

GET /health for liveness; GET /metrics for Prometheus counters. API-key management is not exposed via MCP — manage keys from the web app.

Development

Go 1.23, stdlib plus prometheus/client_golang.

License

MIT — © MinuteMail.co

Source: README.md at commit 7a24b24

Tools

mailboxes.list

List mailboxes

List the tenant's active mailboxes (owner is derived from the API key). Optionally look up a single mailbox by exact address.

Parametersaddress

mailboxes.create

Create mailbox

Create a new temporary mailbox. The domain defaults to the tenant's default domain; the owner is always the API key's owner.

ParameterstagdomainexpiresInrecoverablenoExpiration

mailboxes.get

Get mailbox

Fetch a single mailbox by ID.

ParametersmailboxIdrequired

mailboxes.delete

Delete mailbox

Delete a mailbox and its contents by ID.

ParametersmailboxIdrequired

mailboxes.delete_bulk

Bulk delete mailboxes

Delete several mailboxes at once by ID.

Parametersidsrequired

mails.list

List mails

List the emails in a mailbox, newest first.

ParametersmailboxIdrequired

mails.inject

Inject test mail

Inject a simulated inbound email into a mailbox (multipart upload). No external mail is sent; use this to simulate inbound mail for flow testing.

ParametersbodyrequiredsenderrequiredsubjectrequiredexpiresInmailboxIdrequiredattachments

mails.get

Get mail

Fetch a single email by ID, including body and attachment metadata.

ParametersmailIdrequiredmailboxIdrequired

mails.delete

Delete mail

Delete a single email.

ParametersmailIdrequiredmailboxIdrequired

mails.delete_bulk

Bulk delete mails

Delete several emails of one mailbox at once.

ParametersidsrequiredmailboxIdrequired

attachments.list

List attachments

List the attachments of an email (metadata only).

ParametersmailIdrequiredmailboxIdrequired

attachments.add

Add attachment

Attach a file to a test-injected email (base64 payload).

ParametersdatarequiredmailIdrequiredfilenamerequiredexpiresInmailboxIdrequiredsizeBytescontentType

attachments.get

Get attachment

Download an attachment. The file contents are returned base64-encoded in the JSON "data" field.

ParametersmailIdrequiredmailboxIdrequiredattachmentIdrequired

attachments.delete

Delete attachment

Delete a single attachment.

ParametersmailIdrequiredmailboxIdrequiredattachmentIdrequired

attachments.delete_bulk

Bulk delete attachments

Delete several attachments of one email at once.

ParametersidsrequiredmailIdrequiredmailboxIdrequired

archived.list

List archived mailboxes

List the tenant's archived (expired but recoverable) mailboxes.

Takes no parameters.

archived.get

Get archived mailbox

Fetch a single archived mailbox by ID.

ParametersmailboxIdrequired

archived.delete

Delete archived mailbox

Permanently delete an archived mailbox.

ParametersmailboxIdrequired

archived.reactivate

Reactivate archived mailbox

Reactivate an archived mailbox back to active state.

ParametersexpiresInmailboxIdrequired

domains.list

List domains

List the tenant's custom domains with their DNS verification status.

Takes no parameters.

domains.register

Parametersnamerequired

domains.verify

Verify domain

Trigger DNS verification (TXT + MX) of a registered domain.

ParametersdomainIdrequired

domains.delete

Delete domain

Delete a registered custom domain.

ParametersdomainIdrequired

team.members.list

List team members

List the tenant's team members.

Takes no parameters.

team.members.add

Add team member

Add a team member directly (no invitation flow).

Parametersemailrequiredstatusrequireduser_idrequiredusernamerequired

team.members.get

Get team member

Fetch a single team member by ID.

ParametersmemberIdrequired

team.members.delete

Delete team member

Remove a team member.

ParametersmemberIdrequired

team.invitations.create

Create invitation

Create a team invitation for an email address (SMTP invite is sent by the team service).

Parametersemailrequired

team.invitations.list

List invitations

List the tenant's team invitations.

Takes no parameters.

team.invitations.delete

Delete invitation

Revoke a team invitation.

ParametersinvitationIdrequired

identities.list

List identities

List the tenant's mock identities, optionally filtered by OAuth client or mailbox address.

ParametersclientIdmailboxAddress

identities.create

Create identity

Create a mock identity bound to a mailbox for OAuth flow testing.

ParametersnameclaimsclientIdrequiredusernameavatarUrlemailVerifiedmailboxAddressrequired

identities.get

Get identity

Fetch a single mock identity by ID.

ParametersidentityIdrequired

identities.update

Update identity

Update a mock identity: profile fields, isActive (activate/deactivate), emailVerified, and custom claims merged into the ID token and userinfo.

ParametersnameclaimsisActiveusernameavatarUrlidentityIdrequiredemailVerified

identities.delete

Delete identity

Delete a mock identity.

ParametersidentityIdrequired

oauth.clients.list

List OAuth clients

List the tenant's OAuth clients for mock identity testing.

Takes no parameters.

oauth.clients.create

Create OAuth client

ParametersnamerequiredproviderTyperedirectUrisrequiredproviderLabel

oauth.clients.get

Get OAuth client

Fetch a single OAuth client by its public client ID.

ParametersclientIdrequired

oauth.clients.delete

Delete OAuth client

Delete an OAuth client by its public client ID.

ParametersclientIdrequired

oauth.clients.rotate_secret

Rotate client secret

Rotate an OAuth client's secret. The new plaintext secret is returned once.

ParametersclientIdrequired

Version history

v1.1.3LatestSep 16, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 daysRequired25 pts
Auth declaredRequired10 pts
Tools listedRequired15 pts
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts

MinuteMail

Overview

Installation

In SourceWeft

Use with an agent

Other MCP clients

README

MinuteMail MCP Server

Get an API key

Connect your MCP client

Tools (39)

Mailboxes (mailboxes scope)

Archived mailboxes (mailboxes scope)

Custom domains (domains scope)

Team (team scope)

Mock identities & OAuth clients (identities scope)

Typical agent workflow

Self-hosting

Development

License

Tools

mailboxes.list

mailboxes.create

mailboxes.get

mailboxes.delete

mailboxes.delete_bulk

mails.list

mails.inject

mails.get

mails.delete

mails.delete_bulk

attachments.list

attachments.add

attachments.get

attachments.delete

attachments.delete_bulk

archived.list

archived.get

archived.delete

archived.reactivate

domains.list

domains.register

domains.verify

domains.delete

team.members.list

team.members.add

team.members.get

team.members.delete

team.invitations.create

team.invitations.list

team.invitations.delete

identities.list

identities.create

identities.get

identities.update

identities.delete

oauth.clients.list

oauth.clients.create

oauth.clients.get

oauth.clients.delete

oauth.clients.rotate_secret

Version history

Score

Mailboxes (`mailboxes` scope)

Archived mailboxes (`mailboxes` scope)

Custom domains (`domains` scope)

Team (`team` scope)

Mock identities & OAuth clients (`identities` scope)