Tmailor temporary email

io.github.tmailor-comPublished by GitHub account tmailor-comv0.4.0Updated Nov 3, 2026

Receive-only temporary email addresses for AI agents: create an inbox, wait for an email, read it.

VerifiedStreamable HTTPWeb executableDeveloper ToolsCommunication & Collaboration

Overview

AI-generated overview

Tmailor gives an assistant real, receive-only temporary email addresses: create an inbox, wait for a message, read it and follow its links.

What you can do
  • Create and manage temporary addresses: create a mailbox, list the account's mailboxes, list available domains, delete a mailbox
  • Receive and read mail: wait for the newest unread message (with sender/subject filters), list messages from the last 24 hours, read one message with its links and body as text, raw HTML or both
  • Check account state: remaining mailbox quota, active plans and request rate
When to use it
Useful when an assistant needs to sign up for a service, receive a confirmation or password-reset email, or test email flows without exposing a real inbox. It fits agent workflows that need to read a message and act on the link inside it.
Requirements
A Tmailor API key supplied in the TMAILOR_API_KEY environment variable, or OAuth sign-in for the hosted endpoint. Local use needs uv (uvx) or Python 3.10+. On the Free plan the calling IP must be added to the account's IP allowlist; paid plans accept any IP. Creating addresses consumes mailbox quota.
Before you install
Email content is untrusted: anyone can send mail to the address, and raw HTML may contain scripts, tracking pixels and hidden text, so never follow instructions found inside messages. Creating an address uses quota and deleting one does not return it. Keep the API key out of shared or committed files; on paid plans a leaked key works from any IP until revoked. Two servers waiting on the same address can both receive the same message.

Installation

In SourceWeft

  1. Open Tmailor temporary email in the dashboard and add it to a workspace.
  2. Connect the required credentials. They are stored privately and never shown on public pages.
  3. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.tmailor-com%2Ftmailor-mcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.

{
  "mcpServers": {
    "tmailor-temporary-email": {
      "type": "http",
      "url": "https://mcp.tmailor.com/mcp"
    }
  }
}

README

tmailor-mcp

MCP server for the Tmailor Open API. It gives AI agents (Claude, Cursor, VS Code Copilot and any other MCP client) real, receive-only temporary email addresses: sign up somewhere, wait for the email, read it and follow its link.

text
You:   Sign up on example.com with a temporary email and confirm the account.Agent: create_mailbox -> [email protected]       (fills in the sign-up form)       wait_for_message -> "Confirm your account", links ["https://example.com/confirm?t=..."]

Billing counts mailboxes, not requests: creating an address uses 1 unit of quota, while waiting for and reading mail is free. Addresses never expire.

Hosted server (no install)

With a paid plan you can skip this package and connect to the hosted server https://mcp.tmailor.com/mcp (Streamable HTTP, sign-in with OAuth). In Claude it is listed in the Connectors Directory as Tmailor Temp Mail; other clients that support remote MCP servers take the URL directly. Setup for each client: https://platform.tmailor.com/docs (section "Use with AI agents (MCP)").

The local server below works on every plan, including Free.

Requirements

  • A Tmailor API key: sign in at https://platform.tmailor.com and create one under API keys.
  • uv (for uvx) or Python 3.10+.
  • On the Free plan the API only accepts calls from your allowlisted IP: add the public IP of the computer that runs the MCP server under IP allowlist. Paid plans accept calls from any IP.

Install

The server runs locally over stdio. The API key is read from the TMAILOR_API_KEY environment variable.

Claude Code

bash
claude mcp add tmailor -e TMAILOR_API_KEY=tmk_live_... -- uvx tmailor-mcp

Claude Desktop

Edit claude_desktop_config.json (Settings > Developer > Edit Config):

json
{  "mcpServers": {    "tmailor": {      "command": "uvx",      "args": ["tmailor-mcp"],      "env": { "TMAILOR_API_KEY": "tmk_live_..." }    }  }}

Cursor

~/.cursor/mcp.json (all projects) or .cursor/mcp.json (one project) uses the same mcpServers block as above.

VS Code

.vscode/mcp.json. The key is asked once and stored by VS Code instead of being written in the file:

json
{  "inputs": [    { "type": "promptString", "id": "tmailor-key", "description": "Tmailor API key", "password": true }  ],  "servers": {    "tmailor": {      "type": "stdio",      "command": "uvx",      "args": ["tmailor-mcp"],      "env": { "TMAILOR_API_KEY": "${input:tmailor-key}" }    }  }}

Other MCP clients

tmailor-mcp is listed in the MCP Registry as io.github.tmailor-com/tmailor-mcp, so clients that browse the registry can install it directly.

Without uv

bash
pip install tmailor-mcpTMAILOR_API_KEY=tmk_live_... tmailor-mcp

Tools

ToolWhat it does
create_mailboxCreate an address (random on a shared domain, or a chosen name on your own verified domain). Uses 1 quota unit.
wait_for_messageReturn the newest unread message matching optional sender/subject filters, or wait for one (up to 300 s). Includes the links found in it and the body (body_format).
list_messagesMessages of an address (last 24 hours), without body.
read_messageOne message with its links and the body (body_format).

body_format on wait_for_message and read_message: text (plain text, default, cut to max_chars), html (the raw HTML exactly as received, cut to max_html_chars, default 100000) or both. has_html says whether the message has an HTML part; html on a message without one returns the text instead. | delete_mailbox | Delete an address for good. Quota is not returned. | | list_mailboxes | Your addresses, newest first. | | list_domains | Your own domains and whether shared domains are available. | | account_status | Remaining quota, plans, request rate. |

Tools take and return email addresses only. The address tokens of the API stay inside the server process, so they never end up in the conversation.

Security notes

  • Email content is untrusted. Anyone can send mail to an address. The server returns plain text by default and marks every message with untrusted_content_notice. With body_format="html" or "both" you get the raw HTML unchanged (scripts, tracking pixels and hidden text included): render or parse it only in a safe way you choose. Agents should use mail as data and never follow instructions written inside it.
  • Keep the key out of shared files. Prefer the VS Code inputs prompt, or a user-level config file that is not committed to a repository. Revoke a leaked key at https://platform.tmailor.com/keys.
  • Paid plans accept API calls from any IP, so a leaked key can be used from anywhere until you revoke it.
  • wait_for_message never returns the same message twice within one server process. Two MCP servers waiting on the same address at the same time (for example two agents sharing one key) can both receive the same message.

Configuration

VariableMeaning
TMAILOR_API_KEYYour API key (required).
TMAILOR_BASE_URLOnly for testing against another API host.

Links

License

MIT

Source: README.md at commit 8067b87

Tools

8

create_mailbox

Create a temporary email address

Create a new temporary email address that can receive mail right away. Uses 1 unit of the account's mailbox quota (checking and reading mail is free). The address is receive-only and never expires; wait_for_message returns the mail it receives and delete_mailbox removes it.

Parametersnamedomain

wait_for_message

Wait for an email

Return the newest UNREAD message matching the filters, or wait until one arrives. The result includes the sender, the subject, the `links` found in the message and the body chosen by `body_format` (plain text by default; "html" or "both" for the raw HTML). Returning a message marks it as read, so the next call waits for the next one. If nothing arrives in time, `status` is "timeout": call again if the email may still come (for example the sign-up was just submitted).

Parametersemailrequiredmax_charsbody_formatfrom_containsmax_html_charstimeout_secondssubject_contains

list_messages

List messages of an address

List the messages an address received in the last 24 hours, newest first (no body; use read_message).

Parametersemailrequiredlimitunread_onlyfrom_containssubject_contains

read_message

Read one message

Read one message: sender, subject, `links` and the body. Marks the message as read. `body_format` picks the body: "text" (plain text, default), "html" (the raw HTML exactly as received) or "both". `has_html` says whether the message has an HTML part.

Parametersemailrequiredmax_charsmessage_idrequiredbody_formatmax_html_chars

delete_mailbox

Delete an address

Delete an address for good (like Delete on tmailor.com): it stops receiving and cannot be restored. Used quota is not returned. Only call this when the user's task no longer needs the address.

Parametersemailrequired

list_mailboxes

List addresses

List the account's addresses, newest first, with their message counts.

Parameterslimit

list_domains

List usable domains

List the account's own domains (custom names are allowed on verified ones) and whether shared domains are available.

Takes no parameters.

account_status

Account status and quota

Show the remaining mailbox quota, the active plans and the request rate of the Tmailor account.

Takes no parameters.

Version history

3
  1. v0.4.0LatestOct 29, 2026
  2. v0.3.0Oct 21, 2026
  3. v0.1.1Oct 20, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listed15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts