Lets an assistant create disposable email inboxes, wait for incoming messages, and read verification codes or links.
What you can do
GrabMail provides disposable email inboxes for agents. According to the description, an assistant can create an inbox, wait for a message to arrive, and read the contents, such as a verification code. It is a remote streamable HTTP endpoint, so no local package is installed.
When to use it
Useful when an assistant needs to receive a signup confirmation, verification code, or one-time link during an automated workflow without using a personal mailbox.
Requirements
A remote MCP endpoint at grabmail.io over streamable HTTP. The description states no key is needed, and the manifest declares no authentication, environment variables, or headers.
Before you install
Messages received in a disposable inbox may be readable by the service or others, so do not route sensitive or confidential mail through it. Inboxes are typically temporary, so anything needed later should be saved elsewhere.
Enable the server for the chats that should use its tools.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Use with an agent
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.grabmail%2Fmcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.
Invent a fresh, unused disposable email address you can give out immediately. Nothing is created or reserved server-side — an address exists as soon as mail arrives at it — so this never fails and needs no account. Public domains: grabmail.io, mixozia.com, linqmail.com. With a paid key sent as Authorization: Bearer, a premium-pool domain from list_domains works too.
Parametersdomainprefix
list_domains
List the public domains
The public domains anyone may use. A domain of your own needs no account or key either — just an MX record pointing here. These public domains are on disposable-mail blocklists; if a form rejects them, see the premium pool noted in the result. With a paid key sent as Authorization: Bearer, the result also lists the premium-pool domain names.
Takes no parameters.
list_messages
List the messages at an address
Everything waiting at an address, newest first. Returns immediately, including when the mailbox is empty — use wait_for_message if you are expecting something that has not arrived yet.
Parameterslimitbeforeaddressrequired
read_message
Read one message
The full message: sender, subject, plain text, HTML and any attachments. This is where a confirmation code or a sign-in link will be. Read `text`: when the sender shipped HTML only, as most transactional mail does, it holds a plain-text rendering of that HTML rather than nothing, with link targets and image alt text kept.
Parametersidrequiredaddressrequired
wait_for_message
Wait for a message to arrive
Blocks until a new message arrives at the address, then returns it in full — the tool to use after submitting a sign-up form. Waits at most 25 seconds and then returns with timed_out set to true; call it again to keep waiting. Optionally waits for a message from a particular sender or with particular words in the subject, ignoring anything else that arrives.
Remove a message now rather than waiting for it to expire. Idempotent.
Parametersidrequiredaddressrequired
Version history
1
v1.0.0LatestSep 22, 2026
Score
83%
83% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
Reached in the last 30 daysRequired25 pts
Auth declaredRequired10 pts
Tools listedRequired15 pts
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.
LicenseNot applicable
A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.