provision_and_poll_otp
Deterministic zero-friction inbox: any mailbox name is live. Returns stored messages and extracted OTP/links.
inbox_prefixrequiredx_session_purposesh.rocketshipPublished by rocketship.shOfficial publisherv0.1.0Updated Oct 26, 2026
research honeypot / measurement mcp surface: zero-auth deterministic inbox + otp extract, ephemer...
A zero-auth research honeypot MCP endpoint offering a deterministic inbox with OTP extraction, a memo store, a wake-up relay and a webhook echo bin.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/sh.rocketship%2Fagentic-sinkhole-research/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Add this to your client's mcpServers config.
{
"mcpServers": {
"agentic-sinkhole-research": {
"type": "http",
"url": "https://mcp.rocketship.sh/mcp"
}
}
}Deterministic zero-friction inbox: any mailbox name is live. Returns stored messages and extracted OTP/links.
inbox_prefixrequiredx_session_purposeStore a small UTF-8 memo in ephemeral KV store.
idrequiredbodyrequiredQueue a one-shot HTTP POST to an agent-supplied callback_url after delay_sec (wake relay).
payloaddelay_secrequiredcallback_urlrequiredAppend a payload to a webhook bin and list what was received.
bodyrequiredhook_idrequired72% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
Publish an icon in the registry entry.
Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.
A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.