MinuteMail

io.github.minutemailco由 GitHub 账号 minutemailco 发布v1.1.3更新于 Oct 24, 2026

Ephemeral mailboxes and a mock OAuth IdP for testing email and auth flows — 39 API-driven tools

已验证Streamable HTTP可网页运行开发者工具沟通与协作安全与监控

概览

AI 生成的概览

MinuteMail 的远程 MCP 服务器,让助手创建临时邮箱、读取测试邮件并管理模拟 OAuth 身份,用于测试邮件与认证流程。

可以做什么
创建、列出、获取和删除临时邮箱,包括批量删除以及归档邮箱的恢复或永久删除。列出、读取、注入模拟收件邮件并删除邮件,并可列出、添加、下载和删除附件。注册、验证和删除自定义域名,并查看其 DNS 验证状态。管理团队成员与邀请,包括直接添加成员和撤销邀请。创建和管理模拟身份与 OAuth 客户端,更新资料字段、启用状态、邮箱验证和自定义声明,并轮换客户端密钥。
适用场景
适合需要测试注册验证、密码重置等邮件驱动流程,或使用模拟身份测试 OAuth 与身份流程,而不想接触真实收件箱或生产身份提供商的场景。
运行要求
远程 Streamable HTTP 端点,无需本地运行时。需要 MinuteMail 账户,并以 Bearer 形式通过 Authorization 请求头提供 API 密钥。需要访问托管服务的网络;作用域与配额由 MinuteMail API 强制执行。
安装前请注意
API 密钥会被转发给 MinuteMail API,可访问该租户的邮箱、域名、团队和身份。许多工具会写入或删除数据,包括批量删除邮箱和邮件、永久删除归档邮箱。OAuth 客户端密钥在创建和轮换时以明文返回一次。团队邀请会由团队服务发送邮件。

安装

在 SourceWeft 中

  1. 打开 控制台中的 MinuteMail,将其添加到工作区。
  2. 连接 Authorization token 凭据。它们会被私密存储,绝不会在公开页面上展示。
  3. 为需要使用其工具的对话启用该服务。

Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体,或 SourceWeft 对话中。智能体会读取该服务器的安装指南,先向你展示发布者、端点和登录方式,经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/io.github.minutemailco%2Fmcp-server/install.md,并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前,先告诉我它的发布者、端点和登录方式,等我确认。不要把 API 密钥写进命令或我会提交的文件;问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "minutemail": {
      "type": "http",
      "url": "https://mcp.minutemail.co/mcp",
      "headers": {
        "Authorization": "Bearer <YOUR_TOKEN>"
      }
    }
  }
}

README

MinuteMail MCP Server

MinuteMail as MCP (Model Context Protocol) tools: let AI agents and MCP clients operate ephemeral mailboxes, emails, attachments, custom domains, teams, and mock OAuth identities for testing email and auth flows.

[License: MIT] [Docker] [smithery badge]

  • Endpoint: https://mcp.minutemail.co/mcp (Streamable HTTP, protocol revision 2025-06-18)
  • Auth: your MinuteMail API key (Bearer mmak_...). The server is a stateless proxy — it holds no credentials, sessions, or local storage of its own; your key is forwarded verbatim to the MinuteMail API, where scopes and quotas are enforced. All state (mailboxes, mails, identities) lives in the MinuteMail platform behind it.
  • Also listed in the official MCP Registry as io.github.minutemailco/mcp-server and on Smithery.

Get an API key

  1. Sign up at minutemail.co (free during early access)

  2. Create an API key in the dashboard

  3. Configure your MCP client to send it as the Authorization header:

    Authorization: Bearer mmak_XXXXXXXX

Connect your MCP client

Claude Code / Claude Desktop / Cursor / any Streamable HTTP client:

  • URL: https://mcp.minutemail.co/mcp
  • Header: Authorization: Bearer mmak_...

Claude Code CLI:

bash
claude mcp add --transport http minutemail https://mcp.minutemail.co/mcp \  --header "Authorization: Bearer mmak_XXXXXXXX"

Claude Desktop / clients with an mcpServers JSON config (e.g. claude_desktop_config.json / ~/.cursor/mcp.json):

json
{  "mcpServers": {    "minutemail": {      "type": "http",      "url": "https://mcp.minutemail.co/mcp",      "headers": {        "Authorization": "Bearer mmak_XXXXXXXX"      }    }  }}

Some clients (older Claude Desktop builds) only support local stdio servers in their JSON config. If yours rejects type: "http", use the built-in remote/connectors UI with the URL and header above, or run mcp-remote as a stdio bridge:

json
{  "mcpServers": {    "minutemail": {      "command": "npx",      "args": [        "mcp-remote",        "https://mcp.minutemail.co/mcp",        "--header",        "Authorization: Bearer mmak_XXXXXXXX"      ]    }  }}

For a guided walkthrough, see the docs: docs.minutemail.co/mcp/getting-started.

Raw JSON-RPC (what the clients do under the hood):

bash
curl -s https://mcp.minutemail.co/mcp \  -H 'Authorization: Bearer mmak_XXXXXXXX' \  -H 'Content-Type: application/json' \  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call",       "params":{"name":"mailboxes.create","arguments":{"expiresIn":30}}}'

Tools (39)

Every tool maps 1:1 to a route of the MinuteMail API. All calls require the Bearer API key; write operations require the matching scope (mailboxes, domains, team, identities).

Mailboxes (mailboxes scope)

ToolPurpose
mailboxes.listList active mailboxes (optional exact-address lookup)
mailboxes.createCreate a mailbox (optional TTL, domain, recovery tag)
mailboxes.get / mailboxes.deleteFetch / delete one mailbox
mailboxes.delete_bulkDelete several mailboxes by ID
mails.list / mails.injectList mails / simulate an inbound email (multipart, with attachments)
mails.get / mails.delete / mails.delete_bulkRead / delete mails
attachments.list / attachments.add / attachments.get / attachments.delete / attachments.delete_bulkAttachment CRUD

Archived mailboxes (mailboxes scope)

archived.list, archived.get, archived.delete, archived.reactivate.

Custom domains (domains scope)

domains.list, domains.register, domains.verify, domains.delete.

Team (team scope)

team.members.list, team.members.add, team.members.get, team.members.delete, team.invitations.create, team.invitations.list, team.invitations.delete.

Mock identities & OAuth clients (identities scope)

identities.list, identities.create, identities.update, identities.get, identities.delete, oauth.clients.list, oauth.clients.create, oauth.clients.get, oauth.clients.delete, oauth.clients.rotate_secret. identities.update patches profile fields, isActive (activate/deactivate), emailVerified (drives the email_verified claim), and custom claims merged into issued ID tokens and userinfo responses.

Tool results are returned as MCP text content carrying the API's JSON response. Non-2xx responses become isError: true results with the HTTP status and body (401 invalid key, 403 scope/domain, 429 quota with remaining count, 502 upstream down).

Typical agent workflow

mailboxes.create (expiresIn 30)        ↓your app under test sends a verification email to the mailbox address        ↓mails.list → mails.get (extract the code / link)        ↓assert the flow completed — the mailbox expires on its own

Self-hosting

The server is a single static Go binary in a scratch image (~7 MB):

bash
docker run -p 8080:8080 \  -e API_BASE=https://api.minutemail.co \  ghcr.io/minutemailco/mcp-server:latest# or from Docker Hub:docker run -p 8080:8080 \  -e API_BASE=https://api.minutemail.co \  chrptvn/minutemail-mcp:latest

Self-hosting still requires MinuteMail API keys — the server is a stateless proxy over the hosted API, not a standalone implementation. It keeps no sessions or local data; every mailbox, mail, and identity is stored by the MinuteMail API it forwards to.

Env varDefaultPurpose
PORT8080Listen port
API_BASEhttp://api-gateway:80MinuteMail API base URL (use https://api.minutemail.co outside the cluster)
LOG_LEVELwarndebug/info/warn/error
LOG_FORMATjsonjson/text
PROFILEdevDeployment profile label

GET /health for liveness; GET /metrics for Prometheus counters. API-key management is not exposed via MCP — manage keys from the web app.

Development

Go 1.23, stdlib plus prometheus/client_golang.

bash
go test ./...     # unit testsgo vet ./...go run .          # local server on :8080

License

MIT — © MinuteMail.co

来源:README.md,提交 7a24b24

工具

40

mailboxes.list

List mailboxes

List the tenant's active mailboxes (owner is derived from the API key). Optionally look up a single mailbox by exact address.

输入参数address

mailboxes.create

Create mailbox

Create a new temporary mailbox. The domain defaults to the tenant's default domain; the owner is always the API key's owner.

输入参数tagdomainexpiresInrecoverablenoExpiration

mailboxes.get

Get mailbox

Fetch a single mailbox by ID.

输入参数mailboxId必填

mailboxes.delete

Delete mailbox

Delete a mailbox and its contents by ID.

输入参数mailboxId必填

mailboxes.delete_bulk

Bulk delete mailboxes

Delete several mailboxes at once by ID.

输入参数ids必填

mails.list

List mails

List the emails in a mailbox, newest first.

输入参数mailboxId必填

mails.inject

Inject test mail

Inject a simulated inbound email into a mailbox (multipart upload). No external mail is sent; use this to simulate inbound mail for flow testing.

输入参数body必填sender必填subject必填expiresInmailboxId必填attachments

mails.get

Get mail

Fetch a single email by ID, including body and attachment metadata.

输入参数mailId必填mailboxId必填

mails.delete

Delete mail

Delete a single email.

输入参数mailId必填mailboxId必填

mails.delete_bulk

Bulk delete mails

Delete several emails of one mailbox at once.

输入参数ids必填mailboxId必填

attachments.list

List attachments

List the attachments of an email (metadata only).

输入参数mailId必填mailboxId必填

attachments.add

Add attachment

Attach a file to a test-injected email (base64 payload).

输入参数data必填mailId必填filename必填expiresInmailboxId必填sizeBytescontentType

attachments.get

Get attachment

Download an attachment. The file contents are returned base64-encoded in the JSON "data" field.

输入参数mailId必填mailboxId必填attachmentId必填

attachments.delete

Delete attachment

Delete a single attachment.

输入参数mailId必填mailboxId必填attachmentId必填

attachments.delete_bulk

Bulk delete attachments

Delete several attachments of one email at once.

输入参数ids必填mailId必填mailboxId必填

archived.list

List archived mailboxes

List the tenant's archived (expired but recoverable) mailboxes.

无需输入参数。

archived.get

Get archived mailbox

Fetch a single archived mailbox by ID.

输入参数mailboxId必填

archived.delete

Delete archived mailbox

Permanently delete an archived mailbox.

输入参数mailboxId必填

archived.reactivate

Reactivate archived mailbox

Reactivate an archived mailbox back to active state.

输入参数expiresInmailboxId必填

domains.list

List domains

List the tenant's custom domains with their DNS verification status.

无需输入参数。

domains.register

Register domain

Register a new custom domain. DNS records (TXT token + MX) must then be added before verification can succeed.

输入参数name必填

domains.verify

Verify domain

Trigger DNS verification (TXT + MX) of a registered domain.

输入参数domainId必填

domains.delete

Delete domain

Delete a registered custom domain.

输入参数domainId必填

team.members.list

List team members

List the tenant's team members.

无需输入参数。

team.members.add

Add team member

Add a team member directly (no invitation flow).

输入参数email必填status必填user_id必填username必填

team.members.get

Get team member

Fetch a single team member by ID.

输入参数memberId必填

team.members.delete

Delete team member

Remove a team member.

输入参数memberId必填

team.invitations.create

Create invitation

Create a team invitation for an email address (SMTP invite is sent by the team service).

输入参数email必填

team.invitations.list

List invitations

List the tenant's team invitations.

无需输入参数。

team.invitations.delete

Delete invitation

Revoke a team invitation.

输入参数invitationId必填

identities.list

List identities

List the tenant's mock identities, optionally filtered by OAuth client or mailbox address.

输入参数clientIdmailboxAddress

identities.create

Create identity

Create a mock identity bound to a mailbox for OAuth flow testing.

输入参数nameclaimsclientId必填usernameavatarUrlemailVerifiedmailboxAddress必填

identities.get

Get identity

Fetch a single mock identity by ID.

输入参数identityId必填

identities.update

Update identity

Update a mock identity: profile fields, isActive (activate/deactivate), emailVerified, and custom claims merged into the ID token and userinfo.

输入参数nameclaimsisActiveusernameavatarUrlidentityId必填emailVerified

identities.delete

Delete identity

Delete a mock identity.

输入参数identityId必填

oauth.clients.list

List OAuth clients

List the tenant's OAuth clients for mock identity testing.

无需输入参数。

oauth.clients.create

Create OAuth client

Register an OAuth client for mock identity flows. The plaintext clientSecret is returned once at creation.

输入参数name必填providerTyperedirectUris必填providerLabel

oauth.clients.get

Get OAuth client

Fetch a single OAuth client by its public client ID.

输入参数clientId必填

oauth.clients.delete

Delete OAuth client

Delete an OAuth client by its public client ID.

输入参数clientId必填

oauth.clients.rotate_secret

Rotate client secret

Rotate an OAuth client's secret. The new plaintext secret is returned once.

输入参数clientId必填

版本历史

1
  1. v1.1.3最新Sep 16, 2026

评分

已满足适用检查项的 100%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分