Back to Browse

Mailsink MCP Server

by Heocoi
Developer ToolsModerate7.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Disposable inboxes for AI agents and CI: catch the verification email, read the OTP or link.

About

Disposable inboxes for AI agents and CI: catch the verification email, read the OTP or link.

Security Report

7.2
Moderate7.2Low Risk

This MCP server is well-structured with proper authentication, clear input validation via Zod schemas, and appropriate error handling. The server requires API key authentication and maintains a narrow, focused permission scope aligned with its temporary email inbox purpose. Minor logging concerns around sensitive data handling prevent a higher score, but no critical vulnerabilities were identified. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

3 files analyzed · 5 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

Your MailSink API key. Get it at https://mailsink.dev/auth/githubRequired

Environment variable: MAILSINK_API_KEY

Optional API base URL override (defaults to https://api.mailsink.dev)Optional

Environment variable: MAILSINK_API_URL

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-heocoi-mailsink": {
      "env": {
        "MAILSINK_API_KEY": "your-mailsink-api-key-here",
        "MAILSINK_API_URL": "your-mailsink-api-url-here"
      },
      "args": [
        "-y",
        "@mailsink/mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

@mailsink/mcp

Model Context Protocol server for MailSink — programmatic temporary email inboxes for AI agents and test automation.

Gives your agent eight typed tools for provisioning disposable addresses, waiting on signup emails, extracting OTP codes and magic links, and cleaning up after itself. Works in Claude Code, Claude Desktop, Cursor, Windsurf, and any other MCP-aware client.

Install

npm install -g @mailsink/mcp

Or run via npx without installing:

npx @mailsink/mcp

Get an API key

  1. Sign in at https://mailsink.dev/app with GitHub.

  2. Copy the key from the one-time reveal. Store it in your password manager or .env.

  3. Export it so the MCP server can read it:

    export MAILSINK_API_KEY="msk_..."
    

Free tier is 50 inboxes/month and includes MCP. Pro ($15/mo) and Team ($49/mo) lift the inbox cap, raise email size limits, extend TTL, and bump request rates. See pricing.

Configure your client

Claude Code

claude mcp add mailsink -- npx -y @mailsink/mcp

Claude Desktop / Cursor / Windsurf

Add to the mcpServers section of the client's config file:

{
  "mcpServers": {
    "mailsink": {
      "command": "npx",
      "args": ["-y", "@mailsink/mcp"],
      "env": {
        "MAILSINK_API_KEY": "msk_..."
      }
    }
  }
}

Restart the client. You should see the mailsink server listed with its eight tools.

Tools

ToolPurpose
create_inboxProvision a throwaway address. Returns email, id, expires_at.
list_inboxesList active inboxes on the account.
wait_for_emailBlock up to timeout seconds (max 120) for any email to arrive.
get_verification_codeExtract the most recent OTP from the inbox (polls until found or timeout).
get_verification_linkExtract the most recent magic link.
list_messagesSummaries of all messages in an inbox.
get_messageFull content of a specific message by ID.
delete_inboxBurn an inbox immediately.

Example agent flow

> Sign me up for Figma, capture the verification code, confirm, and
> tell me the plan once you're in.

[agent invokes]
  create_inbox()                                → agent@codenotify.net
  [agent fills the Figma signup form with that address]
  wait_for_email(inbox_id)                      → blocks 30s…
                                                → returns email + OTP
  [agent types the OTP into the Figma form]
  delete_inbox(inbox_id)                        → cleanup

No webhook plumbing. No IMAP credentials. No parsing MIME.

Environment variables

  • MAILSINK_API_KEY (required) — your account's API key.
  • MAILSINK_API_URL (optional, default https://api.mailsink.dev) — override for self-hosted or dev API.

Source

https://github.com/heocoi/mailsink/tree/main/mcp

License

MIT — see LICENSE.

Reviews

No reviews yet

Be the first to review this server!