Skip to content

com.machineinbox/machine-inbox

by machineinbox.com · remote · no sign-in to list tools · v0.1.0 · published by com.machineinbox

Task-scoped email inboxes for AI agents: read mail, extract verification codes, and reply.

Deletes · 2Final · 1Changes · 2
CompareRegistry entry

11 tools: 2 can delete or cancel things, 1 do something that can't be undone, 2 change things and 6 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http machine-inbox https://machineinbox.com/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

11 tools

Deletes or cancels 2Claude Code: deny
  • delete_inboxDelete an inbox: revokes the token and erases stored mail.No findings

    Why it is in this group

    • The name "delete_inbox" says "delete": a word for removing or ending something.
    Description, as the server wrote it
    Delete an inbox: revokes the token and erases stored mail.
  • delete_webhookRemove the inbox webhook.No findings

    Why it is in this group

    • The name "delete_webhook" says "delete": a word for removing or ending something.
    Description, as the server wrote it
    Remove the inbox webhook.
Can't be undone 1Claude Code: ask
  • reply_to_messageSend an included plain-text reply to the authenticated sender of an inbound message.No findings

    Why it is in this group

    • The name "reply_to_message" says "reply": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send an included plain-text reply to the authenticated sender of an inbound message.
Changes things 2Claude Code: ask
  • create_inboxRequest a new paid inbox.No findings

    Why it is in this group

    • The name "create_inbox" says "create": a word for a change.
    Description, as the server wrote it
    Request a new paid inbox. Buying requires an out-of-band payment (Stripe MPP or x402 USDC on Base); this tool returns the live HTTP 402 payment challenge plus exact instructions to complete the purchase. Standard inbox: $2.00.
  • set_webhookRegister or replace the inbox webhook: an HMAC-signed POST fires on every inbound message with metadata, extracted verification codes, and injection risk (never the body).No findings

    Why it is in this group

    • The name "set_webhook" says "set": a word for a change.
    Description, as the server wrote it
    Register or replace the inbox webhook: an HMAC-signed POST fires on every inbound message with metadata, extracted verification codes, and injection risk (never the body). Returns the signing secret.
Only reads 6Claude Code: allow
  • get_inboxRead an inbox: address, status, expiry, limits, and usage.No findings

    Why it is in this group

    • The name "get_inbox" says "get": a word for reading.
    Description, as the server wrote it
    Read an inbox: address, status, expiry, limits, and usage.
  • get_messageFetch one message with parsed text, HTML, and attachment download URLs.No findings

    Why it is in this group

    • The name "get_message" says "get": a word for reading.
    Description, as the server wrote it
    Fetch one message with parsed text, HTML, and attachment download URLs.
  • get_service_infoRead the Machine Inbox service instructions: pricing, payment rails, endpoints, and limits.No findings

    Why it is in this group

    • The name "get_service_info" says "get": a word for reading.
    Description, as the server wrote it
    Read the Machine Inbox service instructions: pricing, payment rails, endpoints, and limits.
  • get_verification_codeExtract the newest one-time verification code or confirmation link from inbound mail.No findings

    Why it is in this group

    • The name "get_verification_code" says "get": a word for reading.
    Description, as the server wrote it
    Extract the newest one-time verification code or confirmation link from inbound mail. Ideal for signup and login flows.
  • get_webhookRead the inbox webhook state: URL, delivery counters, and whether it is disabled.No findings

    Why it is in this group

    • The name "get_webhook" says "get": a word for reading.
    Description, as the server wrote it
    Read the inbox webhook state: URL, delivery counters, and whether it is disabled. The secret is only returned by set_webhook.
  • list_messagesList messages in an inbox, newest first.No findings

    Why it is in this group

    • The name "list_messages" says "list": a word for reading.
    Description, as the server wrote it
    List messages in an inbox, newest first. Pass after=<newest createdAt seen> to poll for only new mail.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http machine-inbox https://machineinbox.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__machine-inbox__get_service_info",
      "mcp__machine-inbox__get_inbox",
      "mcp__machine-inbox__list_messages",
      "mcp__machine-inbox__get_message",
      "mcp__machine-inbox__get_verification_code",
      "mcp__machine-inbox__get_webhook"
    ],
    "ask": [
      "mcp__machine-inbox__create_inbox",
      "mcp__machine-inbox__reply_to_message",
      "mcp__machine-inbox__set_webhook"
    ],
    "deny": [
      "mcp__machine-inbox__delete_webhook",
      "mcp__machine-inbox__delete_inbox"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as machine-inbox. Review it before you use it.