REST API
Bearer-authenticated /v1 endpoints for inboxes, messages, sending, and waiting. Try every call live in the in-portal playground.
Open the playgroundA real webhook API for programmatic inboxes. Spin up addresses in your test suite, catch what arrives in milliseconds, assert on it like any other response. Self-host the engine, use our hosted cloud, or both.
Five lines of Python. Or Playwright. Or curl. Real HTTP, real mail, real assertions — no fake SMTP server to mock, no local Postfix to maintain.
import requests, time
# 1. spin up a fresh inbox
r = requests.post("https://api.getinboxr.app/v1/inboxes",
headers={"Authorization": f"Bearer {API_KEY}"},
json={"label": "signup-test"})
inbox = r.json() # {"address": "signup-test.narwhal@getinboxr.app", ...}
# 2. drive your signup flow, asking it to email this address
register(email=inbox["address"])
# 3. poll for arrival (or wire a webhook for push)
for _ in range(20):
msgs = requests.get(f"{inbox['url']}/messages",
headers={"Authorization": f"Bearer {API_KEY}"}).json()
if msgs["items"]:
link = extract_verify_link(msgs["items"][0]["text"])
requests.get(link) # done.
break
time.sleep(1)
Real disposable email — running today on getinboxr.app — with first-class REST, SMTP, MCP, and webhook surfaces. Built so an AI agent can drive a signup-and-confirm flow with the same effort as a curl one-liner.
Bearer-authenticated /v1 endpoints for inboxes, messages, sending, and waiting. Try every call live in the in-portal playground.
Open the playgroundsmtp.getinboxr.app:587 with STARTTLS. Issue a per-inbox credential from /v1/inboxes/{id}/smtp-credentials and drop it into nodemailer / lettre / msmtp.
See SMTP docsDrop @jassra25/inboxr-mcp into Claude Desktop, Cursor, or Claude Code. Eight tools — create_inbox, wait_for_message, extract_otp, extract_link — let an agent run signup-and-confirm flows end-to-end.
Wire up an agentPush every inbound message to your CI runner within ~200 ms of arrival. HMAC-SHA256 signed, 5-attempt retry with exponential backoff.
Configure webhooks# Claude Desktop / Cursor / Claude Code
{
"mcpServers": {
"inboxr": {
"command": "npx",
"args": ["-y", "@jassra25/inboxr-mcp"],
"env": {
"INBOXR_API_KEY": "inb_live_...",
"INBOXR_API_URL": "https://api.getinboxr.app"
}
}
}
}Restart your agent and it can create_inbox, wait_for_message, extract_otp, and extract_link without writing a line of glue.
Webhooks fire within 200ms of the message hitting our MX. No polling, no waiting.
Push new messages to your CI, or pull with an async for-loop. Your choice, same inbox.
Every message exposes auth-results + the full RFC822 source. Confirm you're emulating production correctly.
Run the entire stack yourself — Postfix + Dovecot + OpenDKIM — with the same API surface. Pay us only when you want the cloud layer.
Hit a quota? Clear dashboard, predictable overage pricing. No surprise invoices.
Ship enterprise from day one. Google / Microsoft / Okta / custom SAML — plus SCIM for Scale + Enterprise.
Every plan ships with the full API, webhooks, and the web UI. Higher tiers add SSO, retention, and compliance. Need Enterprise? Get in touch.
Overage: $0.001 per message, $0.0001 per API call. Self-hosting free forever — run the engine yourself.