# Inboxr

> Disposable email AND SMS inboxes for developers, CI, and AI agents.
> Live at https://getinboxr.app. Every email inbox is a real address that can receive
> and send mail; every SMS inbox is a real phone number that can receive
> and send texts. Use REST, SMTP, MCP, or webhooks to verify signups,
> read MFA / OTP codes (email or SMS), drive reply-to flows, and run
> agent-driven workflows end-to-end without human relay.

## Quick start

- Get an API key at https://app.getinboxr.app/api-keys (kept once at creation, hashed at rest).
- Validate: `curl -fsS -H "Authorization: Bearer $KEY" https://api.getinboxr.app/v1/inboxes`.
- For SMS, top up credits or pick an SMS plan at https://app.getinboxr.app/billing — required to claim a phone number.
- Try every endpoint live in your browser: https://app.getinboxr.app/docs/api (paste the key, click Run).

## Documentation

- [Integrations overview](https://getinboxr.app/llms-full.txt#integrations): REST, SMTP, MCP, webhooks — pick the one closest to your code.
- [API keys](https://getinboxr.app/llms-full.txt#api-keys): scopes (`read`, `write`, `admin`, `sms:send`, `sms:read`, `voice:call`, `voice:read`), rotation with 7-day deprecation, last-used IP audit.
- [Outbound email](https://getinboxr.app/llms-full.txt#outbound-mail): /v1/messages, plan caps, common 4xx/5xx.
- [SMTP submission](https://getinboxr.app/llms-full.txt#smtp): smtp.getinboxr.app:587 STARTTLS, per-inbox creds.
- [SMS](https://getinboxr.app/llms-full.txt#sms): /v1/sms/inboxes (claim a phone number), /v1/sms/send, claim-window routing, 5/sec/tenant + 60/min/phone rate limits.
- [Voice + IVR](https://getinboxr.app/llms-full.txt#voice): /v1/voice/calls to dial PSTN, /v1/voice/ivr-flows for state-machine call trees, AI flow generation from a description, OpenAI TTS, Whisper transcripts, opus recordings. 6¢/min outbound, 4¢/min inbound (in credits).
- [Webhooks](https://getinboxr.app/llms-full.txt#webhooks): events `email.received`, `sms.received`, `sms.delivered`, `voice.completed`, `voicemail.created`; HMAC-SHA256 signed; 1s/10s/1m/10m/1h/6h backoff with DLQ.
- [Self-host](https://getinboxr.app/llms-full.txt#self-host): full stack on your own Docker / Proxmox / k8s. `docker pull jassra/inboxr-cloud:latest`. License required for commercial use; free for personal + evaluation.
- [AI agents](https://getinboxr.app/llms-full.txt#ai-agents): MCP install for Claude Desktop / Cursor / Claude Code, and reference patterns for email + SMS OTP + voice IVR flows.

## Machine-readable surfaces

- [OpenAPI 3.1 spec](https://getinboxr.app/openapi.json) — every /v1 endpoint (email, SMS, voice), parameter shapes, responses.
- [Full docs as one markdown file](https://getinboxr.app/llms-full.txt) — paste-into-context-window friendly.
- [MCP discovery manifest](https://getinboxr.app/.well-known/mcp.json) — install snippet, transport, full 16-tool catalogue (email + SMS) with JSON Schemas.
- [MCP package on npm](https://www.npmjs.com/package/@jassra25/inboxr-mcp) — `npx -y @jassra25/inboxr-mcp` over stdio.
- [Sitemap](https://getinboxr.app/sitemap.xml) · [robots](https://getinboxr.app/robots.txt) · [security.txt](https://getinboxr.app/.well-known/security.txt).

## MCP for agents

Drop this into Claude Desktop / Cursor / Claude Code config:

```json
{
  "mcpServers": {
    "inboxr": {
      "command": "npx",
      "args": ["-y", "@jassra25/inboxr-mcp"],
      "env": {
        "INBOXR_API_KEY": "inb_live_...",
        "INBOXR_API_URL": "https://api.getinboxr.app"
      }
    }
  }
}
```

Tools the agent gets:

Email — `create_inbox`, `list_inboxes`, `delete_inbox`,
`wait_for_message`, `get_messages`, `get_message`, `extract_otp`,
`extract_link`.

SMS — `sms_create_inbox`, `sms_list_inboxes`, `sms_delete_inbox`,
`sms_send`, `sms_claim_sender` (stake the route for an expected sender),
`sms_wait_for_message`, `sms_get_messages`, `sms_extract_otp`.

Voice — `voice_list_flows`, `voice_create_flow` (raw JSON tree),
`voice_create_flow_from_description` (Claude writes the JSON for you),
`voice_assign_flow` (attach a flow to an inbox so inbound calls run it),
`voice_test_flow` (dry-run with simulated DTMF), `voice_list_traces`
(see how recent calls traversed the flow).

## Optional

- [Marketing site](https://getinboxr.app) — pricing, features, comparisons.
- [Status](https://getinboxr.app/status) — uptime + incidents.
- [Changelog](https://getinboxr.app/changelog).