Docs

Everything you need to connect Poofbox to an AI agent, and what to know before approving it.

What Poofbox is

Poofbox gives AI agents disposable, receive-only email inboxes. A typical run: the agent creates an address, uses it to sign up for a service, waits for the verification email, gets the code or link that Poofbox extracts from it, and deletes the inbox.

Poofbox cannot send email. There is no tool, API or setting for sending, replying or forwarding. Agents can only create inboxes and read what arrives in them.

Connect

The MCP server uses the Streamable HTTP transport at:

https://poofboxmail.com/mcp

Claude (claude.ai, desktop and mobile)

Add Poofbox from the connector directory, or add a custom connector in Settings → Connectors with the URL above. Claude then opens the Poofbox consent page, described under Authentication.

Claude Code

claude mcp add --transport http poofbox https://poofboxmail.com/mcp

Run /mcp in Claude Code and choose Poofbox to sign in.

Cursor

{
  "mcpServers": {
    "poofbox": {
      "url": "https://poofboxmail.com/mcp"
    }
  }
}

Other clients

Any MCP client that supports remote servers with OAuth, such as ChatGPT, connects with the same URL.

Headless agents and scripts

For agents that can't do an OAuth sign-in, create a bearer token in the dashboard under MCP access. Tokens start with pbm_ and are shown once. Send one with every request:

Authorization: Bearer pbm_…

Treat a token like a password: it gives full access to your inboxes. You can revoke it at any time from the same page.

Authentication

Clients connect with OAuth 2.1, using PKCE (S256) and dynamic client registration, so there is nothing to configure in advance. Authorization server metadata is published at /.well-known/oauth-authorization-server and protected resource metadata at /.well-known/oauth-protected-resource.

• There are no accounts or passwords. On the consent page you paste your Poofbox license key, which is your login. The license key is never sent to the connected app.
• The app receives a token with one scope, mailboxes: access to your inboxes and emails through the tools below. Access tokens last 1 hour and are refreshed automatically; refresh tokens rotate on every use and expire after 30 days unused.
• Every connected app is listed in the dashboard under MCP access. You can disconnect any of them at any time, and it loses access immediately.

A paid plan is required: Personal at €9.99 per year or Pro at €34.99 per year, plus VAT. Get Poofbox.

Tools

The server exposes 9 tools. Each carries MCP annotations (read-only, destructive) so clients can ask for confirmation where it matters.

• create_mailboxChanges data

  Creates a new inbox with a random readable address. Optional domain; without it a random rotating domain is used. Counts toward the active and daily inbox limits.

• list_mailboxesRead-only

  Lists your active inboxes with email and unread counts.

• delete_mailboxDestructive

  Permanently deletes an inbox and all of its emails and attachments, with no confirmation step. The address is never issued to anyone else.

• search_deleted_mailboxesRead-only

  Searches the addresses your account created and later deleted, and says whether each can still be restored.

• restore_mailboxChanges data

  Brings back an address your account created earlier, empty (old emails are gone). Useful for a password reset on an account you signed up with. Counts as a new inbox.

• list_emailsRead-only

  Lists emails in an inbox, newest first, with detected verification codes.

• wait_for_emailChanges data

  Long-polls until a matching email arrives (default 30 s, up to 120 s), then returns it like read_email. Filters: from_contains, subject_contains, after (an email id or ISO time). Returns {"timed_out": true} on timeout; call it again to keep waiting.

• read_emailChanges data

  Returns one email: sender, subject, text and optionally sanitized HTML, extracted codes, ranked links, and attachments with signed download links. Marks the email as read.

• get_accountRead-only

  Returns your plan, limits and usage, available domains, your address prefix, and upgrade information.

A typical flow:

1. create_mailbox to get an address.
2. The agent signs up for the service with that address.
3. wait_for_email, optionally filtered by sender or subject.
4. The agent uses the extracted code or link.
5. delete_mailbox when the inbox is no longer needed.

Addresses and domains

Every address an account creates starts with the same random 5-letter prefix, for example kavor-otter-4821@poofy.uk. The rest is random.

• poofy.uk is permanent and never changes. Use it for accounts you keep, so password resets and later logins still reach you.
• poofbox.shop, poofbox.online, poofbox.site, poofbox.space, poofbox.store rotate. They may be replaced, usually once a year, and addresses on a retired domain stop receiving mail. They are fine for one-off sign-ups.

A deleted address is never given to anyone else. Only the account that created an address can restore it, and only while its domain is still in service.

Limits

• Daily limits reset at 00:00 UTC for everyone.
• Over the daily receive limit, senders get a temporary "try again later" response (SMTP 452) and redeliver later, so the email arrives with a delay instead of being lost.
• When an inbox reaches its email or storage limit, the oldest emails are removed first.
• The maximum size of a single email is 10 MB.
• get_account shows current usage against these limits.

Data and security

• Receive-only. Poofbox cannot send email on your behalf.
• Hosted in Germany. All service data and backups are on Hetzner servers in the EU.
• Safe HTML. Email HTML is sanitized and, in the dashboard, shown in a sandboxed frame with remote images blocked by default.
• Short retention. Emails are deleted when their inbox is deleted or when limits push them out. Everything is deleted when your access ends.
• No stored secrets. Only a keyed hash of your license key is stored, and bearer tokens are stored as hashes.
• No tracking or ads. No analytics, advertising or third-party scripts.

Details are in the privacy policy and the terms.

Support

Questions, problems or security reports: poofbox@blanketbyte.com.