81trust / 100

MinuteMail

by minutemail.co in Email & messaging

MCP serverPassing, checked 6 h ago

Ephemeral mailboxes and a mock OAuth IdP for testing email and auth flows — 39 API-driven tools

https://mcp.minutemail.co/mcp

Last 30 days

All checks passedSome failedAll failedNot checked
Uptime
100%
Response time
449 ms typical, 449 ms slowest 5%
Last check
6 h ago
Next check
in 13 min

How to call it

Add it to any MCP client that supports remote servers.

{
  "mcpServers": {
    "minutemail": {
      "type": "http",
      "url": "https://mcp.minutemail.co/mcp"
    }
  }
}

40 tools

  • mailboxes.list

    List the tenant's active mailboxes (owner is derived from the API key). Optionally look up a single mailbox by exact address.

  • mailboxes.create

    Create a new temporary mailbox. The domain defaults to the tenant's default domain; the owner is always the API key's owner.

  • mailboxes.get

    Fetch a single mailbox by ID.

  • mailboxes.delete

    Delete a mailbox and its contents by ID.

  • mailboxes.delete_bulk

    Delete several mailboxes at once by ID.

  • mails.list

    List the emails in a mailbox, newest first.

  • mails.inject

    Inject a simulated inbound email into a mailbox (multipart upload). No external mail is sent; use this to simulate inbound mail for flow testing.

  • mails.get

    Fetch a single email by ID, including body and attachment metadata.

  • mails.delete

    Delete a single email.

  • mails.delete_bulk

    Delete several emails of one mailbox at once.

  • attachments.list

    List the attachments of an email (metadata only).

  • attachments.add

    Attach a file to a test-injected email (base64 payload).

  • attachments.get

    Download an attachment. The file contents are returned base64-encoded in the JSON "data" field.

  • attachments.delete

    Delete a single attachment.

  • attachments.delete_bulk

    Delete several attachments of one email at once.

  • archived.list

    List the tenant's archived (expired but recoverable) mailboxes.

  • archived.get

    Fetch a single archived mailbox by ID.

  • archived.delete

    Permanently delete an archived mailbox.

  • archived.reactivate

    Reactivate an archived mailbox back to active state.

  • domains.list

    List the tenant's custom domains with their DNS verification status.

  • domains.register

    Register a new custom domain. DNS records (TXT token + MX) must then be added before verification can succeed.

  • domains.verify

    Trigger DNS verification (TXT + MX) of a registered domain.

  • domains.delete

    Delete a registered custom domain.

  • team.members.list

    List the tenant's team members.

  • team.members.add

    Add a team member directly (no invitation flow).

  • team.members.get

    Fetch a single team member by ID.

  • team.members.delete

    Remove a team member.

  • team.invitations.create

    Create a team invitation for an email address (SMTP invite is sent by the team service).

  • team.invitations.list

    List the tenant's team invitations.

  • team.invitations.delete

    Revoke a team invitation.

  • identities.list

    List the tenant's mock identities, optionally filtered by OAuth client or mailbox address.

  • identities.create

    Create a mock identity bound to a mailbox for OAuth flow testing.

  • identities.get

    Fetch a single mock identity by ID.

  • identities.update

    Update a mock identity: profile fields, isActive (activate/deactivate), emailVerified, and custom claims merged into the ID token and userinfo.

  • identities.delete

    Delete a mock identity.

  • oauth.clients.list

    List the tenant's OAuth clients for mock identity testing.

  • oauth.clients.create

    Register an OAuth client for mock identity flows. The plaintext clientSecret is returned once at creation.

  • oauth.clients.get

    Fetch a single OAuth client by its public client ID.

  • oauth.clients.delete

    Delete an OAuth client by its public client ID.

  • oauth.clients.rotate_secret

    Rotate an OAuth client's secret. The new plaintext secret is returned once.

Security scan

  • No findings. We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTime
6 h agoPassed200454 ms
17 h agoPassed200449 ms