Poofbox

Disposable, receive-only email inboxes for AI agents. Create an address, wait for the verification email, and get the extracted code or magic link back. OAuth, hosted in the EU.

View on poofboxmail.com

Hosted MCP Server

npx add-mcp 'https://poofboxmail.com/mcp'

Installs into Claude Code, Codex, Cursor and more

Documentation

Disposable inboxes for your AI agents.

Your agent signs up for something, gets a verification email, and stalls. Poofbox gives it a throwaway address, waits for the email and hands back the code or link. Then the inbox goes poof.

+ VAT. Yearly subscription, cancel any time. No account, no password: your license key is your login.

agent · signing up for acme.devdone

  1. → tool create_mailbox() ← kavor-otter-4821@poofbox.shop
  2. … filling in the signup form with that address
  3. → tool wait_for_email(timeout_seconds: 60) ← "Your Acme verification code" from hello@acme.dev
  4. codes: 845210 links: acme.dev/verify?token=…
  5. → tool delete_mailbox() ← poof ✓

How it works

Use it from your AI agent through MCP, or by hand in the dashboard. Same inboxes, same license key.

With your AI agent (MCP)

  1. 1

    Connect your agent

    Add the Poofbox MCP URL to your client. When it asks, log in on the Poofbox page with your license key.
  2. 2

    It creates an inbox and waits

    The agent gets an address like kavor-otter-4821@poofbox.shop, signs up with it, then calls wait_for_email.
  3. 3

    Code in, inbox gone

    The verification code and links come back already extracted. When it is done, the agent deletes the inbox. Poof.

Claude Code

claude mcp add --transport http poofbox https://poofboxmail.com/mcp

Cursor · ~/.cursor/mcp.json

{
  "mcpServers": {
    "poofbox": {
      "url": "https://poofboxmail.com/mcp"
    }
  }
}

Claude, ChatGPT & other clients · custom connector URL

https://poofboxmail.com/mcp

No agent? Use the dashboard

Your inboxes in the browser

Log in at poofboxmail.com with your license key and do everything by hand: no MCP client needed.

Open the dashboard

  • Create inboxes on any domain random or your pick, then copy the address to any sign-up form.
  • Watch mail arrive live no refreshing, new emails slide in.
  • Copy codes and links detected automatically in every email.
  • Restore deleted addresses when a site sends a password reset to an old one.

Everything an agent needs to get past the email step

Up to 50 inboxes at a time

Create, use and delete as many as you need: 10 active on Personal, 50 on Pro, with a fair daily creation limit.

OAuth MCP server

Streamable HTTP with OAuth 2.1 for Claude, Claude Code, Cursor, ChatGPT and any MCP client. Headless agents can use a plain bearer token.

Codes and links extracted

One-time codes and verify, magic-link or reset URLs come back as structured fields, ranked. No HTML parsing in your prompt.

Waits for you

wait_for_email long-polls until the message lands (up to two minutes per call) so your agent does not have to loop and sleep.

Live dashboard

Watch mail arrive in real time, copy codes in one click, read HTML safely in a sandbox with remote images blocked.

A domain that never changes

Use poofy.uk for accounts you keep: it is permanent. One-off sign-ups get a rotating domain, which we may replace each year.

Addresses you can get back

Every address you create starts with your own prefix and is never given to anyone else. Deleted one but need a password reset? Restore it, empty.

Private by design

Receive-only, hosted in Germany, no tracking cookies. Delete a mailbox and its mail is gone for good.

Tools: create_mailbox, wait_for_email, read_email, list_emails, list_mailboxes, delete_mailbox, search_deleted_mailboxes, restore_mailbox, get_account.

Private by design: no account, no password

Poofbox has no sign-up form and no user profile. When you subscribe, you get a license key, on screen and by email. That key is your login: on the dashboard and in every MCP client. Nothing else identifies you.

What we know about you

Only the email address from your payment, kept so you can replace your key if you lose it. No name, no password, no tracking, no ads. Everything is stored in Germany.

Mail disappears for real

Delete an inbox and its mail and attachments are gone; the address is never handed out again. When your subscription ends, your whole account is deleted.

Keep your key safe

Lost it? Recover it with your purchase email. No access to that email? Contact poofbox@blanketbyte.com and we will help after verifying your purchase.

Why there is no free plan

Free disposable email is abused within days, and the people who pay for it are the ones who suffer.

  1. 01 Free inboxes attract bulk abuse: thousands of fake sign-ups, spam and fraud from throwaway addresses.
  2. 02 Abuse gets domains blocklisted. Once a domain is flagged, sites refuse its addresses and verification emails stop arriving.
  3. 03 A small payment is the best spam filter. It keeps the bad actors out, so the addresses keep working for your agents. That is the product.

Simple yearly pricing

Billed once a year. Cancel any time and keep access until the end of the year you paid for.

Personal

For your own agents and side projects.

€9.99/ year + VAT

  • 10 active inboxes
  • 30 new inboxes per day
  • 150 emails received per day
  • 200 emails / 25 MB per inbox, 250 MB total
  • 5 parallel wait_for_email calls
  • MCP server with OAuth
  • Codes and links extracted automatically
  • Live dashboard, sandboxed HTML
  • Hosted in Germany, no tracking cookies Choose Personal

Pro

More capacity

For heavier automation and teams of agents.

€34.99/ year + VAT

  • 50 active inboxes
  • 150 new inboxes per day
  • Unlimited emails received
  • 500 emails / 100 MB per inbox, 2 GB total
  • 20 parallel wait_for_email calls
  • MCP server with OAuth
  • Codes and links extracted automatically
  • Live dashboard, sandboxed HTML
  • Hosted in Germany, no tracking cookies Choose Pro

Payments by Creem, our merchant of record. Card details never reach us. One subscription per email address.

Questions

Privacy. We do not want your name, a password database or a profile to protect. Your license key is the only credential: whoever has it can use the inboxes, and nobody else can. We only keep your email address (from the payment) so you can replace your key if you lose it.

Use “Recover license key” with the email you subscribed with: we send a one-time link to that address that gives you a new key. No access to that email? Write to poofbox@blanketbyte.com; once we have verified the purchase we can issue a new key.

Because free disposable email gets abused within days: bulk fake sign-ups and spam push the domains onto blocklists, and then they stop working for everyone. A small payment is the best spam filter there is, and it keeps the addresses useful for you.

It is a yearly subscription through Creem, our merchant of record. It renews automatically each year; you can cancel any time in the billing portal and keep access until the end of the year you paid for. One subscription per email address.

Upgrade from Personal to Pro any time from the dashboard: you pay only the prorated difference for the rest of your year. To downgrade, cancel Pro (it stays active until the end of your year) and subscribe to Personal afterwards.

After you cancel you keep access until the end of the paid year. If a renewal payment fails we keep your inboxes for a 7-day grace period while the payment is retried. When access ends, your account and everything in it is deleted immediately.

Every address you create is kept in your history. Find it in the dashboard under Create mailbox → Restore an address (or with the search_deleted_mailboxes tool) and restore it. It comes back empty (deleted emails are gone), so you can receive a password reset there. Every address you create starts with your own prefix, which is why nobody else can ever get it.

On poofy.uk, yes: that domain is permanent and never changes. The other domains rotate: we may replace them each year to keep sign-ups working, and addresses on a retired domain stop receiving mail. Pick poofy.uk in the dashboard (or pass it to create_mailbox) for any account you plan to keep.

No guarantee. Some sites block disposable email domains. We use several domains and rotate them over time to keep things working, but a given site may still refuse an address.

No. Poofbox is receive-only on purpose: it is for sign-ups, verification codes and magic links, and it can never be used to send spam.

Anything that supports Streamable HTTP. With OAuth: Claude (web and desktop), Claude Code, Cursor, ChatGPT connectors and MCP Inspector. When the client asks, you log in on the Poofbox page with your license key. Headless agents can use a bearer token from the dashboard instead.

Yes. The Poofbox core (SMTP receiver, dashboard and MCP server) is being prepared for an open-source release under the AGPL-3.0 licence.