MailBots

Working · 46 ms Security A

top.mailbots/mailbotsv1.0.0 Domain verified

Read verification codes (OTP) and test email sent to your catch-all test hostnames.

Communication Developer Tools

Watch Website

Registry entry

Open in the registry

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-11-07T04:02:52.248627Z",
      "publishedAt": "2026-11-07T04:02:52.248627Z",
      "statusChangedAt": "2026-11-07T04:02:52.248627Z"
    }
  },
  "server": {
    "name": "top.mailbots/mailbots",
    "icons": [
      {
        "src": "https://mailbots.top/favicon.svg",
        "sizes": [
          "any"
        ],
        "mimeType": "image/svg+xml"
      },
      {
        "src": "https://mailbots.top/icon-512.png",
        "sizes": [
          "512x512"
        ],
        "mimeType": "image/png"
      }
    ],
    "title": "MailBots",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "remotes": [
      {
        "url": "https://api.mailbots.top/v1/mcp",
        "type": "streamable-http",
        "headers": [
          {
            "name": "Authorization",
            "value": "Bearer {api_key}",
            "isSecret": true,
            "variables": {
              "api_key": {
                "isSecret": true,
                "isRequired": true,
                "description": "MailBots API key, starts with mb_live_"
              }
            },
            "isRequired": true,
            "description": "Bearer followed by a MailBots API key from Dashboard > Developer (trial or paid plan)."
          }
        ]
      }
    ],
    "version": "1.0.0",
    "websiteUrl": "https://mailbots.top/docs/mcp",
    "description": "Read verification codes (OTP) and test email sent to your catch-all test hostnames."
  }
}

Maintained bymailbots.top(verified)Also a maintainer?

Try it

Call this server's tools from your browser. Nothing to install.

https://api.mailbots.top/v1/mcp

Authorization (required)

Bearer followed by a MailBots API key from Dashboard > Developer (trial or paid plan).

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

get_latest_otp Read-only

Return the newest message sent to an address and the verification code (OTP) extracted from it. Returns found=false when nothing has arrived yet; wait a few seconds and retry.

tostring, required

Full recipient address, e.g. [email protected]. Case-insensitive.

sincestring

Optional ISO 8601 time. Ignore messages received before it, e.g. the moment the test started.

Install

Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.

One click: Add to Cursor Add to VS Code Add to LM StudioThen replace the YOUR_ values and {placeholders} with your own.

Run in a terminal

claude mcp add --transport http mailbots https://api.mailbots.top/v1/mcp \
  --header 'Authorization: Bearer YOUR_TOKEN'

Headers

Authorization (required): Bearer followed by a MailBots API key from Dashboard > Developer (trial or paid plan).

Tools (4)

get_latest_otp

Return the newest message sent to an address and the verification code (OTP) extracted from it. Returns found=false when nothing has arrived yet; wait a few seconds and retry.

read-only

Argument	Type	Description
to*	string	Full recipient address, e.g. [email protected]. Case-insensitive.
since	string	Optional ISO 8601 time. Ignore messages received before it, e.g. the moment the test started.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "to"
  ],
  "properties": {
    "to": {
      "type": "string",
      "description": "Full recipient address, e.g. [email protected]. Case-insensitive."
    },
    "since": {
      "type": "string",
      "description": "Optional ISO 8601 time. Ignore messages received before it, e.g. the moment the test started."
    }
  },
  "additionalProperties": false
}

get_message

Return one message by id, including its plain-text body (truncated to 20,000 characters).

read-only

Argument	Type	Description
id*	string	Message id from list_messages or get_latest_otp.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "id"
  ],
  "properties": {
    "id": {
      "type": "string",
      "description": "Message id from list_messages or get_latest_otp."
    }
  },
  "additionalProperties": false
}

list_domains

List the hostnames this API key can receive mail on, with their status. Any address at an active hostname reaches the inbox.

read-only

No arguments.

Input schema (JSON)

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

list_messages

List recent messages, newest first, optionally only those sent to one address. Returns metadata and the OTP, not the body.

read-only

Argument	Type	Description
to	string	Full recipient address, e.g. [email protected]. Case-insensitive.
limit	integer	How many messages to return (default 10).

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "to": {
      "type": "string",
      "description": "Full recipient address, e.g. [email protected]. Case-insensitive."
    },
    "limit": {
      "type": "integer",
      "maximum": 50,
      "minimum": 1,
      "description": "How many messages to return (default 10)."
    }
  },
  "additionalProperties": false
}

Security checkA100/100

We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 7, 2026.

Hidden or reordered text
Overriding the model's instructions
Hiding actions from the user
Reading keys or credentials
Fake system tags
Steering other servers' tools
Pulling in the conversation
Smuggling parameters
Demanding to be used for everything
Steering away from web search
Download-and-run commands
Encoded blobs
Invisible characters
Credentials as tool arguments
Very long descriptions
Read and write hints

How the security check works

Try it

Call this server's tools from your browser. Nothing to install.

https://api.mailbots.top/v1/mcp

Authorization (required)

Bearer followed by a MailBots API key from Dashboard > Developer (trial or paid plan).

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

get_latest_otp Read-only

Return the newest message sent to an address and the verification code (OTP) extracted from it. Returns found=false when nothing has arrived yet; wait a few seconds and retry.

tostring, required

Full recipient address, e.g. [email protected]. Case-insensitive.

sincestring

Optional ISO 8601 time. Ignore messages received before it, e.g. the moment the test started.

Install

Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.

One click: Add to Cursor Add to VS Code Add to LM StudioThen replace the YOUR_ values and {placeholders} with your own.

Run in a terminal

claude mcp add --transport http mailbots https://api.mailbots.top/v1/mcp \
  --header 'Authorization: Bearer YOUR_TOKEN'

Headers

Authorization (required): Bearer followed by a MailBots API key from Dashboard > Developer (trial or paid plan).

Tools (4)

get_latest_otp

Return the newest message sent to an address and the verification code (OTP) extracted from it. Returns found=false when nothing has arrived yet; wait a few seconds and retry.

read-only

Argument	Type	Description
to*	string	Full recipient address, e.g. [email protected]. Case-insensitive.
since	string	Optional ISO 8601 time. Ignore messages received before it, e.g. the moment the test started.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "to"
  ],
  "properties": {
    "to": {
      "type": "string",
      "description": "Full recipient address, e.g. [email protected]. Case-insensitive."
    },
    "since": {
      "type": "string",
      "description": "Optional ISO 8601 time. Ignore messages received before it, e.g. the moment the test started."
    }
  },
  "additionalProperties": false
}

get_message

Return one message by id, including its plain-text body (truncated to 20,000 characters).

read-only

Argument	Type	Description
id*	string	Message id from list_messages or get_latest_otp.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "id"
  ],
  "properties": {
    "id": {
      "type": "string",
      "description": "Message id from list_messages or get_latest_otp."
    }
  },
  "additionalProperties": false
}

list_domains

List the hostnames this API key can receive mail on, with their status. Any address at an active hostname reaches the inbox.

read-only

No arguments.

Input schema (JSON)

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

list_messages

List recent messages, newest first, optionally only those sent to one address. Returns metadata and the OTP, not the body.

read-only

Argument	Type	Description
to	string	Full recipient address, e.g. [email protected]. Case-insensitive.
limit	integer	How many messages to return (default 10).

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "to": {
      "type": "string",
      "description": "Full recipient address, e.g. [email protected]. Case-insensitive."
    },
    "limit": {
      "type": "integer",
      "maximum": 50,
      "minimum": 1,
      "description": "How many messages to return (default 10)."
    }
  },
  "additionalProperties": false
}

Security checkA100/100

We read every tool's name, description and inputs the way the model will, looking for instructions hidden from you. A clean result means no warning signs, not a guarantee. Scanned Nov 7, 2026.

Hidden or reordered text

Overriding the model's instructions

Hiding actions from the user

Reading keys or credentials

Fake system tags

Steering other servers' tools

Pulling in the conversation

Smuggling parameters

Demanding to be used for everything

Steering away from web search

Download-and-run commands

Encoded blobs

Invisible characters

Credentials as tool arguments

Very long descriptions

Read and write hints

How the security check works