MCP email server
The Model Context Protocol is how AI tools gain capabilities, and Tempx's MCP server gives any client a private, disposable mailbox: real inbound mail through our MX, tools to list, search and read it, a blocking wait built for verification codes, and a capture-only send side for testing outgoing mail.
Connect
Claude Code / Claude Desktop / ChatGPT connectors: browser pairing — the client opens tempx.uk, you approve one inbox, one permission set and one expiry. No token in chat, no config file secrets:
claude mcp add --transport http tempx https://tempx.uk/mcpCustom agents and automations: mint a tmcp_ token from your account (or let an agent do it via pairing) and use the static-header config:
{
"mcpServers": {
"tempx": {
"url": "https://tempx.uk/mcp",
"headers": { "Authorization": "Bearer tmcp_YOUR_TOKEN_HERE" }
}
}
}Tool surface
| Tool | What it does |
|---|---|
list_inboxes / get_inbox | see the inbox (or inboxes) the connection may touch |
list_emails | recent messages: sender, subject, preview, timestamps |
get_email | full message body — HTML and text |
search_emails | filter by sender, subject or content |
wait_for_email | blocking long-poll (5–175 s) — returns as soon as a matching message arrives |
send_email | capture-only send (send permission) — stored in the inbox, never delivered |
create_smtp_credential | mint a tmtp_ SMTP credential for the same inbox (send permission) |
The verification loop, end to end
# what an agent does with these tools, in order:
# 1. fill the signup form with the paired inbox address
# 2. submit the form
# 3. call wait_for_email(from="noreply@example.com",
# subject_contains="verify")
# -> the tool blocks until the message actually arrives
# 4. read the 6-digit code from the message
# 5. enter it, submit, confirm the account is activeBecause wait_for_email blocks server-side, the agent burns no polling cycles and no tokens on sleep-retry loops — the tool returns exactly when the mail lands.
Security model, in short
- One inbox per connection — a leaked token exposes a disposable inbox, not a mailbox.
- Hashed credentials, one-click revocation from the account page.
- Expiring by default — connections and inboxes both age out.
- Untrusted input — message bodies are data, not instructions; agents should treat them accordingly.
Give your agent a mailbox
One command to pair, eight tools to use, zero servers to run.
Connect your agent