Ephemeral mailboxes and a mock OAuth IdP for testing email and auth flows — 39 API-driven tools covering mailboxes, mails, attachments, domains, teams, and mock identities.
Scored across 40 tools
Tools are cleanly partitioned by resource prefix (archived, attachments, domains, identities, mailboxes, mails, oauth.clients, team.*), so most purposes are unambiguous. The only mild overlap is between archived.* (a mailbox state) and mailboxes.*, plus the parallel delete/delete_bulk pairs, but descriptions clarify these boundaries.
Every tool follows a strict namespace.action snake_case pattern (mailboxes.create, mails.delete_bulk, oauth.clients.rotate_secret, team.members.add). Sub-resources use dotted namespaces consistently, with no camelCase or verb-style drift across all 40 tools.
40 tools is heavy and sits above the comfortable 3-15 range, though the server legitimately spans nine distinct sub-domains (mailboxes, mails, attachments, domains, identities, OAuth clients, team, archived). Each tool earns its place, but the surface is large enough to be borderline for an agent to navigate.
Coverage is broad and mostly complete: full CRUD for identities, oauth.clients, team members, and lifecycle handling for mailboxes (create/delete/delete_bulk) and mails (inject/list/get/delete). Minor gaps exist—no mailbox update, no team member role update, no attachments update—but core workflows have no dead ends.
Permanently delete an archived mailbox.
Inputs: mailboxId (required). Returns: status, http_status
Fetch a single archived mailbox by ID.
Inputs: mailboxId (required). Returns: id, alias, owner, domain, +6 more
List the tenant's archived (expired but recoverable) mailboxes.
Inputs: no named parameters. Returns: items
Reactivate an archived mailbox back to active state.
Inputs: mailboxId (required), expiresIn. Returns: id, alias, owner, domain, +6 more
Attach a file to a test-injected email (base64 payload).
Inputs: data (required), mailId (required), filename (required), mailboxId (required), +3 more. Returns: id, filename, expiresAt, sizeBytes, +1 more
Delete a single attachment.
Inputs: mailId (required), mailboxId (required), attachmentId (required). Returns: status, http_status
Delete several attachments of one email at once.
Inputs: ids (required), mailId (required), mailboxId (required). Returns: status, http_status
Download an attachment. The file contents are returned base64-encoded in the JSON "data" field.
Inputs: mailId (required), mailboxId (required), attachmentId (required). Returns: id, data, filename, expiresAt, +2 more
List the attachments of an email (metadata only).
Inputs: mailId (required), mailboxId (required). Returns: items
Delete a registered custom domain.
Inputs: domainId (required). Returns: status, http_status
List the tenant's custom domains with their DNS verification status.
Inputs: no named parameters. Returns: items
Register a new custom domain. DNS records (TXT token + MX) must then be added before verification can succeed.
Inputs: name (required). Returns: id, name, status, mxTarget, +2 more
Trigger DNS verification (TXT + MX) of a registered domain.
Inputs: domainId (required). Returns: id, name, status, mxTarget, +2 more
Create a mock identity bound to a mailbox for OAuth flow testing.
Inputs: clientId (required), mailboxAddress (required), name, claims, +3 more. Returns: id, name, clientId, username, +2 more
Delete a mock identity.
Inputs: identityId (required). Returns: status, http_status
Fetch a single mock identity by ID.
Inputs: identityId (required). Returns: id, name, clientId, username, +2 more
List the tenant's mock identities, optionally filtered by OAuth client or mailbox address.
Inputs: clientId, mailboxAddress. Returns: items
Update a mock identity: profile fields, isActive (activate/deactivate), emailVerified, and custom claims merged into the ID token and userinfo.
Inputs: identityId (required), name, claims, isActive, +3 more. Returns: id, name, clientId, username, +2 more
Create a new temporary mailbox. The domain defaults to the tenant's default domain; the owner is always the API key's owner.
Inputs: tag, domain, expiresIn, recoverable, +1 more. Returns: id, alias, owner, domain, +6 more
Delete a mailbox and its contents by ID.
Inputs: mailboxId (required). Returns: status, http_status
Delete several mailboxes at once by ID.
Inputs: ids (required). Returns: status, http_status
Fetch a single mailbox by ID.
Inputs: mailboxId (required). Returns: id, alias, owner, domain, +6 more
List the tenant's active mailboxes (owner is derived from the API key). Optionally look up a single mailbox by exact address.
Inputs: address. Returns: items
Delete a single email.
Inputs: mailId (required), mailboxId (required). Returns: status, http_status
Delete several emails of one mailbox at once.
Inputs: ids (required), mailboxId (required). Returns: status, http_status
Fetch a single email by ID, including body and attachment metadata.
Inputs: mailId (required), mailboxId (required). Returns: id, body, sender, subject, +2 more
Inject a simulated inbound email into a mailbox (multipart upload). No external mail is sent; use this to simulate inbound mail for flow testing.
Inputs: body (required), sender (required), subject (required), mailboxId (required), +2 more. Returns: id, body, sender, subject, +2 more
List the emails in a mailbox, newest first.
Inputs: mailboxId (required). Returns: items
Register an OAuth client for mock identity flows. The plaintext clientSecret is returned once at creation.
Inputs: name (required), redirectUris (required), providerType, providerLabel. Returns: name, clientId, createdAt, clientSecret, +3 more
Delete an OAuth client by its public client ID.
Inputs: clientId (required). Returns: status, http_status
Fetch a single OAuth client by its public client ID.
Inputs: clientId (required). Returns: name, clientId, createdAt, clientSecret, +3 more
List the tenant's OAuth clients for mock identity testing.
Inputs: no named parameters. Returns: clients
Rotate an OAuth client's secret. The new plaintext secret is returned once.
Inputs: clientId (required). Returns: name, clientId, createdAt, clientSecret, +3 more
Create a team invitation for an email address (SMTP invite is sent by the team service).
Inputs: email (required). Returns: id, email, status, createdAt
Revoke a team invitation.
Inputs: invitationId (required). Returns: status, http_status
List the tenant's team invitations.
Inputs: no named parameters. Returns: items
Add a team member directly (no invitation flow).
Inputs: email (required), status (required), user_id (required), username (required). Returns: id, email, status, user_id, +2 more
Remove a team member.
Inputs: memberId (required). Returns: status, http_status
Fetch a single team member by ID.
Inputs: memberId (required). Returns: id, email, status, user_id, +2 more
List the tenant's team members.
Inputs: no named parameters. Returns: items
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Add one secure layer between your agents and this server.