Mailsac MCP server
Commit Nov 13, 2026Provides disposable test inboxes for AI agents to verify sign-up confirmations, password resets, and magic links.
Also known as mailsac/mailsac-mcp
- Stars
- 0
- Tools
- 6
- Downloads, 30 days
- —
- Latest version
- —
- Last commit
- Nov 13, 2026
- License
- MIT
What is Mailsac MCP?
Mailsac provides disposable test inboxes for AI agents to verify sign-up confirmations, password resets, and magic links. It exposes 6 tools, such as create_test_address, wait_for_email, list_emails.
Summary generated from the project's README
About Mailsac MCP server
Verifying sign-up confirmations, password resets, and magic links through disposable inboxes is what this server enables for AI coding agents. Developers using Claude Code, Cursor, VS Code, or Claude Desktop can connect their agents to Mailsac to automate the testing of email-based authentication flows. The server runs locally via stdio using npx and requires a Mailsac API key to function.
Users can manage email testing through specific tools like create_test_address for generating unique identities and wait_for_email to capture incoming messages, links, or one-time codes. The server also supports listing, reading, and deleting emails to maintain a clean testing environment. While public @mailsac.com addresses are available for made-up data, developers can configure a private domain via the MAILSAC_DOMAIN variable for more sensitive staging environments.
Each interaction consumes Mailsac operations, with the free plan providing 1,500 operations per month. The wait_for_email tool checks for new mail every 3 seconds by default, which typically uses between 2 and 5 operations per successful check.
What you can do with it
- 1Automate account registration testingAn agent can create a unique email address, fill out a sign-up form, and verify the confirmation link.
- 2Debug authentication email flowsDevelopers can use the server to write and troubleshoot end-to-end tests for password resets and magic links.
- 3Extract one-time codes from emailsThe agent can wait for a specific email to arrive and automatically identify candidate one-time codes.
- 4Test with private domainsTeams can use their own subdomains to test email flows that involve real customer names in staging environments.
Written from the project's README. Every use case is checked against a quote from it.
Mailsac MCP tools 6
Detected from the READMEcreate_test_addresswait_for_emaillist_emailsread_emaildelete_emailslist_domains
| create_test_address | — | |
| wait_for_email | — | |
| list_emails | — | |
| read_email | — | |
| delete_emails | — | |
| list_domains | — |
Configuration
MAILSAC_API_KEY
| Name | Description | |
|---|---|---|
| MAILSAC_API_KEY | — |
Automated checks
Ran Nov 14, 2026Full report →Not verified yet. A server needs a score of 80, no serious finding, and enough data for us to check. How checks work · What to fix for more points
- Source repository linked and reachablemailsac/mailsac-mcp is public and reachablegithub.com/mailsac/mailsac-mcp ↗Pass
- Package names this repository as its sourceNot checked
- Build provenance (Sigstore attestation)Not checked
- Open source license (OSI)MITspdx.org/licenses/MIT.html ↗Pass
- Commit or release in the last yearLast commit or release 2026-11-13github.com/mailsac/mailsac-mcp ↗Pass
- OpenSSF ScorecardNot checked
- Package name not close to a popular packageNot checked
- No critical advisory in the package or its dependenciesNot checked
- No hidden instructions to the model6 tool descriptions and the README read; no override phrases, credential paths or hidden charactersPass
- Destructive tools are labelledNot checked
- Remote endpoint answers the MCP handshakeNot checked
README
View on GitHubMailsac MCP server
The official Model Context Protocol server for Mailsac. It gives AI coding agents (Claude Code, Cursor, VS Code, Claude Desktop and other MCP clients) disposable test inboxes, so an agent can check the email your application sends: sign-up confirmations, password resets, magic links and one-time codes.
A typical conversation:
Sign up for a new account on http://localhost:3000 and confirm it by email.
The agent creates a unique address with Mailsac, fills in your sign-up form, waits for the confirmation email, follows the link, and tells you what it found. The same tools help it write and debug end-to-end tests for those flows.
Read the setup guide in the Mailsac docs or the announcement on the Mailsac blog.
Tools
| Tool | What it does | Mailsac operations |
|---|---|---|
create_test_address |
A new unique address, e.g. signup-mf3k2a1b-9c41d2@mailsac.com. Nothing to create first. |
none |
wait_for_email |
Waits until a matching email arrives (optionally by subject, sender or time), then returns the subject, text, links, the most likely confirm/reset/login link (actionLink) and candidate one-time codes. |
1 per check, plus 1 to read |
list_emails |
Emails stored at an address, newest first. | 1 |
read_email |
One email as text (with links and codes), HTML, raw MIME or headers. | 1 |
delete_emails |
Delete one email, or all emails at an address. | 1 per call or message |
list_domains |
Your account's private domains, to use with create_test_address. |
1 |
Set up
You need a Mailsac API key. The free plan works: create an account, then create a key.
Claude Code
claude mcp add mailsac -e MAILSAC_API_KEY=your-key -- npx -y @mailsac/mcp
Cursor (.cursor/mcp.json), Claude Desktop (claude_desktop_config.json) and other clients that use the
same format:
{
"mcpServers": {
"mailsac": {
"command": "npx",
"args": ["-y", "@mailsac/mcp"],
"env": { "MAILSAC_API_KEY": "your-key" }
}
}
}
VS Code (.vscode/mcp.json):
{
"servers": {
"mailsac": {
"type": "stdio",
"command": "npx",
"args": ["-y", "@mailsac/mcp"],
"env": { "MAILSAC_API_KEY": "your-key" }
}
}
}
Settings
| Variable | Default | Purpose |
|---|---|---|
MAILSAC_API_KEY |
(required) | Your Mailsac API key |
MAILSAC_DOMAIN |
mailsac.com |
Domain for new test addresses. Set it to your private domain. |
MAILSAC_API_URL |
https://mailsac.com/api |
API base URL |
Public inboxes and private domains
Addresses at @mailsac.com are public: anyone who guesses an address can read its mail. They are ideal for
made-up test data and need no setup. For anything real, such as a staging environment that sends real
customer names, use a private domain: your own subdomain (for example test.example.com) or a zero-setup
yourteam.msdc.co subdomain from the domains page. Set MAILSAC_DOMAIN and every
new address uses it.
Operations and limits
Each API call uses one Mailsac operation. wait_for_email checks every 3 seconds
by default, so a message that arrives within a few seconds costs about 2 to 5 operations. The free plan
includes 1,500 operations a month; paid plans start at 25,000.
How Mailsac knows this is the MCP server
Requests from this server carry Mailsac-Client: mcp and a mailsac-mcp/<version> user agent. Mailsac
counts these in aggregate to see how many people use Mailsac through AI agents. Email content is never part of that
count.
Develop
npm install
npm test # builds, then runs the tests with a fake Mailsac API
MAILSAC_API_KEY=your-key node dist/index.js # runs the server over stdio
License
MIT
Mailsac MCP questions
What tools does Mailsac MCP provide?
It exposes 6 tools, including create_test_address, wait_for_email, list_emails, read_email, delete_emails.
What can the Mailsac MCP server be used for?
It allows AI agents to check emails sent by your application, such as sign-up confirmations, password resets, magic links, and one-time codes.
How much does it cost to use?
The free plan includes 1,500 operations per month, while paid plans start at 25,000 operations.
Are @mailsac.com addresses private?
No, addresses at @mailsac.com are public and anyone who guesses an address can read its mail. For sensitive data, you should use a private domain.