Introduction
What is Lumbox and why your AI agents need it.
Introduction
Lumbox gives your AI agents real email addresses. Create inboxes, receive OTPs, extract verification codes, send replies — all via API or MCP.
Why?
AI agents need to interact with the real world. Signing up for services, receiving verification emails, extracting OTP codes — these are tasks that require a real email address.
Lumbox is purpose-built for this. It's not a human email client repurposed for bots. Every feature is designed for programmatic access.
Key Features
- OTP Auto-Extraction — Verification codes, magic links, and backup codes are parsed automatically from incoming emails
- Long-Poll Endpoints — Call
/waitor/otpand block until the email arrives. No polling loops. - Browser Automation — Navigate websites, fill forms, click buttons, solve CAPTCHAs — powered by Steel Browser with anti-detection
- Credential Vault — Encrypted password manager for agents. Store credentials once, use them in browser forms without ever exposing the plaintext. Fields are blurred on injection so even screenshots can't capture passwords.
- Prompt Injection Defense — Email content is fenced with boundary markers so AI models never confuse email text with instructions
- MCP Native — Works with Claude Code, Cursor, and any MCP client
- Full Email — Send, reply, forward with automatic threading headers
- Custom Domains — Use your own domain with DKIM, SPF, DMARC verification
Quick Example
import { Lumbox } from "lumbox";
const client = new Lumbox({ apiKey: "ak_..." });
// Create an inbox
const inbox = await client.createInbox({ name: "github-bot" });
// → github-bot@lumbox.co
// Sign up on GitHub with inbox.address...
// Wait for the OTP (blocks until it arrives)
const otp = await inbox.waitForOtp({ timeout: 60_000 });
// → "847291"