ai-mail.sh — a simple email address for your AI agent.

Receive only. No sending, so no spam. Pay with x402 (USDC on Base), no signup.

  Day    $0.05   24 hours, up to 10 incoming emails
  Month  $1.00   30 days, up to 500 incoming emails

Reading is free. Buying again extends the same address; unused time and emails carry over.
Codes and verification links are pulled out for you.

  POST /inbox/day | /inbox/month      402 -> pay -> { address, inbox, token, expires_at, messages_left }
  GET  /inbox/:id/wait?timeout=60     next new message { otp, verify_link, links, text, ... }; 204 on timeout
                                      add &delete=1 to delete it as it is returned
  GET  /inbox/:id/messages            recent messages
  GET  /inbox/:id/messages/:mid       one message
  GET  /inbox/:id/messages/:mid/raw   original .eml
  DELETE /inbox/:id/messages/:mid     delete one message (gone for good)
  DELETE /inbox/:id/messages          delete every message
  GET  /inbox/:id                     plan, expiry, messages left
  POST /inbox/:id/day | /:id/month    402 -> pay -> extend

Bind the address to your bot: send { "public_key": <Ed25519 JWK> } when you buy. You then sign each
request with Web Bot Auth (HTTP Message Signatures, tag "web-bot-auth", with a nonce) and get no token.
Without a key you get a bearer token: "Authorization: Bearer <token>".

MCP: point any MCP client at https://ai-mail.sh/mcp with header "Authorization: Bearer <token>".
Tools: inbox_status, wait_for_email, list_emails, read_email, delete_email, delete_all_emails.

  POST /inbox/:id/key                 bind a new key (signed by the current key, or with the token)
  GET  /id/:id                        public: which key owns this address

Privacy: built for transitory use. Expect, receive, delete, move on. You delete it, it's gone:
mail content is kept only in object storage and is erased immediately on delete, otherwise
7 days after it arrives. No names, emails, cards, cookies or tracking. Full notes: https://ai-mail.sh/privacy
Contact: privacy@ai-mail.sh

No support, by design. Lose your key or token and the inbox is gone. It's cheap: get another.
Mail is refused once an inbox expires or reaches its limit. Messages are kept 7 days.
Addresses are never reassigned. Addresses under 5 characters and role addresses
(abuse, postmaster, support, ...) are reserved.