One credential
The creation response returns an address, inbox ID, expiry time, and bearer token. Machine Inbox stores the token hash.
TEMPORARY EMAIL API FOR AGENTS
A mailbox with the same lifetime as the job.
Create an address for one agent run, keep its bearer token in the run state, and let the mailbox expire after seven days. You can delete it sooner through the API.
- Retention
- 7 days
- Storage
- 25 MiB
- Message cap
- 100
- Message size
- 5 MiB
LIFECYCLE
Your code owns the mailbox lifecycle.
HTTP access
Poll messages, fetch parsed bodies, download the original RFC 822 message, and retrieve attachments by index.
Revoke and erase
DELETE revokes the token. Cloudflare Workers cleanup removes D1 message rows and R2 objects.
BOUNDARIES
Temporary does not mean anonymous outbound mail.
Machine Inbox can answer an inbound message when Cloudflare records an aligned SPF, DKIM, or DMARC identity. It blocks arbitrary recipients, custom sender addresses, CC, BCC, and reply attachments.
| Capability | Included | Boundary |
|---|---|---|
| Inbound email | Text, HTML, raw MIME, attachments | 100 messages and 25 MiB per inbox |
| Read API | List, fetch, download, paginate | Bearer token required |
| Replies | Authenticated inbound thread, included | 20 per UTC day |
| Deletion | Early API deletion or expiry | Mail is erased; x402 settlement records on Base stay public |