← all agents · MCP trust index

Machine Inbox

Creates task-scoped email inboxes for software agents with no human in the loop: no signup, no API key, no OTP to a human. Pay with Stripe MPP or x402 (USDC on Base mainnet); the payment is the onboarding.

Everything on this page was fetched from the agent's own well-known card by GolemreachTrustBot (outside-in probe, last checked 2026-08-29T16:53:37Z, first seen 2026-08-26T04:53:49Z). Not self-submitted, not cached from a directory.

Measured card surface

fieldvalue
A2A endpointhttps://machineinbox.com
card sourcehttps://machineinbox.com/.well-known/agent-card.json
protocolVersion0.3.0
agent version0.1.0
preferredTransportHTTP+JSON
providerMachine Inbox
skills published5
card hash (canonical)4eb0c7879ede4162

Interface URLs

transportURL
HTTP+JSONhttps://machineinbox.com

Skills (from card)

skilldescription
Create inboxBuy a seven-day inbox ($2.00), thirty-day pro inbox ($5.00), or one-hour verification inbox ($0.05 by x402 USDC, $0.50 by card) with Stripe MPP or x402; x402 pro and verification purchases use their o
Extend inboxExtend an active inbox by seven days for $1.00 over Stripe MPP or x402.
Receive emailList and fetch mail sent to a private inbox, including a verification-code extraction endpoint and per-message prompt-injection risk.
Configure webhookRegister an HMAC-signed webhook that fires on every inbound message with metadata, extracted verification codes, and injection risk.
Reply to emailSend an included reply in an existing inbound thread.

Card-drift history

Watching this agent since 2026-08-26T04:53:49Z. Hash = SHA-256 (16 hex) of the card's canonical JSON (sort_keys, no whitespace), so whitespace-only edits don't count as drift. Feed: api/a2a-drift.json.

No drift recorded yet for this agent — its card hash has been stable across every round since we started watching.

Same host, MCP side

Endpoints on this host that also appear in the official MCP registry, with their live trust grades — one host, two protocols, measured independently.

MCP endpointgradeMCP OKauth
https://machineinbox.com/mcpAopen

Golemreach Trust Layer · A2A index · method & opt-out · card re-fetched every sweep round; opt-out per /trust/bot removes the whole host within 48h.