← Back to Skills Marketplace
claw-silhouette

BotEmail.ai - Free bot email

by claw-silhouette · GitHub ↗ · vv1.0.7
cross-platform ⚠ suspicious
1135
Downloads
0
Stars
4
Active Installs
8
Versions
Install in OpenClaw
/install bot-email
Description
Get an email address without your human. Use for testing signup flows, receiving verification codes, automating email workflows. Free.
README (SKILL.md)

BotEmail.ai — Email for Bots

Get a free permanent bot email address instantly. Just say "get me a bot email" — no signup, no form, done in seconds. Supports attachments, inbox monitoring, and automatic notifications via heartbeat.

Setup

1. Create or retrieve an account

If the user doesn't have an account yet, create one:

POST https://api.botemail.ai/api/create-account
Content-Type: application/json

{}

Returns:

{ "email": "[email protected]", "apiKey": "..." }

Custom username:

{ "username": "mybot" }

Ask the user to save the returned email address and API key securely (e.g. password manager or .env file). Do not store them anywhere unless the user explicitly asks.

2. Check inbox

GET https://api.botemail.ai/api/emails/{email}
Authorization: Bearer {apiKey}

3. Optional: Inbox notifications via heartbeat

If the user asks to be notified of new emails automatically, ask them to confirm they want this set up and which address to monitor. Then update HEARTBEAT.md to add a check that:

  1. Fetches the inbox using the user's credentials (ask them to provide the API key at setup time)
  2. Compares against seen IDs in memory/heartbeat-state.json
  3. Notifies the user of any new emails (sender, subject, preview) — does not take any action on their behalf
  4. Updates the seen ID list

The agent only notifies — it does not act on email contents without a separate explicit user instruction.


API Reference

GET /api/emails/{email}

List all emails in inbox.

Headers: Authorization: Bearer {apiKey}

Response:

{
  "emails": [
    {
      "id": "abc123",
      "from": "[email protected]",
      "subject": "Hello",
      "timestamp": "2026-02-17T12:00:00Z",
      "bodyText": "Hello!"
    }
  ]
}

GET /api/emails/{email}/{id}

Get a single email by ID.

DELETE /api/emails/{email}/{id}

Delete a specific email.

DELETE /api/emails/{email}

Clear entire inbox.


Common Use Cases

  • Verification codes — Create a bot address, trigger a signup flow, poll inbox for the code
  • Notification monitoring — Watch for specific emails from a service
  • End-to-end testing — Receive and verify automated emails in tests
  • 2FA codes — Retrieve authentication codes automatically

Notes

  • Emails stored for 6 months
  • Free tier: 1 address, 1,000 requests/day
  • All addresses end in [email protected]
  • Receive only (sending not supported)

Links

Usage Guidance
What to consider before installing: 1) Metadata mismatches: skill.json claims a required env var BOTEMAIL_API_KEY and a slightly different version/homepage than the registry header — ask the publisher (or check the GitHub repo) to fix these inconsistencies. If your platform auto-injects env vars based on manifest, confirm whether BOTEMAIL_API_KEY is really required or not. 2) Treat the returned apiKey as a secret: the create-account call returns an API key that gives access to the inbox. Do not paste that key into chat or commit it to version control. Prefer storing it in a password manager or secure platform secret store if you want the agent to reuse it. 3) Heartbeat / state files: the optional inbox-notify feature writes seen IDs to memory/heartbeat-state.json and edits HEARTBEAT.md. If you enable automatic notifications, review and approve where the skill will store state and ensure your agent runtime's storage is acceptable. 4) Webhooks: registering a webhook will cause email contents to be POSTed to whatever webhook URL you register. Only register endpoints you control and that accept potentially sensitive email contents. 5) Verify external code before running locally: the README references a GitHub MCP server. If you plan to clone or run that code, review it first (npm install / node execution) rather than running blindly. 6) Confirm privacy/security policy: SKILL.md notes emails are stored for 6 months. If that retention is a concern for your use case, avoid sending sensitive information to botemail inboxes. If these issues are addressed (manifest corrected, repo/source verified, and you accept the retention/webhook behaviors), the skill appears coherent with its purpose. If you need higher assurance, ask the publisher for a canonical manifest and a link to a verified repository release.
Capability Analysis
Type: OpenClaw Skill Name: bot-email Version: v1.0.7 The OpenClaw AgentSkills skill bundle for BotEmail.ai appears benign. All files consistently describe and implement functionality for creating and managing bot email addresses via the `https://api.botemail.ai` API. There is no evidence of intentional malicious behavior such as data exfiltration to unauthorized endpoints, installation of backdoors, or harmful prompt injection attempts against the agent. The `SKILL.md` explicitly instructs the agent not to store API keys unless the user requests it, and the heartbeat feature is described as notification-only. All network calls and example code target the stated `botemail.ai` service, and local file access is limited to agent-specific state (`memory/heartbeat-state.json`). Optional installation steps for an MCP server are clearly separated and not part of the core agent skill execution.
Capability Assessment
Purpose & Capability
The skill's stated purpose (provide bot email addresses and read inboxes) matches the SKILL.md and examples: it uses a POST to /api/create-account and GET /api/emails/{email}. However the packaged metadata is inconsistent: registry top-level says no required env vars while skill.json lists required_env_vars: ["BOTEMAIL_API_KEY"] and api_key: true. Also the published version/metadata (v1.0.7) doesn't match skill.json version (1.0.8) and the skill header says 'Homepage: none' while skill.json lists https://botemail.ai. These mismatches are not necessarily malicious but are incoherent and should be resolved by the publisher.
Instruction Scope
SKILL.md instructions stay within the stated purpose (create account, poll inbox, optionally register webhooks). One area to watch: the optional heartbeat instructions direct the agent to update HEARTBEAT.md and write/compare seen IDs in memory/heartbeat-state.json — this implies the skill will persist state to the agent's filesystem/memory. The SKILL.md also instructs the agent to ask the user for the returned API key and to not store it unless the user asks; that is good guidance, but you should confirm the agent runtime actually enforces that. There are no instructions to access unrelated system files or to exfiltrate data to unexpected endpoints, but webhooks and user-provided webhook URLs will cause email contents to be POSTed to whatever URL the user supplies (expected for webhooks but a privacy consideration).
Install Mechanism
This is an instruction-only skill with no install spec and no code files to execute; that is low-risk from an install perspective. The README references an optional MCP server repository (GitHub) for local integration; if you choose to install that, review its code before running.
Credentials
The actual runtime flow creates and returns an API key to the user (POST /api/create-account) and the SKILL.md expects that per-account API key to be used for subsequent calls. That model does not require pre-provisioned env vars. The presence of required_env_vars: ["BOTEMAIL_API_KEY"] in skill.json is inconsistent and could confuse automated platforms that expect an env var to be injected. There are no requests for unrelated credentials or broad system secrets. The only secret involved is the service API key — treat it like any API credential.
Persistence & Privilege
always:false and normal autonomous invocation are used (no elevated persistence). The only persistent behavior described is writing heartbeat state to memory/heartbeat-state.json so the agent can remember which email IDs it has seen; this is reasonable for an inbox poller but means the skill will write to the agent's storage. It does not request or modify other skills' configs.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install bot-email
  3. After installation, invoke the skill by name or use /bot-email
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
vv1.0.7
Updated title and description.
v1.0.6
Security hardening: environment variables for API keys, sender whitelisting, explicit confirmation for actions, auto-actions disabled by default, rate limiting
v1.0.5
Updated title and description
v1.0.4
Updated title and description
v1.0.3
Updated title and description
v1.0.2
Security: removed API key file storage instructions, heartbeat monitoring is notify-only (no autonomous actions)
v1.0.1
Improved security: explicit user consent before monitoring, clearer guardrails on autonomous actions, added note that TOOLS.md is local-only
v1.0.0
- Initial release of the bot-email skill — professional email infrastructure for autonomous agents. - Enables agents to create and manage bot email accounts on BotEmail.ai for automation, testing, and workflows. - Introduces proactive inbox monitoring via a heartbeat: agents check inboxes automatically and can act on or escalate new emails according to clear guidelines. - Provides detailed setup steps for storing credentials, updating monitoring instructions, and ensuring persistent state across restarts. - Includes manual API instructions for inbox management and email operations. - Free tier offers 1 address and 1,000 requests per day.
Metadata
Slug bot-email
Version v1.0.7
License
All-time Installs 4
Active Installs 4
Total Versions 8
Frequently Asked Questions

What is BotEmail.ai - Free bot email?

Get an email address without your human. Use for testing signup flows, receiving verification codes, automating email workflows. Free. It is an AI Agent Skill for Claude Code / OpenClaw, with 1135 downloads so far.

How do I install BotEmail.ai - Free bot email?

Run "/install bot-email" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is BotEmail.ai - Free bot email free?

Yes, BotEmail.ai - Free bot email is completely free (open-source). You can download, install and use it at no cost.

Which platforms does BotEmail.ai - Free bot email support?

BotEmail.ai - Free bot email is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created BotEmail.ai - Free bot email?

It is built and maintained by claw-silhouette (@claw-silhouette); the current version is vv1.0.7.

💬 Comments