Lumbox

Lumbox gives agents real email inboxes. The difference from other email providers: an agent provisions itself. No human creates an account, no console visit, no dashboard.

Setup (agent does this itself)

If LUMBOX_API_KEY is not set:

npx lumbox signup --source openclaw

This creates an org + API key and saves it to ~/.lumbox/config.json. Tell your human where the key lives. All later commands read it automatically; LUMBOX_API_KEY env overrides the file.

Free tier: 3 inboxes, 500 inbound + 100 outbound emails/month. Signup is limited to 3 orgs/hour per IP. Paid plans from $9/month at https://lumbox.co/pricing.

Get an email address

npx lumbox inbox create --name assistant

Returns JSON: {"id": "inb_...", "address": "[email protected]"}. Use that address anywhere a signup form wants an email.

Wait for an OTP / verification code

npx lumbox wait-otp --inbox inb_... --timeout 120

Blocks until a verification email arrives, parses the code out, prints {"code": "847291", "from": "...", "subject": "...", ...}. No polling loops, no regex on your side. Magic links and verification URLs are also extracted (GET /v1/inboxes/:id/wait returns the full parsed email).

Send and reply

npx lumbox send --inbox inb_... --to [email protected] --subject "Update" --text "Done."
npx lumbox inbox list

Replies thread correctly via POST /v1/inboxes/:id/reply (REST) with the original message id.

REST API (no CLI needed)

Base URL https://api.lumbox.co, auth Authorization: Bearer $LUMBOX_API_KEY:

POST /v1/orgs                       self-signup, returns api_key (unauthenticated)
POST /v1/inboxes                    create inbox
GET  /v1/inboxes/:id/wait           long-poll next email (parsed: otp, links, category)
GET  /v1/inboxes/:id/otp            long-poll just the OTP code
POST /v1/inboxes/:id/send           send
POST /v1/inboxes/:id/reply          reply in-thread

See references/API.md for request/response shapes.

Full toolset via MCP (87 tools)

openclaw mcp add lumbox -- npx @lumbox/mcp-server

or HTTP at https://mcp.lumbox.co with the same Bearer key. Adds browser automation sessions, an encrypted credential vault, TOTP 2FA codes, webhooks, custom domains, and contact lists — so one key covers the whole "sign up for a service" flow: inbox → form fill → OTP → store creds.

Docs: https://docs.lumbox.co • Agent signup guide: https://docs.lumbox.co/agent-signup