MCP server

An AI coding agent that needs an email address and the message that lands in it. Rather than telling the agent how to call the HTTP API, point it at the Model Context Protocol server on the same host and let it register the address and read the mail itself.

POST https://api.fabricatedemail.com/mcp

Streamable HTTP transport. It takes the same Authorization: Bearer <api-key> as every other endpoint, with the same key rules, the same suspension 403 and the same rate limit. Each tool call counts against the rate limit as one request, also inside a JSON-RPC batch. The server holds no session: each request is answered with a single JSON response.

Connecting a client

Most MCP clients take an HTTP endpoint and a header:

{
  "mcpServers": {
    "fabricatedemail": {
      "type": "http",
      "url": "https://api.fabricatedemail.com/mcp",
      "headers": { "Authorization": "Bearer <api-key>" }
    }
  }
}

Use a key minted for the agent rather than the one your CI uses, so you can revoke it on its own. Revoking a key deletes the addresses it created and their mail.

The tools

Tool	Arguments
`create_address`	`localPart` (optional — a random one of 64 bits is generated without it), `ttlSeconds` (optional, `null` for permanent)
`list_addresses`	—
`delete_address`	`subscriptionId`
`wait_for_message`	`subscriptionId`, `after` (optional), `waitSeconds` (optional, at most 30)
`get_message`	`subscriptionId`, `messageId`
`extract`	`subscriptionId`, `messageId`

Each tool is a thin call to one endpoint of the HTTP API contract, which names the endpoint beside each tool, and answers with that endpoint's JSON response. delete_address, whose endpoint has no body, answers {"deleted": true}.

Worth putting in the agent's instructions

Use the fabricatedemail MCP server for test email.
Always let create_address generate the local part — never invent one. Invented
addresses collide between agents: one agent's registration replaces or blocks
the other's.
Call delete_address as soon as the task is done. Live addresses count against
the account cap across every key, so leaked ones exhaust the cap for CI too.