Developer Tools
lumbox.co
Manages temporary email inboxes with CRUD operations, useful for testing and automation.
ENDPOINT 1
https://mcp.lumbox.co/mcp
MCP server metadata
- Name
- lumbox
- Version
- 0.2.2
Known tools 103
pause_inboxPause an inbox so it stops accepting inbound email (senders get a temporary failure).
Potential side effectslist_draftsList agent-drafted replies awaiting human approval (or already approved/rejected).
Inferred read-onlylist_agent_actionsList the tool calls the auto-reply agent made (knowledge base lookups, past-conversation searches, contact lookups) with inputs, outputs, status, and timing.
Inferred read-onlyget_metricsTime-series activity metrics for the org (or one inbox): received, sent, auto_replies, drafts_created, tool_calls, delivered, bounced, complained.
Inferred read-onlycreate_agent_toolRegister an external HTTP tool the auto-reply agent can call to fetch real data or take actions (order lookup, refund, etc).
Potential side effectscreate_projectCreate a project (pod) to group inboxes for one end-customer of your platform.
Potential side effectscreate_project_keyMint an API key sandboxed to a project - it can only see and act on that project's inboxes.
Inferred read-onlyunmark_email_spamRemove the spam flag from an email so it appears again in list_emails.
Potential side effectscheck_email_safetyCheck an email for phishing/spoofing AND prompt-injection before acting on it.
Potential side effectssearch_emailsSearch emails across all inboxes by keyword, sender, category, or label.
Inferred read-onlyverify_domainCheck if DNS records are configured correctly and activate the domain.
Inferred read-onlyconfigure_smtpConfigure a custom SMTP provider for outbound email delivery (BYOS - Bring Your Own SMTP).
Potential side effectstest_smtp_configSend a test email through a configured SMTP provider to verify it works.
Potential side effectscreate_routing_ruleCreate an auto-routing rule that assigns agents to threads based on email properties (sender, subject, category).
Potential side effectscreate_webhookRegister a webhook URL to receive real-time notifications when emails arrive.
Inferred read-onlyconfigure_aiConfigure your own AI provider API key (OpenAI, Anthropic, or Google).
Inferred read-onlysend_marketing_emailSend a marketing email to all ACTIVE contacts in a contact list, using a chosen inbox as the sender.
Potential side effectsbrowser_navigateNavigate to a URL and return a compact accessibility tree (snapshot) of the page.
Inferred read-onlybrowser_clickClick an element by its ref from the last snapshot, then return an updated snapshot.
Inferred read-onlybrowser_selectSelect a dropdown option by value or visible label, then return an updated snapshot.
Inferred read-onlybrowser_load_stateRestore cookies and localStorage from a saved file so the session is already logged in.
Inferred read-onlyskill_signup_with_emailSKILL: Navigate to a signup page, fill the email field with an Lumbox inbox address, submit the form, then wait for a verification email and return the OTP code and/or verification link - all in one tool call.
Potential side effectsskill_login_with_emailSKILL: Navigate to a login page, enter an inbox email address, submit, then wait for the magic link or OTP and return it - all in one call.
Potential side effectsskill_verify_emailSKILL: Wait for a verification email and automatically click the verification link in the browser - all in one call.
Potential side effectsstore_credentialSecurely store a credential (password, API key, TOTP secret) in the encrypted vault.
Inferred read-onlylogin_with_credentialMOST SECURE LOGIN: Navigate to a login page and let Steel auto-inject credentials.
Inferred read-onlyuse_credential_in_browserFALLBACK: Fill a stored credential into a browser form field WITHOUT exposing the value.
Inferred read-onlyget_totp_codeGenerate a current 6-digit 2FA/MFA code from a stored TOTP_SECRET credential, so you can complete a login that requires an authenticator app.
Inferred read-onlyask_knowledgeAnswer a question using the organization's knowledge base (docs added via add_knowledge).
Inferred read-onlylist_knowledgeList documents in the knowledge base (titles, sources, chunk counts).
Inferred read-onlycompare_modelsRun the same prompt across the LLM providers configured for this org and get each answer back with latency and estimated cost, plus which was cheapest and fastest.
Inferred read-onlyask_emailsAsk a natural-language question across every embedded email in the organization.
Potential side effectsask_emailAsk a question about a single email - no retrieval, the email is the entire context.
Potential side effectsget_meeting_transcriptFetch the joined meeting transcript + recording URL once the call is done.
Inferred read-onlyCONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.lumbox]
url = "https://mcp.lumbox.co/mcp"
enabled = true
Claude Code
.mcp.json
{
"mcpServers": {
"lumbox": {
"type": "http",
"url": "https://mcp.lumbox.co/mcp"
}
}
}
Claude Desktop
Settings → Connectors → Add custom connector
Name: lumbox
Remote MCP URL: https://mcp.lumbox.co/mcp
Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"lumbox": {
"url": "https://mcp.lumbox.co/mcp"
}
}
}
Visual Studio Code
.vscode/mcp.json
Add to Visual Studio Code{
"servers": {
"lumbox": {
"type": "http",
"url": "https://mcp.lumbox.co/mcp"
}
}
}
Generic MCP
Client-specific MCP configuration
{
"name": "lumbox",
"transport": "streamable-http",
"url": "https://mcp.lumbox.co/mcp"
}
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
TRUST AND VERIFICATION EVIDENCE
Trust Data Available
BuiltWith Trust API v2 evidence for lumbox.co was fetched 2026-08-24T03:10:08.040Z.
lumbox.co is assessed as Neutral: No suspicious signals found, but no strong positive signal either
Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.