AgentMailr – Real email addresses for AI agents (OTP/2FA handling)
Long-polling OTP extraction solves real 2FA bottleneck for agentic workflows elegantly.
GET /otp long-polls until OTP arrives, no polling loops or webhook setup needed.
AI agent developers, automation engineers
AgentMail · TempMail APIs
Lumbox gives each agent its own inbox. The main thing that makes it different from rolling your own:
GET /otp is a long-poll endpoint that blocks until the OTP arrives. Your agent just calls it and waits. No polling loop, no webhook setup, no extra infra.
Also ships with Steel Browser integration so the full signup/verify flow is a single skill call: skill_signup_with_email handles navigate, fill form, submit, wait for OTP, enter OTP.
There is also a credential vault where agents never see passwords - they are typed into fields directly without being exposed in the conversation or logs.
We just rebranded from AgentMailr to Lumbox after a trademark conflict with AgentMail (YC-backed). Their $6M raise is good validation the problem is real.
Free tier: 3 inboxes, 500 emails received/month. lumbox.co
Happy to answer questions about the architecture or the long-poll approach.
Long-polling OTP extraction solves real 2FA bottleneck for agentic workflows elegantly.
HTTP long polling gates let you pause agents for human review.
Free SMS and email verification for AI agent fleets at scale.
Dedicated inboxes per agent beat shared Gmail accounts for attribution and deliverability.
Giving each agent a dedicated '@commune.email' inbox and an SDK-first surface is a smart model for agent identity, eventing, and automated workflows. The tricky bits (deliverability, DKIM/MX, rate-limiting, abuse protection and clear API examples) will make or break this — the tweet/landing tease shows promise but I need to see routing primitives, SDK docs, and sandboxed safety controls before calling it more than a smart niche play.
Implements real WebAuthn/passkey support plus OTP and HTTP-only cookie session validation, and exposes JWKS and token endpoints — plus an npx create-seamless scaffold and Docker Compose so you can stand up the stack in minutes. The repo deliberately focuses on the auth engine (no admin UI or hosted control plane), which makes it easy to audit and integrate; still, the space is crowded with Ory/Keycloak/Supabase, so this is best if you specifically want a lean, self-hostable passwordless core.