← MCP Registry Integrity Report
bot.mailbox/mailbox
Verdict: CRITICAL findings present. Endpoint https://mailbox.bot/api/mcp. Tools now: 47 (58 ever seen). Changes recorded: 58. Findings: 13 high, 2 critical, 8 low. Last probe: OK at 2026-10-22T18:17 UTC. JSON
Current tools
advance_test_outbound_mail · cancel_outbound_mail · create_test_outbound_mail · create_webhook_endpoint · get_agent_inbox_activity · get_agent_inbox_context · get_agent_inbox_handling · get_agent_inbox_scan · get_agent_inbox_sources · get_facility_messages · get_inbound_activity · get_inbound_item · get_inbound_item_sources · get_inbound_mail · get_inbound_pages · get_mailbox · get_mailbox_md · get_outbound_mail · get_postal_thread · get_usage · list_agent_inbox · list_agent_inbox_scans · list_facility_conversations · list_inbound_forwarding_addresses · list_inbound_items · list_inbound_mail · list_outbound_mail · list_postal_threads · list_webhook_deliveries · list_webhook_endpoints · propose_agent_inbox_handling · propose_mailbox_md_edit · quote_inbound_forward · quote_outbound_mail · replay_webhook_delivery · report_agent_inbox_outcome · request_inbound_action · rotate_webhook_endpoint_secret · search_inbound_items · seed_agent_inbox_sandbox · send_facility_message · send_outbound_mail · send_text_letter · test_webhook_endpoint · test_webhook_endpoint_with_sample · update_webhook · update_webhook_endpoint
Findings (47)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-22 | get_mailbox | cross_tool_reference | high | references sibling tool 'list_inbound_forwarding_addresses' |
| 2026-10-22 | get_mailbox_md | model_directed_instruction | high | Call this on startup and cache the version — you must pass it to send_outbound_mail for sync verification. |
| 2026-10-22 | get_mailbox_md | cross_tool_reference | high | references sibling tool 'get_mailbox' |
| 2026-10-22 | send_outbound_mail | cross_tool_reference | high | references sibling tool 'get_mailbox' |
| 2026-10-22 | list_agent_inbox | secret_material_reference | high | itches, current member approval, assignment, credential environment and SQL authorization are shared with REST. Never su |
| 2026-10-22 | list_agent_inbox | cross_tool_reference | high | references sibling tool 'get_agent_inbox_sources' |
| 2026-10-22 | get_agent_inbox_context | secret_material_reference | high | itches, current member approval, assignment, credential environment and SQL authorization are shared with REST. Never su |
| 2026-10-22 | get_agent_inbox_context | cross_tool_reference | high | references sibling tool 'get_mailbox' |
| 2026-10-22 | get_agent_inbox_sources | user_concealment | critical | ace these exact uncertain text spans; do not silently repair or claim perfect OCR. |
| 2026-10-22 | get_agent_inbox_sources | secret_material_reference | high | itches, current member approval, assignment, credential environment and SQL authorization are shared with REST. Never su |
| 2026-10-22 | get_agent_inbox_sources | cross_tool_reference | high | references sibling tool 'list_agent_inbox' |
| 2026-10-22 | list_agent_inbox_scans | secret_material_reference | high | itches, current member approval, assignment, credential environment and SQL authorization are shared with REST. Never su |
| 2026-10-22 | list_agent_inbox_scans | cross_tool_reference | high | references sibling tool 'list_agent_inbox' |
| 2026-10-22 | get_agent_inbox_scan | secret_material_reference | high | itches, current member approval, assignment, credential environment and SQL authorization are shared with REST. Never su |
| 2026-10-22 | get_agent_inbox_scan | cross_tool_reference | high | references sibling tool 'get_mailbox' |
| 2026-10-22 | get_agent_inbox_activity | secret_material_reference | high | itches, current member approval, assignment, credential environment and SQL authorization are shared with REST. Never su |
| 2026-10-22 | get_agent_inbox_activity | cross_tool_reference | high | references sibling tool 'get_inbound_activity' |
| 2026-10-22 | report_agent_inbox_outcome | secret_material_reference | high | itches, current member approval, assignment, credential environment and SQL authorization are shared with REST. Never su |
| 2026-10-22 | report_agent_inbox_outcome | cross_tool_reference | high | references sibling tool 'get_agent_inbox_context' |
| 2026-10-22 | get_agent_inbox_handling | secret_material_reference | high | itches, current member approval, assignment, credential environment and SQL authorization are shared with REST. Never su |
| 2026-10-22 | get_agent_inbox_handling | cross_tool_reference | high | references sibling tool 'get_inbound_item' |
| 2026-10-22 | propose_agent_inbox_handling | secret_material_reference | high | itches, current member approval, assignment, credential environment and SQL authorization are shared with REST. Never su |
| 2026-10-22 | propose_agent_inbox_handling | cross_tool_reference | high | references sibling tool 'request_inbound_action' |
| 2026-10-22 | seed_agent_inbox_sandbox | secret_material_reference | high | itches, current member approval, assignment, credential environment and SQL authorization are shared with REST. Never su |
| 2026-10-22 | list_webhook_endpoints | url_in_description | low | https://mailbox.bot/docs/webhooks. |
| 2026-10-22 | create_webhook_endpoint | secret_material_reference | high | Public HTTPS URL on port 443 (no credentials, fragment or private host) that receives the signed POSTs. Set |
| 2026-10-22 | create_webhook_endpoint | url_in_description | low | https://mailbox.bot/docs/webhooks. |
| 2026-10-22 | update_webhook_endpoint | secret_material_reference | high | Public HTTPS URL on port 443 (no credentials, fragment or private host) that receives the signed POSTs. Set |
| 2026-10-22 | update_webhook_endpoint | url_in_description | low | https://mailbox.bot/docs/webhooks. |
| 2026-10-22 | update_webhook_endpoint | cross_tool_reference | high | references sibling tool 'update_webhook' |
| 2026-10-22 | test_webhook_endpoint | url_in_description | low | https://mailbox.bot/docs/webhooks. |
| 2026-10-22 | test_webhook_endpoint | cross_tool_reference | high | references sibling tool 'list_webhook_endpoints' |
| 2026-10-22 | test_webhook_endpoint_with_sample | url_in_description | low | https://mailbox.bot/docs/webhooks. |
| 2026-10-22 | test_webhook_endpoint_with_sample | cross_tool_reference | high | references sibling tool 'list_webhook_endpoints' |
| 2026-10-22 | rotate_webhook_endpoint_secret | url_in_description | low | https://mailbox.bot/docs/webhooks. |
| 2026-10-22 | rotate_webhook_endpoint_secret | cross_tool_reference | high | references sibling tool 'list_webhook_endpoints' |
| 2026-10-22 | list_webhook_deliveries | url_in_description | low | https://mailbox.bot/docs/webhooks. |
| 2026-10-22 | list_webhook_deliveries | cross_tool_reference | high | references sibling tool 'list_webhook_endpoints' |
| 2026-10-22 | replay_webhook_delivery | url_in_description | low | https://mailbox.bot/docs/webhooks. |
| 2026-10-22 | replay_webhook_delivery | cross_tool_reference | high | references sibling tool 'list_webhook_endpoints' |
| 2026-10-22 | list_inbound_items | cross_tool_reference | high | references sibling tool 'get_mailbox' |
| 2026-10-22 | get_inbound_item_sources | user_concealment | critical | ace these exact uncertain text spans; do not silently repair or claim perfect OCR. |
| 2026-10-22 | get_inbound_item_sources | cross_tool_reference | high | references sibling tool 'get_mailbox' |
| 2026-10-22 | get_inbound_item | cross_tool_reference | high | references sibling tool 'search_inbound_items' |
| 2026-10-22 | quote_inbound_forward | cross_tool_reference | high | references sibling tool 'request_inbound_action' |
| 2026-10-22 | request_inbound_action | cross_tool_reference | high | references sibling tool 'get_inbound_item' |
| 2026-10-22 | send_text_letter | cross_tool_reference | high | references sibling tool 'get_mailbox' |
Change history (58)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-22 18:17 | get_mailbox | mutated | high |
| 2026-10-22 18:17 | get_usage | mutated | medium |
| 2026-10-22 18:17 | list_inbound_forwarding_addresses | mutated | medium |
| 2026-10-22 18:17 | list_inbound_mail | mutated | medium |
| 2026-10-22 18:17 | get_inbound_mail | mutated | medium |
| 2026-10-22 18:17 | list_postal_threads | mutated | medium |
| 2026-10-22 18:17 | get_postal_thread | mutated | medium |
| 2026-10-22 18:17 | get_mailbox_md | mutated | high |
| 2026-10-22 18:17 | propose_mailbox_md_edit | mutated | medium |
| 2026-10-22 18:17 | send_facility_message | mutated | medium |
| 2026-10-22 18:17 | list_facility_conversations | mutated | medium |
| 2026-10-22 18:17 | get_facility_messages | mutated | medium |
| 2026-10-22 18:17 | update_webhook | mutated | medium |
| 2026-10-22 18:17 | send_outbound_mail | mutated | high |
| 2026-10-22 18:17 | list_outbound_mail | mutated | medium |
| 2026-10-22 18:17 | get_outbound_mail | mutated | medium |
| 2026-10-22 18:17 | cancel_outbound_mail | mutated | medium |
| 2026-10-22 18:17 | create_test_outbound_mail | mutated | medium |
| 2026-10-22 18:17 | advance_test_outbound_mail | mutated | medium |
| 2026-10-22 18:17 | list_agent_inbox | added | high |
| 2026-10-22 18:17 | get_agent_inbox_context | added | high |
| 2026-10-22 18:17 | get_agent_inbox_sources | added | critical |
| 2026-10-22 18:17 | list_agent_inbox_scans | added | high |
| 2026-10-22 18:17 | get_agent_inbox_scan | added | high |
| 2026-10-22 18:17 | get_agent_inbox_activity | added | high |
| 2026-10-22 18:17 | report_agent_inbox_outcome | added | high |
| 2026-10-22 18:17 | get_agent_inbox_handling | added | high |
| 2026-10-22 18:17 | propose_agent_inbox_handling | added | high |
| 2026-10-22 18:17 | seed_agent_inbox_sandbox | added | high |
| 2026-10-22 18:17 | list_webhook_endpoints | added | info |
| 2026-10-22 18:17 | create_webhook_endpoint | added | high |
| 2026-10-22 18:17 | update_webhook_endpoint | added | high |
| 2026-10-22 18:17 | test_webhook_endpoint | added | high |
| 2026-10-22 18:17 | test_webhook_endpoint_with_sample | added | high |
| 2026-10-22 18:17 | rotate_webhook_endpoint_secret | added | high |
| 2026-10-22 18:17 | list_webhook_deliveries | added | high |
| 2026-10-22 18:17 | replay_webhook_delivery | added | high |
| 2026-10-22 18:17 | list_inbound_items | added | high |
| 2026-10-22 18:17 | get_inbound_item_sources | added | critical |
| 2026-10-22 18:17 | search_inbound_items | added | info |
| 2026-10-22 18:17 | get_inbound_item | added | high |
| 2026-10-22 18:17 | get_inbound_pages | added | info |
| 2026-10-22 18:17 | quote_inbound_forward | added | high |
| 2026-10-22 18:17 | request_inbound_action | added | high |
| 2026-10-22 18:17 | get_inbound_activity | added | info |
| 2026-10-22 18:17 | quote_outbound_mail | added | info |
| 2026-10-22 18:17 | send_text_letter | added | high |
| 2026-10-22 18:17 | list_packages | removed | info |
| 2026-10-22 18:17 | get_package | removed | info |
| 2026-10-22 18:17 | get_package_photos | removed | info |
| 2026-10-22 18:17 | request_action | removed | info |
| 2026-10-22 18:17 | request_scan | removed | info |
| 2026-10-22 18:17 | get_scan_results | removed | info |
| 2026-10-22 18:17 | add_tag | removed | info |
| 2026-10-22 18:17 | add_note | removed | info |
| 2026-10-22 18:17 | create_rule | removed | info |
| 2026-10-22 18:17 | register_expected | removed | info |
| 2026-10-22 18:17 | update_action | removed | info |
Probe history
10-22 18:17 OK (47) · 08-13 06:17 OK (30)
Run or depend on bot.mailbox/mailbox? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).