Test the email your app sends.

Real inboxes for your test suite: catch signup mails, OTPs and password resets from Playwright, Cypress, CI or an AI agent. Here is a live one, no signup needed.

Setting up your inbox…

It's that simple

  1. Open this page and a private test address is ready.
  2. Point your app's signup, OTP or reset flow at it.
  3. Watch the mail arrive live. In CI, the API waits and asserts for you.
  4. The inbox deletes itself after 24 hours, or delete it yourself.

See what the full API does →

Private by default

Every inbox is protected by an unguessable secret link, so nobody can read your messages by guessing the address. Remote images are blocked, scripts in emails can never run, and links keep their real destination while opening in a new tab that leaks no referrer.

Read about our security practices →

Made for test suites

Create inboxes programmatically, wait for an OTP, and assert that the mail your app sends actually arrived, from Playwright, Cypress, CI or an AI agent. The free tier needs no card. For testing your own app's email, not for signing up to other people's services.

Read the API docs →

Common questions

Do I need to sign up?
No. Opening the homepage gives you a working address immediately. There is no account, no password and no email confirmation.
How long does the inbox last?
It deletes itself 24 hours after it is created. You can extend it while it is open, up to a maximum of seven days, and you can delete it yourself at any time.
Can anyone else read my messages?
Knowing the address is not enough. Each inbox is opened with a secret held in your private link, and only a hash of that secret is stored, so guessing an address gets an intruder nothing. Anyone you give the full link to can read the inbox, so treat it like a password.
Can I send email from a temporary address?
No, and this is deliberate. InboxDome is receive-only, which means it cannot be used to send spam, and the address you hand out cannot be used to impersonate you.
Is it safe to open messages here?
Messages are rendered in a sandboxed frame: scripts in an email can never run, remote images are blocked until you allow them, and links keep their real destination so you can see it before you click. Links open in a new tab with no referrer passed to the destination, and anything that is not a normal web link has its target stripped entirely.
Can I use this to test the email my own app sends?
Yes. The developer API creates inboxes programmatically, waits for a message or an OTP code, and asserts on delivery, content, links and SPF/DKIM/DMARC results, from Playwright, Cypress, CI or an AI agent.