Cherami vs Lumbox

Cherami 74

TypeScript and Python SDKs 0.2.0 were released on 9 October 2026 (release commits 6b7dbde and 9e9a299, adding Trash listing and restore operations), 26 days before the check (30). In the 90 days from 6 August each of the two SDKs released 0.1.0 (3 and 4 October), 0.1.1 (8 October, README and version only) and 0.2.0, all distinct dated release commits. SDK releases count half on this line, so the six make three (20). The webhooks API in the live contract has no dated entry. Closed service with support by email at hello@cherami.to and a feedback tool in the API. No public changelog, the GitHub repositories carry no issues we could read, and we didn't test support (6 of 15). In the official MCP registry as io.github.cherami-mail/cherami-mcp, a GitHub-verified namespace, per the 5 October check, with official SDKs, which lag the live contract by its 15 newer operations (15). Both SDKs are generated from the OpenAPI contract and have a typecheck script, but neither repository has CI workflows or tests (3 of 10).

Lumbox 23

The latest package releases found are lumbox 0.3.1 on npm (19 June 2026) and @lumbox/mcp-server 0.2.2 (12 June 2026), 140 days before this check, the 91 to 180 day band (10). No releases or dated changelog entries in the 90 days from 8 August (0). A closed service with a support address and an X account; no changelog (5 of 15). Not in the official MCP registry (search for lumbox returned nothing on 6 November); Node and Python SDKs exist but haven't changed since June (5 of 15). The MCP server card says 0.2.1 while npm has 0.2.2, and the SDK repository named in npm isn't publicly readable (3 of 10). Total 23.

Cherami 46

OAuth through Clerk with protected-resource metadata, but one scope, cherami_mail:full. API keys are revocable in Account, API keys, never expire, travel only in the Authorization header, and every key and grant reaches every inbox on the account. We read this as plain revocable keys (20 of 30). No read-only mode or inbox-limited credential. Per-inbox recipient allowlists and sender blocklists can be changed only by the account's human, drafts allow review before sending, and the delete tools' descriptions tell the agent to confirm with the human, with no server-side confirmation (10 of 20). Every tool that returns mail says to treat it as untrusted data, and a safety guide covers handling, but the docs state Cherami doesn't screen content for manipulation, spam or phishing (10 of 15). Sent messages keep their submission outcomes and responses carry X-Request-ID, but we found no audit log of API or MCP calls (4 of 15). No security.txt, disclosure policy, bug bounty or certification found. The privacy policy says credentials are stored as hashes and incidents are notified as the law requires (2 of 20).

Lumbox 71

OAuth 2.1 with PKCE, dynamic client registration and five scopes that split reading inboxes, reading mail, sending and domain changes, plus API keys stored as SHA-256 hashes that can be limited to named inboxes (30). Inbox-scoped keys and the read and send split keep one run away from another's codes; Lumbox's built-in agent drafts replies for approval, but the API itself sends at once (16 of 20). The terms tell users to treat bodies as untrusted, and the security page says attachment text is sanitised for prompt injection before it reaches an agent (12 of 15). The privacy policy says API calls are logged with endpoint, time and key prefix for rate limiting and billing; no customer-facing audit log was found (5 of 15). A valid security.txt to security@lumbox.co and a responsible disclosure section; not SOC 2 certified, no bug bounty (8 of 20). Total 71.

Cherami 56

The service is closed under published terms (effective 9 October 2026). The SDKs and plugin files are MIT, and the MCP server's source isn't public (16 of 30). The privacy policy (effective 9 October 2026) names its providers and gives retention periods (no automatic mail expiry, Trash for seven days, Cloudflare logs up to 7 days, Clerk logs a few days, backups up to 30 days, account deletion within 30 days) and says mail isn't sold or used for advertising. It doesn't address model training, and a DPA is by request (24 of 30). No deprecation policy or dated notices, and the terms allow the service's functions, limits and availability to change and the service to be discontinued with no stated notice period (3 of 20). Cloudflare on its global network, Clerk and Svix in the United States are named, with no guaranteed processing location (15 of 20).

Lumbox 72

A closed hosted service; the security page says it can be self-hosted, but the repository the deployment guide clones isn't publicly readable. The footer names Cyphen Innovations Private Limited (15 of 30). The privacy policy and security page agree that mail is kept while its inbox exists and an account's data is deleted within 30 days, that email isn't used for training, and that the vault uses AES-256-GCM per-organisation keys (26 of 30). A deprecation policy with Deprecation and Sunset headers, 90 days' notice and 12 months for an old version (20). Hosts and locations named, Hetzner in Germany, Neon in the US, Vercel, Cloudflare, AWS SES, Dodo Payments and Steel for browsers (18 of 20). Total 79.

Cherami 40

Hosted lines. No status page. status.cherami.to doesn't resolve and cherami.to/status returns 404 on 4 November (0). With no history to read, the incident record gets 5. Signup discovery (10 per IP an hour), phrase redemption and browser approvals (10 per IP per 15 minutes) and the sending allowance (25 recipients per rolling 24 hours) are published with numbers, but no general request limit for reading or listing mail is stated (10 of 15). 429s carry Retry-After, the allowance error returns sufficient_capacity_at, and a retry table per operation sits beside idempotency keys on every write that sends or creates (15). The deployment guide says service commitments are by request and none is published (0). The API is /v1 with contract version 1.0.0 and no beta label on the HTTP or MCP surface (10).

Lumbox 45

Graded with the hosted lines. No status page was found; none is linked from the site or llms.txt, and status.lumbox.co doesn't resolve (0). With no history to read, the incident line takes 5. 120 requests a minute per API key, per IP for unauthenticated routes, with X-RateLimit headers (15). 429 returns retry_after_seconds, the spec gives a backoff schedule and says which statuses not to retry, and Idempotency-Key works on every POST for 24 hours (15). The terms say Lumbox doesn't guarantee uninterrupted service, and no SLA was found (0). The core API carries no beta label; dedicated phone numbers are early access (10). Total 45.

Cherami 35

No x402, MPP or L402 (0). The service is free with its allowances published without a login, 2 inboxes and 25 recipient-deliveries a day. Anything beyond that is by request with no published price (15 of 20). No card and no paid tier (20). An agent can't get access alone. A person signs in and approves at cherami.to/claim in a browser, then gives the agent a one-use phrase, or approves an OAuth connection (0).

Lumbox 40

No x402, MPP or L402 (0). Four plans with prices and limits published without login, no per-email price (10 of 20). Free plan with 3 inboxes, 500 received and 100 sent emails a month, no card (20). Agent self-signup lets an agent create its own key, which a person approves once in a browser (10 of 20). Total 40.