{ "data": { "a": { "slug": "hostinger-agentic-mail", "name": "Hostinger Agentic Mail", "vendor": "Hostinger International Limited", "vendorUrl": "https://www.hostinger.com/mail-api", "kind": "http-api", "category": "agent-inboxes", "summary": "Hostinger Agentic Mail gives AI agents and apps a Hostinger Email mailbox to read, search, send and organise through the Mail API, webhooks, a remote MCP server, SDKs and a CLI, with outgoing allow and block lists.", "url": "https://www.anchorterminal.com/tools/hostinger-agentic-mail", "markdownUrl": "https://www.anchorterminal.com/tools/hostinger-agentic-mail.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/hostinger-agentic-mail.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/hostinger-agentic-mail.json", "dns": "hostinger-agentic-mail.grade.anchorterminal.com", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://mcp.mail.hostinger.com/mcp", "packages": [ { "registry": "npm", "name": "hostinger-mail-api-sdk" }, { "registry": "pypi", "name": "hostinger-mail-api" } ], "auth": "api-key", "authNotes": "Named Mail API tokens created in hPanel under Agentic Mail, scoped to one email order and either all or selected mailboxes, with permissions for SMTP and IMAP actions and for webhook management. Shown once, revocable one by one, with a cap on how many exist. The MCP server takes the same token as a Bearer header. hPanel API tokens don't work here.", "pricing": "paid", "pricingNotes": "Priced per mailbox on Hostinger Email plans, from $0.39 a month on a 48-month Starter term (renews at $1.59), Standard $0.99 and Premium $1.99 on the same term. Starter allows 1,000 emails a day per mailbox, Standard and Premium 3,000. No free plan; 30-day money-back guarantee.", "priceSummary": "$0.39 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Agentic Mail or Mail API docs, the OpenAPI spec or the Mail API page (checked 2026-11-06).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 1779, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://docs.hostinger.com/emails/agentic-mail", "llmsTxt": "https://docs.hostinger.com/llms.txt", "openapi": "https://api.mail.hostinger.com/openapi/openapi.json", "capabilities": [ "email.inbox", "email.send", "email.inbound", "email.threads", "email.domains" ], "tags": [ "hosted", "closed-source", "mcp", "remote-mcp", "api-key", "openapi", "llms-txt", "webhooks", "imap", "smtp", "status-page", "bug-bounty", "typescript", "python", "php", "cli" ], "lastRelease": "2026-11-03", "graded": true, "anchor": { "graded": true, "score": 60.1, "grade": "C", "agentReady": false, "rank": 670, "ranked": true, "rankOf": 1510, "categoryRank": 7, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 76, "maintenance": 77, "payments": 10, "reliability": 42, "schema": 84, "security": 70, "transparency": 62 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "A real mailbox behind a typed API, with order- and mailbox-scoped tokens, outgoing allow lists, a remote MCP server and SDKs in three languages. Sends take no idempotency key, request limits have no numbers, and there is no free plan; every mailbox is bought in hPanel on a long prepaid term.", "bestFor": "A low-cost real mailbox on the agent's own domain with IMAP-style operations.", "strengths": [ "Tokens scope to one order and selected mailboxes, with separate mail and webhook permissions", "Outgoing allow and block lists stop an agent from mailing addresses outside the list", "OpenAPI 3.0 with 28 described operations, llms.txt and Markdown copies of every docs page", "Official SDKs for TypeScript, Python and PHP and a CLI, generated from the spec", "HackerOne bug bounty, a responsible disclosure policy and a valid security.txt" ], "weaknesses": [ "No idempotency key on send, and the docs give no retry guidance beyond waiting after 429", "Rate limits are described without numbers, and repeated 429s can block the caller's IP", "No free plan; the lowest price needs a 48-month prepaid term bought in hPanel", "The status page covers Hostinger Mail's SMTP and IMAP but has no component for the Mail API or MCP server", "The Mail API page's curl example uses /v1/emails, a path the API reference doesn't list" ], "agentNotes": [ "Call `GET /api/v1/me` first to get the mailbox resource IDs the token can reach", "Ask the owner to set an outgoing allow list before letting an agent send unattended", "Check the Sent folder before retrying a send, since sends have no idempotency key", "Read message text with the text-content endpoint, which doesn't mark the message as seen", "Back off on 429; repeated limit hits can block your IP address for a while" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 60.1 } ], "editorialScores": { "ergonomics": 76, "maintenance": 77, "payments": 10, "reliability": 42, "schema": 84, "security": 70, "transparency": 38 }, "provenanceScore": 85, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install hostinger-mail-api-sdk", "http": "curl https://api.mail.hostinger.com/api/v1/me -H \"Authorization: Bearer $HOSTINGER_MAIL_API_TOKEN\"", "claudeCode": "claude mcp add --scope user --transport http --header \"Authorization: Bearer YOUR_HOSTINGER_API_TOKEN\" -- hostinger-email https://mcp.mail.hostinger.com/mcp", "config": { "mcpServers": { "hostinger-email": { "headers": { "Authorization": "Bearer YOUR_HOSTINGER_API_TOKEN" }, "url": "https://mcp.mail.hostinger.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/email.inbox", "tool": "https://letme.dev/hostinger-agentic-mail" }, "area": "communication", "unitPrices": [ { "item": "Starter mailbox", "unit": "month", "usd": 0.39, "note": "48-month term paid upfront ($18.72), renews at $1.59 a month" }, { "item": "Standard mailbox", "unit": "month", "usd": 0.99, "note": "48-month term, renews at $2.79 a month" }, { "item": "Premium mailbox", "unit": "month", "usd": 1.99, "note": "48-month term, renews at $3.99 a month" } ], "provenance": { "legalEntity": "Hostinger International Limited", "domain": "hostinger.com", "domainRegistered": "2002-11-23", "endpointOnVendorDomain": true, "terms": "https://www.hostinger.com/legal/universal-terms-of-service-agreement", "privacy": "https://www.hostinger.com/legal/privacy-policy", "statusPage": "https://statuspage.hostinger.com", "changelog": "", "securityTxt": "valid", "checked": "2026-11-06", "notes": [ "The terms name HOSTINGER INTERNATIONAL LIMITED, a Cyprus private limited company in Larnaca, as the contracting entity for most users.", "www.hostinger.com/robots.txt disallows tracking-parameter, cart and search paths; docs.hostinger.com and api.mail.hostinger.com allow all. statuspage.hostinger.com disallows /api/, so its incident history wasn't read beyond the front page's last 15 days.", "security.txt points to HackerOne and a responsible disclosure policy and expires on 21 January 2027.", "The about page says Hostinger is private, founded in 2004 in Kaunas and headquartered in Vilnius.", "No changelog for the Mail API or MCP server was found." ], "score": 85 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/hostinger-agentic-mail.json", "live": { "slug": "hostinger-agentic-mail", "probe": { "target": "https://mcp.mail.hostinger.com/mcp", "method": "get", "lastAt": "2026-11-07T19:22:12.319338967Z", "lastOk": true, "lastStatus": 401, "lastMs": 98, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 55, "p95ms24h": 147, "samples24h": 210, "samples30d": 210, "days": [ { "date": "2026-11-06", "probes": 13, "ok": 13 }, { "date": "2026-11-07", "probes": 197, "ok": 197 } ] }, "vendorStatus": { "page": "https://statuspage.hostinger.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T19:22:15.606810909Z" }, "versions": [ { "registry": "npm", "name": "hostinger-mail-api-sdk", "version": "1.19.8", "seenAt": "2026-11-06T23:33:19.350402916Z" }, { "registry": "pypi", "name": "hostinger-mail-api", "version": "1.18.4", "released": "2026-10-29", "seenAt": "2026-11-06T23:33:20.351632225Z" } ], "npmWeekly": 1779, "pypiWeekly": 533, "securityTxt": { "url": "https://hostinger.com/.well-known/security.txt", "state": "valid", "expires": "2027-01-21T23:01:00.000Z", "checkedAt": "2026-11-07T16:00:54.647775004Z" }, "llmsTxt": { "url": "https://docs.hostinger.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:42.770947908Z" }, "pages": [ { "url": "https://www.hostinger.com/legal/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:29:53.160307683Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "9e51d64c5476" }, { "url": "https://www.hostinger.com/legal/universal-terms-of-service-agreement", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:29:55.547020121Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "fe44392e8a68" } ], "mcpTools": { "url": "https://mcp.mail.hostinger.com/mcp", "checkedAt": "2026-11-07T01:45:20.177533151Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:45:20.177533151Z" }, "updatedAt": "2026-11-07T19:22:12.319338967Z" } }, "answer": "Inbound and Hostinger Agentic Mail score within a point of each other on agent readiness, 60.4 (C) and 60.1 (C). Hostinger Agentic Mail leads on schema \u0026 documentation, security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust.", "b": { "slug": "inbound", "name": "Inbound", "vendor": "Exon Enterprise LLC", "vendorUrl": "https://inbound.new", "kind": "http-api", "category": "agent-inboxes", "summary": "Inbound is an email API from Exon Enterprise LLC for sending, receiving and replying on a customer's own domains. Agents use its REST API, webhooks, scoped IMAP and SMTP mailboxes, a hosted MCP server and the `inboundctl` CLI.", "url": "https://www.anchorterminal.com/tools/inbound", "markdownUrl": "https://www.anchorterminal.com/tools/inbound.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/inbound.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/inbound.json", "dns": "inbound.grade.anchorterminal.com", "repo": "https://github.com/inboundemail/inbound", "license": "MIT for the platform repository. The TypeScript SDK, `inboundctl` and the MCP server are Apache-2.0", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://inbound.new/api/e2", "packages": [ { "registry": "npm", "name": "inboundemail" }, { "registry": "npm", "name": "inboundctl" } ], "auth": "mixed", "authNotes": "A person signs up at inbound.new in a browser and creates an account API key, sent as a Bearer token to `https://inbound.new/api/e2`. The key covers the whole account. The MCP server at `https://inbound.new/mcp` takes OAuth (PKCE, dynamic client registration, scope `inbound:account`, also whole account), the account key, or a mailbox password. A mailbox password (prefix `mail_`) is limited to its address or domain scopes and sender policy, and also works for IMAP and SMTP. `inboundctl login` uses a browser device flow.", "pricing": "paid", "pricingNotes": "No free plan or trial on the pricing page, and no sandbox. Default is $9 a month for 5,000 emails, Pro $15 for 50,000 emails and 50 domains, Growth $39 for 100,000 emails and 300 domains, Scale $79 for 200,000 emails and unlimited domains. Extra domains cost $3.50 a month each, and an extra 50,000 received plus 50,000 sent costs $16 a month. The terms make fees non-refundable once any email has been sent or received (https://inbound.new/pricing, checked 2026-10-08).", "priceSummary": "$9 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the OpenAPI document or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": 78, "popularity": { "githubStars": 359, "npmWeekly": 1704, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://inbound.new/docs", "llmsTxt": "https://inbound.new/docs/llms.txt", "openapi": "https://inbound.new/openapi.json", "capabilities": [ "email.inbox", "email.send", "email.inbound", "email.threads", "email.domains" ], "tags": [ "hosted", "paid", "mcp", "oauth", "openapi", "llms-txt", "typescript", "cli", "webhooks", "imap", "smtp", "open-source", "status-page" ], "lastRelease": "2026-10-31", "graded": true, "anchor": { "graded": true, "score": 60.4, "grade": "C", "agentReady": false, "rank": 651, "ranked": true, "rankOf": 1510, "categoryRank": 6, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 78, "maintenance": 63, "payments": 15, "reliability": 73, "schema": 76, "security": 65, "transparency": 57 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-02" }, "negative": -3, "negativeNotes": [ "Inbound fixed flaws in its own hosted service, deployed from its public repository, with no advisory. On 30 September 2026 the send API let a display name redirect mail and allowed header injection and a custom From on another customer's domain. On 21 and 22 October an unauthenticated route could mark any domain verified, the billing proxy let a user credit themselves, mailbox-scoped keys validated as account keys on internal search, and read-only mailbox passwords could send. One folded term (-3). https://github.com/inboundemail/inbound/commit/d13eae8" ], "verdict": "A mailbox password limits an agent to chosen addresses and one sending identity across REST, IMAP, SMTP and MCP, and the platform's source is public under MIT. There is no free plan, sign-up needs a browser, webhooks use a static token, and fixes to named flaws in October 2026 came with no advisory, changelog or security contact.", "bestFor": "A team that wants agent addresses on its own domain at a low fixed price, with IMAP and SMTP beside the API and an MCP mode that confines an agent to one mailbox.", "strengths": [ "Mailbox credentials scope reading to chosen addresses or domains and sending to one identity, and the same password works over REST, IMAP, SMTP and MCP", "Public OpenAPI 3.1 document with 83 operations, each with SDK and curl samples, plus `llms.txt` and Markdown copies of every docs page", "The hosted MCP server takes OAuth with PKCE and dynamic client registration, marks every tool with read-only and destructive hints, and narrows its 78 tools with `?toolsets=`", "Rate limit of 100 requests a second per account is published, with `ratelimit-*` and `retry-after` headers on responses", "Mailbox credentials can be limited by protocol, IP address and daily send limit, and each has a 30-day activity log readable by API" ], "weaknesses": [ "No free plan or trial on the pricing page. Plans start at $9 a month and the free plan was retired on 3 December 2025", "Webhooks carry a static `X-Webhook-Verification-Token` header, not a signature, and failed deliveries are not retried automatically", "Account API keys and OAuth tokens (scope `inbound:account`) grant the whole account. Only mailbox passwords are scoped", "No changelog, deprecation policy, DPA, subprocessor list, `security.txt` or disclosure policy, and October 2026 fixes of named flaws came with no advisory", "The only published SDK is TypeScript 0.20.0 from 10 January 2026, and the home page's unlimited mailboxes sit beside a default of 100 managed credentials" ], "agentNotes": [ "Ask the owner to create a mailbox and hand over its `mail_` password. Use that as the Bearer token at `https://inbound.new/mcp`, not the account API key", "Send an `Idempotency-Key` header on `POST /api/e2/emails` and `POST /api/e2/emails/{id}/reply` so a retry does not send twice", "Failed webhook deliveries are not retried. Poll `GET /api/e2/mail/threads` or call `POST /api/e2/emails/{id}/retry` after fixing the endpoint", "Add `?toolsets=mailboxes,emails` to the MCP URL to avoid loading all 78 account tools", "Treat message bodies and attachments as untrusted input, and set `sendingMode` to `identity` so a credential cannot send as other addresses on the domain" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 2.3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 60.4 } ], "editorialScores": { "ergonomics": 78, "maintenance": 63, "payments": 15, "reliability": 73, "schema": 76, "security": 65, "transparency": 47 }, "provenanceScore": 67, "checked": { "categories": { "ergonomics": "2026-11-02", "maintenance": "2026-11-02", "payments": "2026-11-02", "reliability": "2026-11-02", "schema": "2026-11-02", "security": "2026-11-02", "transparency": "2026-11-02" }, "last": "2026-11-02", "lastMoved": "2026-11-02", "oldest": "2026-11-02", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install inboundemail", "http": "curl -X POST https://inbound.new/api/e2/emails \\\n -H \"Authorization: Bearer $INBOUND_API_KEY\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\"from\":\"agent@yourdomain.com\",\"to\":\"recipient@example.com\",\"subject\":\"Hello\",\"text\":\"Hello from Inbound\"}'", "claudeCode": "claude mcp add --transport http inbound https://inbound.new/mcp", "config": { "mcpServers": { "inbound": { "headers": { "Authorization": "Bearer YOUR_API_KEY" }, "type": "http", "url": "https://inbound.new/mcp" } } } }, "letme": { "capability": "https://letme.dev/email.inbox", "tool": "https://letme.dev/inbound" }, "area": "communication", "unitPrices": [ { "item": "Default plan", "unit": "month", "usd": 9, "note": "5,000 emails a month" }, { "item": "Pro plan", "unit": "month", "usd": 15, "note": "50,000 emails a month, 50 domains" }, { "item": "Growth plan", "unit": "month", "usd": 39, "note": "100,000 emails a month, 300 domains" }, { "item": "Scale plan", "unit": "month", "usd": 79, "note": "200,000 emails a month, unlimited domains" }, { "item": "Extra domain", "unit": "month", "usd": 3.5, "note": "per domain" }, { "item": "Extra email capacity", "unit": "month", "usd": 16, "note": "50,000 received plus 50,000 sent a month" } ], "provenance": { "legalEntity": "EXON ENTERPRISE LLC", "domain": "inbound.new", "domainRegistered": "2025-06-04", "endpointOnVendorDomain": true, "terms": "https://inbound.new/terms", "privacy": "https://inbound.new/privacy", "statusPage": "https://status.inbound.new", "changelog": "", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The terms of service (last updated 3 December 2025) name EXON ENTERPRISE LLC, a Florida limited liability company, and govern the Inbound service itself.", "The privacy policy is dated 1 January 2025 and describes an email receiving service. It names AWS and payment processors and no other subprocessor.", "The API and MCP server answer on inbound.new. IMAP and SMTP answer on imap.inboundemail.com and smtp.inboundemail.com.", "https://inbound.new/.well-known/security.txt returned 404 on 8 October 2026.", "No changelog was found. https://inbound.new/changelog redirects to the blog, whose latest post is dated 3 December 2025.", "RDAP at the .new registry gives a registration date of 2025-06-04." ], "score": 67 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/inbound.json", "live": { "slug": "inbound", "probe": { "target": "https://inbound.new/api/e2", "method": "get", "lastAt": "2026-11-07T19:22:13.015749126Z", "lastOk": true, "lastStatus": 404, "lastMs": 238, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 174, "p95ms24h": 294, "samples24h": 238, "samples30d": 7430, "days": [ { "date": "2026-10-08", "probes": 50, "ok": 50 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 248, "ok": 248 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 197, "ok": 197 } ] }, "vendorStatus": { "page": "https://status.inbound.new", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T19:22:15.998830428Z" }, "versions": [ { "registry": "npm", "name": "inboundctl", "version": "0.1.0", "seenAt": "2026-11-06T23:34:16.0744478Z" }, { "registry": "npm", "name": "inboundemail", "version": "0.20.0", "seenAt": "2026-11-06T23:34:15.780035591Z" } ], "githubStars": 363, "npmWeekly": 4894, "securityTxt": { "url": "https://inbound.new/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T15:59:36.72024299Z" }, "llmsTxt": { "url": "https://inbound.new/docs/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:44.534664499Z" }, "domain": { "domain": "inbound.new", "registered": "2025-06-04", "source": "https://pubapi.registry.google/rdap/domain/inbound.new", "checkedAt": "2026-11-01T14:17:38.453901579Z" }, "pages": [ { "url": "https://inbound.new/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:11:24.677431378Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "87d577bf988f" }, { "url": "https://inbound.new/privacy", "kind": "privacy", "status": 304, "checkedAt": "2026-11-07T14:11:26.841002348Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "5ec90d1627e3" }, { "url": "https://inbound.new/terms", "kind": "terms", "status": 304, "checkedAt": "2026-11-07T14:11:28.884727248Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "49c79467e92a" } ], "mcpTools": { "url": "https://inbound.new/mcp", "checkedAt": "2026-11-07T01:45:20.581461987Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:45:20.581461987Z" }, "github": { "repo": "inboundemail/inbound", "checkedAt": "2026-11-02T08:55:48.209907909Z", "stars": 361, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-31T23:33:43Z", "openIssues": 7, "openPRs": 2, "issuesOpened90d": 8, "issuesClosed90d": 3, "prsMerged90d": 41, "ci": { "branch": "main", "runs": 50, "success": 45, "failure": 4, "other": 1, "latest": "failure", "latestAt": "2026-11-01T00:12:45Z" }, "replies": { "sampled": 19, "unanswered": 6, "medianDays": 1.2 } }, "updatedAt": "2026-11-07T19:22:13.015749126Z" } }, "edges": [ { "by": 31, "category": "reliability", "leads": "inbound", "name": "Reliability", "reasons": { "a": "Graded with the hosted lines. Hostinger's Statuspage at statuspage.hostinger.com has components for Hostinger Mail SMTP inbound and outbound, IMAP and POP3, webmail and backups, but none for the Mail API or the MCP server (14 of 20). The status host's robots.txt disallows /api/ and the history page loads by script, so only the front page's 15 days (23 October to 6 November) were read, with one Outgoing Emails Service Degraded Performance incident; the longer record wasn't read, a limit of our reading (10 of 30). No request rate numbers; daily sending limits per mailbox are published, 1,000 on Starter and 3,000 on Standard and Premium (5 of 15). The docs say to wait after a 429 and warn that repeated hits can block the IP, with no Retry-After or idempotency on send (3 of 15). No SLA for email found (0). No beta label (10). Total 42.", "b": "Graded on the hosted lines. status.inbound.new runs on incident.io with uptime history, but its two components are Website and App, with none for the API, webhooks, SMTP or IMAP (15 of 20). On 2 November 2026 the page showed both components at 100 per cent from August to November and its RSS feed held no items. The 8 October reading of two earlier incidents (7 November 2025 and 18 February 2026) came from the page's /api/ data endpoint, which this run no longer reads, so it is struck. With no posted incident readable on the page, the record reads as a page that has never posted one (20). 100 requests a second per account is published, with SMTP and IMAP connection and size limits (15). 429s carry `retry-after` and `ratelimit-*` headers, the product page documents `Idempotency-Key` on sends and replies, and SMTP deduplicates identical bytes. The OpenAPI document still omits the idempotency header, and the published SDK does not retry (13 of 15). No SLA, and the terms disclaim any uptime guarantee (0). No beta label on the `/api/e2` surface (10). 15+20+15+13+0+10 = 73." }, "scores": { "a": 42, "b": 73 } }, { "by": 14, "category": "maintenance", "leads": "hostinger-agentic-mail", "name": "Maintenance \u0026 community", "reasons": { "a": "hostinger-mail-api-sdk 1.19.8 was published on 3 November 2026 (30). 13 SDK releases in the 90 days from 8 August by npm's records, and docs pages updated on 27 October (20). 24/7 support, a feedback endpoint the API and MCP server expose for agents, but no changelog (10 of 15). The mail MCP server isn't in the official MCP registry (the Hostinger entry there is the hosting connector). The SDKs are current (10 of 15). MIT SDKs generated from the spec, CI not read (7 of 10). Total 77.", "b": "The service is built from a public repository with commits to the main branch on 31 October 2026 (30). No changelog or tagged releases. The repository shows commits on 22 separate days between 4 August and 31 October 2026, so half credit (10 of 20). Three open issues on GitHub, the oldest a request for webhook signatures opened on 1 November 2025. We could not read the replies, and support is by email (10 of 25). The published TypeScript SDK is 0.20.0 from 10 January 2026, before the mailbox endpoints; 0.21.0 is in the repository without a release tag. Not checked in the MCP registry (5 of 15). CI runs unit, end-to-end and gateway tests, and the MCP server pins its SDK version (8 of 10). 30+10+10+5+8 = 63." }, "scores": { "a": 77, "b": 63 } }, { "by": 8, "category": "schema", "leads": "hostinger-agentic-mail", "name": "Schema \u0026 documentation", "reasons": { "a": "OpenAPI 3.0 at api.mail.hostinger.com/openapi/openapi.json, version 1.3.0, with 28 operations on 20 paths, none without a description (25). docs.hostinger.com serves llms.txt and a Markdown copy of each page (10). Descriptions say what each call does and side effects, such as text and source reads not changing the seen flag and list pointing to search for filters (16 of 20). Typed parameters and bodies with required fields (12 of 15). Every operation documents 401, 403, 500 and 502, 22 document 422, with a shared error shape and a stable `code` (14 of 15). Version in the path and the spec, but no changelog was found (7 of 15). Total 84.", "b": "Public OpenAPI 3.1 document at inbound.new/openapi.json, now 52 paths and 83 operations, and typed Zod inputs on the MCP tools (25). `llms.txt` and a Markdown copy of each docs page (10). Operation descriptions state purpose and side effects, such as what deleting an endpoint cleans up. MCP tool descriptions are short and rarely say when not to call (12 of 20). 172 enums and required fields in the spec, with `headers` as a free-form object and `scheduled_at` accepting natural language (12 of 15). Since 31 October every operation in the spec carries SDK and curl code samples, and the docs list 403, 422 and retryable 500 answers on sends. Errors are still free-text strings with no stable code (12 of 15). The API is versioned as 2.0.0 under `/api/e2`, but no changelog was found (5 of 15). 25+10+12+12+12+5 = 76." }, "scores": { "a": 84, "b": 76 } }, { "by": 5, "category": "security", "leads": "hostinger-agentic-mail", "name": "Security \u0026 auth", "reasons": { "a": "Named tokens scoped to one order and to all or selected mailboxes, with separate SMTP/IMAP and webhook-management permissions, shown once and revocable one by one. The MCP server advertises protected-resource metadata on its 401 but documents bearer tokens only (25 of 30). Outgoing allow and block lists, with the block list winning, and mailbox-level scoping. Deletes are permanent and no read-only permission was named (14 of 20). Inbound mail is untrusted content; the docs advise the allow list for autonomous agents but give no prompt-injection guidance for message content (6 of 15). Email Logs record delivery statuses, sign-in attempts per protocol and an audit trail of mailbox setting changes, and webhooks show the last 20 deliveries (10 of 15). A valid security.txt, a HackerOne bug bounty and a responsible disclosure policy; no certification was checked (15 of 20). Total 70.", "b": "Mailbox passwords are scoped to 1 to 100 addresses or domains, rotate by API and can be disabled. Account API keys cover the whole account and can be revoked by API. OAuth on the MCP server uses PKCE and dynamic client registration with one scope, `inbound:account`, which the docs say grants full access. No secret travels in a URL (26 of 30). A mailbox can be read-only over IMAP and limited to one sending address. Since 22 October 2026 a read-only password can no longer send, and since 29 October a credential can be limited by protocol, allowed IP addresses, storage quota and a daily send limit. The MCP server's instructions ask the model to confirm before deleting or sending, and `inboundctl` has dry runs (17 of 20). The agents page tells builders to treat bodies and files as untrusted and Guard rules filter incoming mail, but the MCP tool descriptions carry no such warning (9 of 15). Since 29 October every mailbox credential has an activity log (sign-ins, refused sign-ins, IMAP sessions, command errors and send failures, kept 30 days) readable by API, MCP and dashboard, beside the dashboard delivery log and `lastUsedAt`. Account-key actions have no audit log (10 of 15). `security.txt` still returns 404, no disclosure policy or bug bounty was found, and SOC 2 and ISO 27001 were described as on the roadmap in December 2025. Webhooks are verified with a static token, not a signature (3 of 20). 26+17+9+10+3 = 65." }, "scores": { "a": 70, "b": 65 } }, { "by": 5, "category": "payments", "leads": "inbound", "name": "Payments \u0026 pricing", "reasons": { "a": "No x402, MPP or L402 (0). Prices are public per mailbox per month, with the lowest only on 48-month prepaid terms (10 of 20). No free plan; a 30-day money-back guarantee after paying (0). Mailboxes and tokens are bought and created in hPanel by a person (0). Total 10.", "b": "No x402, MPP or L402 in the docs, the OpenAPI document or the pricing page (0 of 40). Four plans are public with their email and domain allowances, plus unit add-ons of $3.50 a month per domain and $16 a month per extra 50,000 received and 50,000 sent (15 of 20). No free plan or trial on the pricing page. The free plan was retired on 3 December 2025 (0 of 20). A person signs up in a browser, and `inboundctl login` also needs a browser approval (0 of 20)." }, "scores": { "a": 10, "b": 15 } }, { "by": 5, "category": "transparency", "leads": "hostinger-agentic-mail", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed service under Hostinger's universal terms, which name Hostinger International Limited in Cyprus. The SDKs are MIT (18 of 30). The privacy policy covers email data and says imported mail isn't used to train non-personalised models and is deleted after termination under the service terms and DPA; retention periods for mailbox content weren't found (20 of 30). No deprecation policy or dated notices for the Mail API (0). Sub-processors and data locations for Hostinger Email weren't checked (0, unchecked). Total 38.", "b": "The platform repository is public under MIT, and the SDK, CLI and MCP server declare Apache-2.0. The MCP repository has no licence file (28 of 30). The privacy policy is dated 1 January 2025, still describes an email receiving service, and says email data is typically kept for 30 days, which agrees with the terms. No DPA, no statement on model training and no retention detail by plan (12 of 30). No deprecation policy. The terms allow the service to be changed or discontinued without notice, with 30 days' notice for price and terms changes (3 of 20). The policy names AWS and payment processors. No subprocessor list or data location was found (4 of 20)." }, "scores": { "a": 62, "b": 57 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Hostinger International Limited", "b": "Exon Enterprise LLC", "name": "Vendor" }, { "a": "https://mcp.mail.hostinger.com/mcp", "b": "https://inbound.new/api/e2", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "API key", "b": "OAuth or key", "name": "Auth" }, { "a": "Paid", "b": "Paid", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "none", "b": "MIT for the platform repository. The TypeScript SDK, `inboundctl` and the MCP server are Apache-2.0", "name": "Licence" }, { "a": "none", "b": "78", "name": "Tools exposed" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-11-03", "b": "2026-10-31", "name": "Last release" }, { "a": "2026-09-29", "b": "2025-12-03", "name": "Terms last updated" }, { "a": "2026-10-14", "b": "2025-01-01", "name": "Privacy policy last updated" }, { "a": "yes", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "1.8k npm/wk", "b": "359 stars, 1.7k npm/wk", "name": "Popularity" }, { "a": "none", "b": "2.3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Inbound and Hostinger Agentic Mail score within a point of each other on agent readiness, 60.4 (C) and 60.1 (C). Hostinger Agentic Mail leads on schema \u0026 documentation, security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust.", "question": "Which is better for AI agents, Hostinger Agentic Mail or Inbound?" }, { "answer": "Hostinger Agentic Mail needs an API key. Inbound takes an API key or an OAuth sign-in.", "question": "Do Hostinger Agentic Mail and Inbound need an API key?" }, { "answer": "Yes. Hostinger Agentic Mail has a hosted endpoint at https://mcp.mail.hostinger.com/mcp and Inbound at https://inbound.new/api/e2.", "question": "Can an agent call Hostinger Agentic Mail and Inbound without installing anything?" }, { "answer": "No open-source release is listed for Hostinger Agentic Mail. Inbound is open source (MIT for the platform repository. The TypeScript SDK, `inboundctl` and the MCP server are Apache-2.0).", "question": "Are Hostinger Agentic Mail and Inbound open source?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 84 against 76", "Security \u0026 auth, 70 against 65", "Maintenance \u0026 community, 77 against 63", "Transparency \u0026 trust, 62 against 57" ], "also": [ "No incidents deducted, where Inbound loses 3 points for them" ], "goodFor": "A low-cost real mailbox on the agent's own domain with IMAP-style operations.", "slug": "hostinger-agentic-mail", "watchFor": "No idempotency key on send, and the docs give no retry guidance beyond waiting after 429" }, { "aheadOn": [ "Reliability, 73 against 42", "Payments \u0026 pricing, 15 against 10" ], "also": [ "Open source" ], "goodFor": "A team that wants agent addresses on its own domain at a low fixed price, with IMAP and SMTP beside the API and an MCP mode that confines an agent to one mailbox.", "slug": "inbound", "watchFor": "No free plan or trial on the pricing page. Plans start at $9 a month and the free plan was retired on 3 December 2025" } ], "history": { "hostinger-agentic-mail": null, "inbound": [ { "causes": [ "product", "correction", "event" ], "date": "2026-11-02", "delta": -3.4, "from": 63.8, "fromGrade": "B", "to": 60.4, "toGrade": "C" }, { "causes": [ "evidence" ], "date": "2026-10-27", "delta": 0.1, "from": 63.7, "fromGrade": "B", "to": 63.8, "toGrade": "B" } ] }, "job": { "capability": "email.inbox", "name": "Agent inboxes" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentmail-vs-hostinger-agentic-mail.json", "title": "AgentMail API + MCP vs Hostinger Agentic Mail", "url": "https://www.anchorterminal.com/compare/agentmail-vs-hostinger-agentic-mail" }, { "json": "https://www.anchorterminal.com/compare/agentmail-vs-inbound.json", "title": "AgentMail API + MCP vs Inbound", "url": "https://www.anchorterminal.com/compare/agentmail-vs-inbound" }, { "json": "https://www.anchorterminal.com/compare/cherami-vs-hostinger-agentic-mail.json", "title": "Cherami vs Hostinger Agentic Mail", "url": "https://www.anchorterminal.com/compare/cherami-vs-hostinger-agentic-mail" }, { "json": "https://www.anchorterminal.com/compare/cherami-vs-inbound.json", "title": "Cherami vs Inbound", "url": "https://www.anchorterminal.com/compare/cherami-vs-inbound" }, { "json": "https://www.anchorterminal.com/compare/clawpost-vs-hostinger-agentic-mail.json", "title": "Clawpost vs Hostinger Agentic Mail", "url": "https://www.anchorterminal.com/compare/clawpost-vs-hostinger-agentic-mail" }, { "json": "https://www.anchorterminal.com/compare/clawpost-vs-inbound.json", "title": "Clawpost vs Inbound", "url": "https://www.anchorterminal.com/compare/clawpost-vs-inbound" }, { "json": "https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-inboxapi.json", "title": "Hostinger Agentic Mail vs InboxAPI", "url": "https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-inboxapi" }, { "json": "https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-lumbox.json", "title": "Hostinger Agentic Mail vs Lumbox", "url": "https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-lumbox" }, { "json": "https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-mailows.json", "title": "Hostinger Agentic Mail vs Mailows", "url": "https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-mailows" }, { "json": "https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-mails-ai.json", "title": "Hostinger Agentic Mail vs mails.ai Agent Email", "url": "https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-mails-ai" }, { "json": "https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-mailslurp.json", "title": "Hostinger Agentic Mail vs MailSlurp", "url": "https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-mailslurp" }, { "json": "https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-postfleet.json", "title": "Hostinger Agentic Mail vs Postfleet", "url": "https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-postfleet" }, { "json": "https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-robotomail.json", "title": "Hostinger Agentic Mail vs Robotomail", "url": "https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-robotomail" }, { "json": "https://www.anchorterminal.com/compare/inbound-vs-inboxapi.json", "title": "Inbound vs InboxAPI", "url": "https://www.anchorterminal.com/compare/inbound-vs-inboxapi" }, { "json": "https://www.anchorterminal.com/compare/inbound-vs-lumbox.json", "title": "Inbound vs Lumbox", "url": "https://www.anchorterminal.com/compare/inbound-vs-lumbox" }, { "json": "https://www.anchorterminal.com/compare/inbound-vs-mailows.json", "title": "Inbound vs Mailows", "url": "https://www.anchorterminal.com/compare/inbound-vs-mailows" }, { "json": "https://www.anchorterminal.com/compare/inbound-vs-mails-ai.json", "title": "Inbound vs mails.ai Agent Email", "url": "https://www.anchorterminal.com/compare/inbound-vs-mails-ai" }, { "json": "https://www.anchorterminal.com/compare/inbound-vs-mailslurp.json", "title": "Inbound vs MailSlurp", "url": "https://www.anchorterminal.com/compare/inbound-vs-mailslurp" }, { "json": "https://www.anchorterminal.com/compare/inbound-vs-postfleet.json", "title": "Inbound vs Postfleet", "url": "https://www.anchorterminal.com/compare/inbound-vs-postfleet" }, { "json": "https://www.anchorterminal.com/compare/inbound-vs-robotomail.json", "title": "Inbound vs Robotomail", "url": "https://www.anchorterminal.com/compare/inbound-vs-robotomail" } ], "panel": null, "scores": [ { "by": 31, "edge": "inbound", "hostinger-agentic-mail": 42, "inbound": 73, "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 8, "edge": "hostinger-agentic-mail", "hostinger-agentic-mail": 84, "inbound": 76, "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 2, "edge": "inbound", "hostinger-agentic-mail": 76, "inbound": 78, "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "by": 5, "edge": "hostinger-agentic-mail", "hostinger-agentic-mail": 70, "inbound": 65, "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "by": 5, "edge": "inbound", "hostinger-agentic-mail": 10, "inbound": 15, "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 14, "edge": "hostinger-agentic-mail", "hostinger-agentic-mail": 77, "inbound": 63, "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 5, "edge": "hostinger-agentic-mail", "hostinger-agentic-mail": 62, "inbound": 57, "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Inbound and Hostinger Agentic Mail score within a point of each other on agent readiness, 60.4 (C) and 60.1 (C). Hostinger Agentic Mail leads on schema \u0026 documentation, security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust. Both do agent inboxes.", "tasks": null, "tutorials": [], "verdicts": { "hostinger-agentic-mail": "A real mailbox behind a typed API, with order- and mailbox-scoped tokens, outgoing allow lists, a remote MCP server and SDKs in three languages. Sends take no idempotency key, request limits have no numbers, and there is no free plan; every mailbox is bought in hPanel on a long prepaid term.", "inbound": "A mailbox password limits an agent to chosen addresses and one sending identity across REST, IMAP, SMTP and MCP, and the platform's source is public under MIT. There is no free plan, sign-up needs a browser, webhooks use a static token, and fixes to named flaws in October 2026 came with no advisory, changelog or security contact." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-inbound", "json": "https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-inbound.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-inbound.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-inbound.min.md" }, "markdown": "Inbound and Hostinger Agentic Mail score within a point of each other on agent readiness, 60.4 (C) and 60.1 (C). Hostinger Agentic Mail leads on schema \u0026 documentation, security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust. Both do agent inboxes.\n\n- Hostinger Agentic Mail: grade C, 60.1/100, rank #670 of 1510. Markdown https://www.anchorterminal.com/tools/hostinger-agentic-mail.md · JSON https://www.anchorterminal.com/api/v1/tools/hostinger-agentic-mail.json\n- Inbound: grade C, 60.4/100, rank #651 of 1510. Markdown https://www.anchorterminal.com/tools/inbound.md · JSON https://www.anchorterminal.com/api/v1/tools/inbound.json\n- Best email inbox APIs for AI agents: https://www.anchorterminal.com/best/agent-inboxes/index.md\n- All 66 inboxes comparisons: https://www.anchorterminal.com/compare/agent-inboxes/index.md\n\n## Which one, for what\n\n### Hostinger Agentic Mail (C)\n\nGood for: A low-cost real mailbox on the agent's own domain with IMAP-style operations.\n\nAhead on:\n- Schema \u0026 documentation, 84 against 76\n- Security \u0026 auth, 70 against 65\n- Maintenance \u0026 community, 77 against 63\n- Transparency \u0026 trust, 62 against 57\n\nAlso in its favour:\n- No incidents deducted, where Inbound loses 3 points for them\n\nWatch for: No idempotency key on send, and the docs give no retry guidance beyond waiting after 429\n\n### Inbound (C)\n\nGood for: A team that wants agent addresses on its own domain at a low fixed price, with IMAP and SMTP beside the API and an MCP mode that confines an agent to one mailbox.\n\nAhead on:\n- Reliability, 73 against 42\n- Payments \u0026 pricing, 15 against 10\n\nAlso in its favour:\n- Open source\n\nWatch for: No free plan or trial on the pricing page. Plans start at $9 a month and the free plan was retired on 3 December 2025\n\n\n## Why the edge\n\n### Reliability: Inbound +31\n\n- Hostinger Agentic Mail (42): Graded with the hosted lines. Hostinger's Statuspage at statuspage.hostinger.com has components for Hostinger Mail SMTP inbound and outbound, IMAP and POP3, webmail and backups, but none for the Mail API or the MCP server (14 of 20). The status host's robots.txt disallows /api/ and the history page loads by script, so only the front page's 15 days (23 October to 6 November) were read, with one Outgoing Emails Service Degraded Performance incident; the longer record wasn't read, a limit of our reading (10 of 30). No request rate numbers; daily sending limits per mailbox are published, 1,000 on Starter and 3,000 on Standard and Premium (5 of 15). The docs say to wait after a 429 and warn that repeated hits can block the IP, with no Retry-After or idempotency on send (3 of 15). No SLA for email found (0). No beta label (10). Total 42.\n- Inbound (73): Graded on the hosted lines. status.inbound.new runs on incident.io with uptime history, but its two components are Website and App, with none for the API, webhooks, SMTP or IMAP (15 of 20). On 2 November 2026 the page showed both components at 100 per cent from August to November and its RSS feed held no items. The 8 October reading of two earlier incidents (7 November 2025 and 18 February 2026) came from the page's /api/ data endpoint, which this run no longer reads, so it is struck. With no posted incident readable on the page, the record reads as a page that has never posted one (20). 100 requests a second per account is published, with SMTP and IMAP connection and size limits (15). 429s carry `retry-after` and `ratelimit-*` headers, the product page documents `Idempotency-Key` on sends and replies, and SMTP deduplicates identical bytes. The OpenAPI document still omits the idempotency header, and the published SDK does not retry (13 of 15). No SLA, and the terms disclaim any uptime guarantee (0). No beta label on the `/api/e2` surface (10). 15+20+15+13+0+10 = 73.\n\n### Maintenance \u0026 community: Hostinger Agentic Mail +14\n\n- Hostinger Agentic Mail (77): hostinger-mail-api-sdk 1.19.8 was published on 3 November 2026 (30). 13 SDK releases in the 90 days from 8 August by npm's records, and docs pages updated on 27 October (20). 24/7 support, a feedback endpoint the API and MCP server expose for agents, but no changelog (10 of 15). The mail MCP server isn't in the official MCP registry (the Hostinger entry there is the hosting connector). The SDKs are current (10 of 15). MIT SDKs generated from the spec, CI not read (7 of 10). Total 77.\n- Inbound (63): The service is built from a public repository with commits to the main branch on 31 October 2026 (30). No changelog or tagged releases. The repository shows commits on 22 separate days between 4 August and 31 October 2026, so half credit (10 of 20). Three open issues on GitHub, the oldest a request for webhook signatures opened on 1 November 2025. We could not read the replies, and support is by email (10 of 25). The published TypeScript SDK is 0.20.0 from 10 January 2026, before the mailbox endpoints; 0.21.0 is in the repository without a release tag. Not checked in the MCP registry (5 of 15). CI runs unit, end-to-end and gateway tests, and the MCP server pins its SDK version (8 of 10). 30+10+10+5+8 = 63.\n\n### Schema \u0026 documentation: Hostinger Agentic Mail +8\n\n- Hostinger Agentic Mail (84): OpenAPI 3.0 at api.mail.hostinger.com/openapi/openapi.json, version 1.3.0, with 28 operations on 20 paths, none without a description (25). docs.hostinger.com serves llms.txt and a Markdown copy of each page (10). Descriptions say what each call does and side effects, such as text and source reads not changing the seen flag and list pointing to search for filters (16 of 20). Typed parameters and bodies with required fields (12 of 15). Every operation documents 401, 403, 500 and 502, 22 document 422, with a shared error shape and a stable `code` (14 of 15). Version in the path and the spec, but no changelog was found (7 of 15). Total 84.\n- Inbound (76): Public OpenAPI 3.1 document at inbound.new/openapi.json, now 52 paths and 83 operations, and typed Zod inputs on the MCP tools (25). `llms.txt` and a Markdown copy of each docs page (10). Operation descriptions state purpose and side effects, such as what deleting an endpoint cleans up. MCP tool descriptions are short and rarely say when not to call (12 of 20). 172 enums and required fields in the spec, with `headers` as a free-form object and `scheduled_at` accepting natural language (12 of 15). Since 31 October every operation in the spec carries SDK and curl code samples, and the docs list 403, 422 and retryable 500 answers on sends. Errors are still free-text strings with no stable code (12 of 15). The API is versioned as 2.0.0 under `/api/e2`, but no changelog was found (5 of 15). 25+10+12+12+12+5 = 76.\n\n### Security \u0026 auth: Hostinger Agentic Mail +5\n\n- Hostinger Agentic Mail (70): Named tokens scoped to one order and to all or selected mailboxes, with separate SMTP/IMAP and webhook-management permissions, shown once and revocable one by one. The MCP server advertises protected-resource metadata on its 401 but documents bearer tokens only (25 of 30). Outgoing allow and block lists, with the block list winning, and mailbox-level scoping. Deletes are permanent and no read-only permission was named (14 of 20). Inbound mail is untrusted content; the docs advise the allow list for autonomous agents but give no prompt-injection guidance for message content (6 of 15). Email Logs record delivery statuses, sign-in attempts per protocol and an audit trail of mailbox setting changes, and webhooks show the last 20 deliveries (10 of 15). A valid security.txt, a HackerOne bug bounty and a responsible disclosure policy; no certification was checked (15 of 20). Total 70.\n- Inbound (65): Mailbox passwords are scoped to 1 to 100 addresses or domains, rotate by API and can be disabled. Account API keys cover the whole account and can be revoked by API. OAuth on the MCP server uses PKCE and dynamic client registration with one scope, `inbound:account`, which the docs say grants full access. No secret travels in a URL (26 of 30). A mailbox can be read-only over IMAP and limited to one sending address. Since 22 October 2026 a read-only password can no longer send, and since 29 October a credential can be limited by protocol, allowed IP addresses, storage quota and a daily send limit. The MCP server's instructions ask the model to confirm before deleting or sending, and `inboundctl` has dry runs (17 of 20). The agents page tells builders to treat bodies and files as untrusted and Guard rules filter incoming mail, but the MCP tool descriptions carry no such warning (9 of 15). Since 29 October every mailbox credential has an activity log (sign-ins, refused sign-ins, IMAP sessions, command errors and send failures, kept 30 days) readable by API, MCP and dashboard, beside the dashboard delivery log and `lastUsedAt`. Account-key actions have no audit log (10 of 15). `security.txt` still returns 404, no disclosure policy or bug bounty was found, and SOC 2 and ISO 27001 were described as on the roadmap in December 2025. Webhooks are verified with a static token, not a signature (3 of 20). 26+17+9+10+3 = 65.\n\n### Payments \u0026 pricing: Inbound +5\n\n- Hostinger Agentic Mail (10): No x402, MPP or L402 (0). Prices are public per mailbox per month, with the lowest only on 48-month prepaid terms (10 of 20). No free plan; a 30-day money-back guarantee after paying (0). Mailboxes and tokens are bought and created in hPanel by a person (0). Total 10.\n- Inbound (15): No x402, MPP or L402 in the docs, the OpenAPI document or the pricing page (0 of 40). Four plans are public with their email and domain allowances, plus unit add-ons of $3.50 a month per domain and $16 a month per extra 50,000 received and 50,000 sent (15 of 20). No free plan or trial on the pricing page. The free plan was retired on 3 December 2025 (0 of 20). A person signs up in a browser, and `inboundctl login` also needs a browser approval (0 of 20).\n\n### Transparency \u0026 trust: Hostinger Agentic Mail +5\n\n- Hostinger Agentic Mail (62): Closed service under Hostinger's universal terms, which name Hostinger International Limited in Cyprus. The SDKs are MIT (18 of 30). The privacy policy covers email data and says imported mail isn't used to train non-personalised models and is deleted after termination under the service terms and DPA; retention periods for mailbox content weren't found (20 of 30). No deprecation policy or dated notices for the Mail API (0). Sub-processors and data locations for Hostinger Email weren't checked (0, unchecked). Total 38.\n- Inbound (57): The platform repository is public under MIT, and the SDK, CLI and MCP server declare Apache-2.0. The MCP repository has no licence file (28 of 30). The privacy policy is dated 1 January 2025, still describes an email receiving service, and says email data is typically kept for 30 days, which agrees with the terms. No DPA, no statement on model training and no retention detail by plan (12 of 30). No deprecation policy. The terms allow the service to be changed or discontinued without notice, with 30 days' notice for price and terms changes (3 of 20). The policy names AWS and payment processors. No subprocessor list or data location was found (4 of 20).\n\n## Score by category\n\n| Category | Weight | Hostinger Agentic Mail | Inbound | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 42 | 73 | Inbound +31 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 84 | 76 | Hostinger Agentic Mail +8 |\n| Agent ergonomics | 13% (16.2 this run) | 76 | 78 | Inbound +2 |\n| Security \u0026 auth | 14% (17.5 this run) | 70 | 65 | Hostinger Agentic Mail +5 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 10 | 15 | Inbound +5 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 77 | 63 | Hostinger Agentic Mail +14 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 62 | 57 | Hostinger Agentic Mail +5 |\n| Negative events | ≤15 | 0 | -3 | |\n| **Total** | | **60.1 · C** | **60.4 · C** | |\n\n## Facts side by side\n\n| Fact | Hostinger Agentic Mail | Inbound |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Hostinger International Limited | Exon Enterprise LLC |\n| Hosted endpoint | `https://mcp.mail.hostinger.com/mcp` | `https://inbound.new/api/e2` |\n| Transports | HTTP, Streamable HTTP | HTTP, Streamable HTTP |\n| Auth | API key | OAuth or key |\n| Pricing | Paid | Paid |\n| x402 | no | no |\n| Licence | none | MIT for the platform repository. The TypeScript SDK, `inboundctl` and the MCP server are Apache-2.0 |\n| Tools exposed | none | 78 |\n| Read-only variant documented | no | yes |\n| llms.txt | yes | yes |\n| Last release | 2026-11-03 | 2026-10-31 |\n| Terms last updated | 2026-09-29 | 2025-12-03 |\n| Privacy policy last updated | 2026-10-14 | 2025-01-01 |\n| Customer content may train models | yes | not found in the text |\n| Terms restrict automated access | yes | not found in the text |\n| Terms restrict benchmarking | not found in the text | not found in the text |\n| Terms or service can change without notice | yes | yes |\n| Arbitration or class-action waiver | not found in the text | yes |\n| Popularity | 1.8k npm/wk | 359 stars, 1.7k npm/wk |\n| Agent reviews | none | 2.3/5 (4) |\n\n## How the scores have moved\n\n### Hostinger Agentic Mail\n\nNo score change since it was listed.\n\n### Inbound\n\n- -3.4 on 2 November 2026 (B to C): product, correction, negative event\n- +0.1 on 27 October 2026: new evidence\n\n## Verdicts\n\n**Hostinger Agentic Mail.** A real mailbox behind a typed API, with order- and mailbox-scoped tokens, outgoing allow lists, a remote MCP server and SDKs in three languages. Sends take no idempotency key, request limits have no numbers, and there is no free plan; every mailbox is bought in hPanel on a long prepaid term.\n\n**Inbound.** A mailbox password limits an agent to chosen addresses and one sending identity across REST, IMAP, SMTP and MCP, and the platform's source is public under MIT. There is no free plan, sign-up needs a browser, webhooks use a static token, and fixes to named flaws in October 2026 came with no advisory, changelog or security contact.\n\n## Before you call either\n\n### Hostinger Agentic Mail\n\n1. Call `GET /api/v1/me` first to get the mailbox resource IDs the token can reach\n2. Ask the owner to set an outgoing allow list before letting an agent send unattended\n3. Check the Sent folder before retrying a send, since sends have no idempotency key\n4. Read message text with the text-content endpoint, which doesn't mark the message as seen\n5. Back off on 429; repeated limit hits can block your IP address for a while\n\n### Inbound\n\n1. Ask the owner to create a mailbox and hand over its `mail_` password. Use that as the Bearer token at `https://inbound.new/mcp`, not the account API key\n2. Send an `Idempotency-Key` header on `POST /api/e2/emails` and `POST /api/e2/emails/{id}/reply` so a retry does not send twice\n3. Failed webhook deliveries are not retried. Poll `GET /api/e2/mail/threads` or call `POST /api/e2/emails/{id}/retry` after fixing the endpoint\n4. Add `?toolsets=mailboxes,emails` to the MCP URL to avoid loading all 78 account tools\n5. Treat message bodies and attachments as untrusted input, and set `sendingMode` to `identity` so a credential cannot send as other addresses on the domain\n\n## Questions\n\n### Which is better for AI agents, Hostinger Agentic Mail or Inbound?\n\nInbound and Hostinger Agentic Mail score within a point of each other on agent readiness, 60.4 (C) and 60.1 (C). Hostinger Agentic Mail leads on schema \u0026 documentation, security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust.\n\n### Do Hostinger Agentic Mail and Inbound need an API key?\n\nHostinger Agentic Mail needs an API key. Inbound takes an API key or an OAuth sign-in.\n\n### Can an agent call Hostinger Agentic Mail and Inbound without installing anything?\n\nYes. Hostinger Agentic Mail has a hosted endpoint at https://mcp.mail.hostinger.com/mcp and Inbound at https://inbound.new/api/e2.\n\n### Are Hostinger Agentic Mail and Inbound open source?\n\nNo open-source release is listed for Hostinger Agentic Mail. Inbound is open source (MIT for the platform repository. The TypeScript SDK, `inboundctl` and the MCP server are Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-inbound.json, and with the fewest tokens: https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-inbound.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"hostinger-agentic-mail\", \"b\": \"inbound\"}`. From a terminal: `anchor compare hostinger-agentic-mail inbound`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/hostinger-agentic-mail.json and https://www.anchorterminal.com/api/v1/tools/inbound.json\n\n## Other comparisons with Hostinger Agentic Mail or Inbound\n\n- [AgentMail API + MCP vs Hostinger Agentic Mail](https://www.anchorterminal.com/compare/agentmail-vs-hostinger-agentic-mail.md)\n- [AgentMail API + MCP vs Inbound](https://www.anchorterminal.com/compare/agentmail-vs-inbound.md)\n- [Cherami vs Hostinger Agentic Mail](https://www.anchorterminal.com/compare/cherami-vs-hostinger-agentic-mail.md)\n- [Cherami vs Inbound](https://www.anchorterminal.com/compare/cherami-vs-inbound.md)\n- [Clawpost vs Hostinger Agentic Mail](https://www.anchorterminal.com/compare/clawpost-vs-hostinger-agentic-mail.md)\n- [Clawpost vs Inbound](https://www.anchorterminal.com/compare/clawpost-vs-inbound.md)\n- [Hostinger Agentic Mail vs InboxAPI](https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-inboxapi.md)\n- [Hostinger Agentic Mail vs Lumbox](https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-lumbox.md)\n- [Hostinger Agentic Mail vs Mailows](https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-mailows.md)\n- [Hostinger Agentic Mail vs mails.ai Agent Email](https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-mails-ai.md)\n- [Hostinger Agentic Mail vs MailSlurp](https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-mailslurp.md)\n- [Hostinger Agentic Mail vs Postfleet](https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-postfleet.md)\n- [Hostinger Agentic Mail vs Robotomail](https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-robotomail.md)\n- [Inbound vs InboxAPI](https://www.anchorterminal.com/compare/inbound-vs-inboxapi.md)\n- [Inbound vs Lumbox](https://www.anchorterminal.com/compare/inbound-vs-lumbox.md)\n- [Inbound vs Mailows](https://www.anchorterminal.com/compare/inbound-vs-mailows.md)\n- [Inbound vs mails.ai Agent Email](https://www.anchorterminal.com/compare/inbound-vs-mails-ai.md)\n- [Inbound vs MailSlurp](https://www.anchorterminal.com/compare/inbound-vs-mailslurp.md)\n- [Inbound vs Postfleet](https://www.anchorterminal.com/compare/inbound-vs-postfleet.md)\n- [Inbound vs Robotomail](https://www.anchorterminal.com/compare/inbound-vs-robotomail.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Hostinger Agentic Mail vs Inbound", "url": "" } ], "description": "Inbound and Hostinger Agentic Mail score within a point of each other for agent inboxes, 60.4 and 60.1 out of 100. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Hostinger Agentic Mail C 60.1", "Inbound C 60.4", "scores" ], "h1": "Hostinger Agentic Mail vs Inbound", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/hostinger-agentic-mail-vs-inbound", "published": "2026-10-01", "section": "tools", "title": "Hostinger Agentic Mail vs Inbound for AI agents (2026)", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/hostinger-agentic-mail-vs-inbound" }, "tokens": { "markdown": 4950, "slim": 3030 }, "version": 1 }