Head to head · Agent inboxes · October 2026 research run

Hostinger Agentic Mail vs Lumbox

Lumbox and Hostinger Agentic Mail score within a point of each other on agent readiness, 60.7 (C) and 60.1 (C). Hostinger Agentic Mail leads on maintenance & community. Both do agent inboxes.

Best email inbox APIs for AI agents · All 66 inboxes comparisons

Which one, for what

Hostinger Agentic Mail C

Best for A low-cost real mailbox on the agent's own domain with IMAP-style operations.

Ahead on

  • Maintenance & community, 77 against 23

Watch for

No idempotency key on send, and the docs give no retry guidance beyond waiting after 429

Lumbox C

Best for Agents that need their own address to receive sign-up codes and links and to send replies.

Ahead on

  • Payments & pricing, 40 against 10
  • Transparency & trust, 72 against 62

Also in its favour

  • Runs on your own machine
  • Free to start without a card

Watch for

No status page, incident history or SLA; the terms say availability isn't guaranteed

Why the edge

Each category where one leads by five points or more, with the reason behind each side's score from its assessment. The numbers are in the table below; this is what they stand for.

Maintenance & community Hostinger Agentic Mail +54

Hostinger Agentic Mail 77

hostinger-mail-api-sdk 1.19.8 was published on 3 November 2026 (30). 13 SDK releases in the 90 days from 8 August by npm's records, and docs pages updated on 27 October (20). 24/7 support, a feedback endpoint the API and MCP server expose for agents, but no changelog (10 of 15). The mail MCP server isn't in the official MCP registry (the Hostinger entry there is the hosting connector). The SDKs are current (10 of 15). MIT SDKs generated from the spec, CI not read (7 of 10). Total 77.

Lumbox 23

The latest package releases found are lumbox 0.3.1 on npm (19 June 2026) and @lumbox/mcp-server 0.2.2 (12 June 2026), 140 days before this check, the 91 to 180 day band (10). No releases or dated changelog entries in the 90 days from 8 August (0). A closed service with a support address and an X account; no changelog (5 of 15). Not in the official MCP registry (search for lumbox returned nothing on 6 November); Node and Python SDKs exist but haven't changed since June (5 of 15). The MCP server card says 0.2.1 while npm has 0.2.2, and the SDK repository named in npm isn't publicly readable (3 of 10). Total 23.

Payments & pricing Lumbox +30

Hostinger Agentic Mail 10

No x402, MPP or L402 (0). Prices are public per mailbox per month, with the lowest only on 48-month prepaid terms (10 of 20). No free plan; a 30-day money-back guarantee after paying (0). Mailboxes and tokens are bought and created in hPanel by a person (0). Total 10.

Lumbox 40

No x402, MPP or L402 (0). Four plans with prices and limits published without login, no per-email price (10 of 20). Free plan with 3 inboxes, 500 received and 100 sent emails a month, no card (20). Agent self-signup lets an agent create its own key, which a person approves once in a browser (10 of 20). Total 40.

Transparency & trust Lumbox +10

Hostinger Agentic Mail 62

Closed service under Hostinger's universal terms, which name Hostinger International Limited in Cyprus. The SDKs are MIT (18 of 30). The privacy policy covers email data and says imported mail isn't used to train non-personalised models and is deleted after termination under the service terms and DPA; retention periods for mailbox content weren't found (20 of 30). No deprecation policy or dated notices for the Mail API (0). Sub-processors and data locations for Hostinger Email weren't checked (0, unchecked). Total 38.

Lumbox 72

A closed hosted service; the security page says it can be self-hosted, but the repository the deployment guide clones isn't publicly readable. The footer names Cyphen Innovations Private Limited (15 of 30). The privacy policy and security page agree that mail is kept while its inbox exists and an account's data is deleted within 30 days, that email isn't used for training, and that the vault uses AES-256-GCM per-organisation keys (26 of 30). A deprecation policy with Deprecation and Sunset headers, 90 days' notice and 12 months for an old version (20). Hosts and locations named, Hetzner in Germany, Neon in the US, Vercel, Cloudflare, AWS SES, Dodo Payments and Steel for browsers (18 of 20). Total 79.

Score by category

CategoryWeight this runHostinger Agentic MailLumboxEdge
Reliability16%204245Lumbox +3
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.28482Hostinger Agentic Mail +2
Agent ergonomics13%16.27678Lumbox +2
Security & auth14%17.57071Lumbox +1
Payments & pricing10%12.51040Lumbox +30
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.87723Hostinger Agentic Mail +54
Transparency & trust7%8.86272Lumbox +10
Negative events≤1500
TotalC 60.1/100C 60.7/100

Facts side by side

FactHostinger Agentic MailLumbox
KindHTTP APIHTTP API
VendorHostinger International LimitedCyphen Innovations Private Limited
Hosted endpointhttps://mcp.mail.hostinger.com/mcphttps://mcp.lumbox.co/mcp
TransportsHTTP, Streamable HTTPHTTP, Streamable HTTP, stdio
AuthAPI keyOAuth or key
PricingPaidFreemium
x402nono
Tools exposednone18
Read-only variant documentednono
llms.txtyesyes
Last release2026-11-032026-06-19
Terms last updated2026-09-292026-09-07
Privacy policy last updated2026-10-142026-03-16
Customer content may train modelsyesnot found in the text
Terms restrict automated accessyesyes
Terms restrict benchmarkingnot found in the textnot found in the text
Terms or service can change without noticeyesnot found in the text
Arbitration or class-action waivernot found in the textnot found in the text
Popularity1.8k npm/wk13 npm/wk

Verdicts

Hostinger Agentic Mail

A real mailbox behind a typed API, with order- and mailbox-scoped tokens, outgoing allow lists, a remote MCP server and SDKs in three languages. Sends take no idempotency key, request limits have no numbers, and there is no free plan; every mailbox is bought in hPanel on a long prepaid term.

Lumbox

Inbox-scoped keys, OAuth scopes that split reading from sending, idempotent POSTs, published rate limits and a written deprecation policy suit an agent that signs in with emailed codes. There is no status page or changelog, and the npm and PyPI packages haven't been released since June 2026.

Before you call either

Hostinger Agentic Mail

  1. Call GET /api/v1/me first to get the mailbox resource IDs the token can reach
  2. Ask the owner to set an outgoing allow list before letting an agent send unattended
  3. Check the Sent folder before retrying a send, since sends have no idempotency key
  4. Read message text with the text-content endpoint, which doesn't mark the message as seen
  5. Back off on 429; repeated limit hits can block your IP address for a while

Lumbox

  1. Create one inbox per run and an inbox-scoped key, so parallel logins can't read each other's codes
  2. Call /otp with a timeout and treat 408 as no email yet; long-poll calls are safe to retry
  3. Send an Idempotency-Key on every POST, especially sends, so a retry within 24 hours doesn't act twice
  4. Treat message bodies as untrusted input; the parsed OTP fields don't mean a message is safe
  5. On 429 wait retry_after_seconds, and don't retry 400, 401, 403 or 404

Questions

Which is better for AI agents, Hostinger Agentic Mail or Lumbox?

Lumbox and Hostinger Agentic Mail score within a point of each other on agent readiness, 60.7 (C) and 60.1 (C). Hostinger Agentic Mail leads on maintenance & community.

Do Hostinger Agentic Mail and Lumbox need an API key?

Hostinger Agentic Mail needs an API key. Lumbox takes an API key or an OAuth sign-in.

Can an agent call Hostinger Agentic Mail and Lumbox without installing anything?

Yes. Hostinger Agentic Mail has a hosted endpoint at https://mcp.mail.hostinger.com/mcp and Lumbox at https://mcp.lumbox.co/mcp.

Other comparisons with Hostinger Agentic Mail or Lumbox

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.