# Mailless

Mailless gives ShareNow All Access agents short-lived email inboxes for sign-ins, receipts, replies, and product journeys. Each All Access account can also claim one permanent address at https://mailless.sharenow.today/handle.

## MCP

Endpoint: https://mailless.sharenow.today/mcp
Method: POST
Authorization: Bearer $SHARENOW_API_KEY

Use an existing ShareNow All Access API key. That same key authenticates Mailless.

Tools:
- inbox_create
- inbox_status
- inbox_read
- inbox_wait
- inbox_send
- inbox_reply
- inbox_delete

Create returns an inbox ID, a friendly address such as sable-fern-7k4q@mail.sharenow.today, expiry, and a one-time capability. Keep that capability in memory and send it only in Authorization fields or MCP tool arguments. Never place it in a URL or log.

MCP inbox_create accepts optional ttlSeconds and maxMessages fields. Omitting them uses a 3,600-second lifetime and a 100-message limit.
MCP inbox_delete requires confirm: true together with the inbox ID and capability.

## REST

Create: POST https://mailless.sharenow.today/v1/inboxes
Authorization: Bearer $SHARENOW_API_KEY
Content-Type: application/json
Create JSON body (both fields optional):
{"ttlSeconds":3600,"maxMessages":100}
Omit either field to use its default. REST DELETE uses the inbox capability and has no JSON body.

After creation, use the returned inbox capability for inbox-specific REST calls.

Status: GET /v1/inboxes/$INBOX_ID
Wait: GET /v1/inboxes/$INBOX_ID/messages?after=0&wait=25
Read: GET /v1/inboxes/$INBOX_ID/messages/$MESSAGE_ID
Send: POST /v1/inboxes/$INBOX_ID/messages
Reply: POST /v1/inboxes/$INBOX_ID/messages/$MESSAGE_ID/reply
Delete: DELETE /v1/inboxes/$INBOX_ID
Authorization: Bearer $INBOX_CAPABILITY

Send JSON body:
{"to":"recipient@example.com","subject":"Subject","text":"Message","idempotencyKey":"unique-send-key"}
Send requires to, subject, idempotencyKey, and at least one non-empty text or html body.

Reply JSON body:
{"text":"Reply message","idempotencyKey":"unique-reply-key"}
Reply requires idempotencyKey and at least one non-empty text or html body; subject is optional.

## Permanent address (REST)

One permanent handle per All Access account, claimed by its owner and never expiring. These routes authenticate with the account's ShareNow API key, not an inbox capability.
Status: GET /v1/handle
Claim: POST /v1/handle with JSON body {"handle":"yourname"}
Availability: GET /v1/handle/availability?handle=yourname
Read: GET /v1/handle/messages?after=0&wait=25 and GET /v1/handle/messages/$MESSAGE_ID
Send and reply: POST /v1/handle/messages and POST /v1/handle/messages/$MESSAGE_ID/reply with the same bodies as above
Clear kept mail: DELETE /v1/handle/messages
The permanent inbox keeps the newest 500 messages and retains attachment metadata only. The handle cannot be renamed.

Limits per All Access account:
- 20 active inboxes
- 60 creates per rolling hour
- 100 sends per rolling 24 hours
- 25 sends per inbox lifetime
- Inbox lifetime from 60 seconds to 7 days
- Inbound raw message maximum of 10 MiB
- Retained text and HTML body maximum of 512 KiB each
- Attachment metadata is retained; attachment content and raw MIME are discarded

All Access: https://sharenow.today/pricing