# Throwaway.io

> Throwaway.io provides free disposable email addresses across 100+ real domains. No sign-up, no tracking, no cost. Pick a domain, choose a username, and the inbox is live instantly.

## How it works

- Open the site, pick a domain, type a username: the inbox is live in seconds.
- Anything sent to that address appears in the on-page inbox: verification codes, confirmations, newsletters, attachments.
- Web inboxes expire after 1 hour, 24 hours, 7 days, or 14 days. The default is 14 days. Password locks can remain active for 14, 30, 90, or 130 days and deny all reads without the password (HTTP 403).

## For AI agents / automation

- Free public REST API, no signup or API key: `https://throwaway.io/api/ai/v1/`
  - `GET /domains`: list available domains
  - `POST /addresses`: generate a disposable address (random local part; optional `domain` in JSON body)
  - `GET /addresses/{email}/messages`: list messages for an address
  - `GET /messages/{id}`: full content of one message
  - Locked inboxes: send the password as the `X-Inbox-Password` header, otherwise reads return 403.
  - `GET /file-uploads/capabilities`: active file limits and upload methods
  - `GET /notes/capabilities`: encrypted-note limits and password rules
  - `POST /notes`: store ciphertext only; prefer the MCP create_note tool when starting with plaintext
  - `GET /notes/{id}` and `DELETE /notes/{id}`: creator-token status and destruction
  - `POST /file-uploads`: create a private resumable file session when large uploads are enabled
  - `GET /file-uploads/{id}/uploaded-parts`: list authoritative stored parts for resume
  - `POST /file-downloads/{share_token}`: exchange the link and optional password for a 15-minute raw GET URL
  - `GET https://throwaway.io/api/images/capabilities`: image formats, 25 MiB per-image limit, 20-image gallery limit, expiry, password, and scan policy
  - `POST https://throwaway.io/api/images/galleries`: create a single-image share from one clean image token or a gallery from up to 20 clean tokens
- MCP server (Streamable HTTP, stateless POST): `https://mcp.throwaway.io/mcp`. Mail tools: list_domains, generate_address, create_private_address, check_inbox, get_message. Note tools: note_capabilities, create_note, get_note_status, destroy_note. File tools: file_upload_capabilities, prepare_file_upload, get_file_upload_parts, list_file_upload_parts, complete_file_upload, get_file_upload_status, get_file_download, cancel_file_upload. create_note supports optional password protection, fixed expiry, first-reveal deletion, and creator revocation. Claude install: `claude mcp add --transport http --scope user throwaway https://mcp.throwaway.io/mcp`
- Dependency-free Node file client: `https://throwaway.io/throwaway-files.mjs`. It uploads or resumes local files, checks common embedded metadata, supports optional passwords and expiry, prints the share link, and downloads public or password-protected links. When metadata is detected, ask the user before continuing with `--allow-metadata`.
- Embedded file-agent setup: [File Upload: MCP, Claude and REST](https://throwaway.io/files#agent-access)
- Image upload: [Single images and galleries](https://throwaway.io/images). No registration. Supports JPEG, PNG, GIF, WebP, AVIF, and BMP up to 25 MiB each, 1 to 20 images, 7-day default expiry, 30-day maximum, and optional gallery password.
- Full 17-tool MCP directory and Images REST guide: [API & AI Agents](https://throwaway.io/api#mcp-tools) and [Images API](https://throwaway.io/api#image-api)
- Rate limits: 300 requests per IP per rolling 7-day window (every call counts, reported via `X-RateLimit-Limit` / `X-RateLimit-Remaining` / `X-RateLimit-Reset`; exceeding returns HTTP 429), plus at most 300 distinct addresses inspected per IP per 7 days.

## Links

- [Homepage](https://throwaway.io/): create a disposable inbox
- [API & AI Agents](https://throwaway.io/api): REST + MCP documentation
- [Encrypt](https://throwaway.io/encrypt): encrypt or decrypt text with a key: in-browser (client-side) or on-site at [/tools/encrypt](https://throwaway.io/tools/encrypt) for JavaScript-disabled use
- [Secure Notes](https://throwaway.io/notes): one-time self-destructing notes
- [File Upload](https://throwaway.io/files): upload any file up to 5 GB through resumable parts, review common embedded metadata, preview supported raster images, then receive a download page with optional password protection and expiry. Complete files up to 25 MiB are queued for background ClamAV scanning after upload and require a clean result before release. Larger files are marked `not_scanned`.
- [Image Upload](https://throwaway.io/images): upload one scanned image or a gallery. Unprotected shares return a direct image URL, HTML and email markup, forum BBCode, and Markdown. Password-protected galleries use temporary image grants and do not expose permanent embed URLs.

## Facts

- Service type: free disposable / temporary email (temp mail, burner email)
- Address domains: 100+ domains: corporate-style .net/.com domains plus throwaway.io itself; current list via `GET /domains`
- Cost: free, no account required
- Privacy: no sign-up, no tracking; web inboxes use a server-enforced expiry selected when they are created
- Limits: read/receive only: no outbound sending. API rate-limited to 300 requests per IP per rolling 7-day window.
- File uploads: any file type up to exactly 5,000,000,000 bytes; expiry options are 24 hours, 7 days, 30 days, or a custom period from 1 hour to 30 days. The default is 7 days. Optional passwords require 12 to 128 characters. Complete files up to 25 MiB are scanned asynchronously after upload and require a clean ClamAV result. Larger files are marked `not_scanned` and must be treated as untrusted.
- Agent large-file contract: resumable 32 MiB parts stored in private MinIO on the Throwaway server, three recommended concurrent PUTs, exact limit 5,000,000,000 bytes, private per-session bearer token, authoritative part discovery, exact size validation, per-part CRC32, and full-object CRC32. `GET /file-uploads/capabilities` reports the local storage and scan policy. Eligible uploads return `202` after completion, then ClamAV runs in the background. Poll the private status endpoint until `clean`, `blocked`, or `scan_unavailable`. A link appears only after `clean`. Larger files use `scan_status=not_scanned`.
- Confirmed malware: the API returns `code=threat_detected`, `confirmed_threat=true`, and a `VIRUS DETECTED` warning. Stop the workflow. No download link is created, and the public service has no research keyword override.
- Metadata contract: inspect supported single files locally before upload. If metadata is detected, list it and ask, `Are you sure you want to send this file with the metadata attached?` Continue only after confirmation. This inspection covers common fields and cannot prove that every metadata field has been found.
- Agent note contract: the MCP gateway encrypts plaintext before storage. The fragment key remains in the link, the optional 4 to 128 character password remains with the sender and recipient, and the server stores ciphertext only. Send the password through a separate channel.