Home
disposable-mail providers
mail.tm · 2 records in Email, Storage · JSON
Records 2
api.mail.tm/Disposable inbox APIemail/mail-tmJSONcomparereport an error
- Free allowance
- A disposable inbox with a 40 MB quota, created and read over a keyless REST API
- Verdict
- caveatusable, with a named limit or an unprobed read path
- Cost
- free tier
- Identity
- anonymousno card, no phone
- Binding limit
- per-object-cap40 MB quota per inbox, reported by the account object
- Evidence
- measured5 sources; a live request was made and its output kept
- Freshness
- stale on 2027-01-21checked 2026-10-22 (live); stale on 2027-01-21
| Free tier | a disposable inbox with a 40 MB quota, created and read over a keyless REST API unit MB; metered on stored-bytes |
|---|
| Price | none stated |
|---|
| Limits | - request-rate no published rate limit; the API is undocumented beyond the Hydra index source
- per-object-cap (binding) 40 MB quota per inbox, reported by the account object
|
|---|
| Identity | anonymous no key, no email verification and no card; measured by creating an account |
|---|
| Egress | not applicable: receive-only |
|---|
| Per-object cap | 40 MB quota per inbox, reported by the account object |
|---|
| Retention | messages persist until the account is deleted; no expiry is stated |
|---|
| Interface | rest /domains, /accounts, /token and /messages on api.mail.tm; SMTP delivery to in.mail.tm |
|---|
| Tooling | curl, any HTTP client |
|---|
| Composes with | the verification-code sink, measured end to end: create an inbox with no key, let a service deliver over SMTP, read the message back over the API. The scarce link is the 40 MB quota and the single shared domain. |
|---|
| Reliability | one active domain; a domain change would invalidate every address a script had recorded |
|---|
| Notes | Four requests and one SMTP message proved the whole chain. 25 MiB per message against a 40 MB inbox is the practical ceiling, so one inbox holds one message. |
|---|
| Parsed numbers | - has-free-tier 1
- per-object-cap 40 MB
|
|---|
Evidence 5
| date | source | what it proved |
|---|
| 2026-10-22 | probe: https://api.mail.tm/domains | 200, one active domain maxxspace.com (id 6aa6b995482bea6f4a97f585, isActive true), read with no key |
| 2026-10-22 | probe: https://api.mail.tm/accounts | 201, a fresh account with quota 40000000, used 0, isDisabled false; no email verification and no card |
| 2026-10-22 | probe: https://api.mail.tm/token | 200, a 360-character JWT for the new account |
| 2026-10-22 | probe: smtp://in.mail.tm:25 | EHLO returned 250 and an SMTP message to the created address was accepted; sendmail returned no refusal |
| 2026-10-22 | probe: https://api.mail.tm/messages | 200, the message listed with its subject and sender, then GET /messages/{id} returned 200 with subject, from, a text part and an html part |
More fields 1
docs.mail.tm/storage/disposable-mail-providers-as-storageJSONcomparereport an error
- Free allowance
- Mail.tm API: free with no API key and no sign-up, limited to 8 queries per second per IP address; the per-account storage quota is not printed
- Verdict
- caveatusable, with a named limit or an unprobed read path
- Cost
- free tier
- Identity
- anonymousno card, no phone
- Binding limit
- retention-clampedmail.tm stores incoming messages for 7 days
- Evidence
- documented15 sources; a first-party page was read and the sentence quoted
- Freshness
- stale on 2026-12-04checked 2026-11-03 (inherited); stale on 2026-12-04
| Free tier | mail.tm API: free with no API key and no sign-up, limited to 8 queries per second per IP address; the per-account storage quota is not printedunit requests; metered on request-count; the API schema at https://api.mail.tm/docs.jsonld gives each Account an integer quota; its value is returned only for a created inbox account |
|---|
| Price | none stated |
|---|
| Limits | - retention-clamped (binding) mail.tm stores incoming messages for 7 days source
|
|---|
| Binding | retention-clamped mail.tm stores incoming messages for 7 days, so held bytes do not persist; the per-account byte quota is an integer returned only for a created account and is unverified here |
|---|
| Identity | anonymous mail.tm: no API key and no sign-up; an inbox account is created by one API request with an address and a password |
|---|
| Egress | not recorded |
|---|
| Retention | mail.tm stores incoming messages for 7 days (7 days) |
|---|
| Interface | unknown |
|---|
| Tooling | not recorded |
|---|
| Reliability | api.mail.tm/domains answers HTTP 200 with one active receiving domain (fldubai.com, replacing maxxspace.com); api.guerrillamail.com answers HTTP 200 with a JSON session; www.1secmail.com fails TLS verification (certificate not valid for the hostname), so its API could not be read |
|---|
| Evidence note | documented mail.tm and Guerrilla Mail retention is read from their own pages; API reachability is probed; the mail.tm per-account quota value and the 1secmail API are unverified |
|---|
| Parsed numbers | |
|---|
Evidence 15
| date | source | what it proved |
|---|
| 2026-10-21 | source not published | not published |
| 2026-10-30 | docs.mail.tm/ | the mail.tm API allows 8 queries per second per IP address |
| 2026-10-30 | docs.mail.tm/ | the mail.tm API is free with no API key, no sign-up and no paid tier |
| 2026-10-30 | api.mail.tm/docs.jsonld | the API schema gives each Account an integer quota property; its value is not printed |
| 2026-10-30 | docs.mail.tm/ | an inbox account is created by one API request |
| 2026-10-30 | probe: https://api.mail.tm/domains | api.mail.tm/domains answered HTTP 200 |
| 2026-10-30 | probe: https://api.mail.tm/domains | the mail.tm API lists an active receiving domain |
| 2026-11-03 | probe: https://api.mail.tm/domains | api.mail.tm/domains answered HTTP 200 |
| 2026-11-03 | mail.tm/en/faq/ | the text of Limits, above |
| 2026-11-03 | probe: https://api.mail.tm/domains | the mail.tm API listed an active receiving domain on 2026-11-03 |
| 2026-11-03 | probe: https://api.guerrillamail.com/ajax.php | api.guerrillamail.com get_email_address answered HTTP 200 |
| 2026-11-03 | probe: https://www.1secmail.com/ | www.1secmail.com presented a TLS certificate not valid for its hostname |
| 2026-11-03 | probe: https://www.1secmail.com/api/v1/ | the 1secmail API URL failed TLS verification and returned no status |
| 2026-11-03 | www.guerrillamail.com/GuerrillaMailAPI.html | Guerrilla Mail emails expire after 60 minutes |
| 2026-11-03 | probe: https://api.guerrillamail.com/ajax.php | the Guerrilla Mail API returned a new inbox address on a guerrillamailblock.com domain, with a creation timestamp, as JSON |
More fields 1
| dead end | {"failure_class": "dead-service","why": null,"retry_when": null,"first_recorded": "2026-10-21"} |
|---|
Unknown values 6
- chaining: no value was recorded for this field
- egress terms: no value was recorded for this field
- interface: the access interface was not established
- per object cap notes: no value was recorded for this field
- per object cap stated: no value was recorded for this field
- tooling: no value was recorded for this field