Mail-in-a-Box
Mail-in-a-Box provides an easy-to-deploy, self-hosted mail server solution that includes a web-based control panel and a RESTful HTTP API for managing email accounts, DNS records, backups, and system monitoring. It aims to give users control over their email infrastructure while simplifying setup and maintenance.
Mail-in-a-Box publishes 7 API contracts indexed on the APIs.io network, including DNS API, Mail API, MFA API, and 4 more. Tagged areas include Company, Email, Self-hosted, Open-source, and Automation.
The Mail-in-a-Box catalog on APIs.io includes 1 JSON-LD context and 1 Spectral governance ruleset.
Mail-in-a-Box’s developer surface includes authentication and 15 more developer resources.
Kin Score
Kin Score
How this is scored →scored 2026-10-31 · rubric v0.25.0
It updates itself when the score changes. Paste this where you link to your API docs:
<a href="https://apis.io/providers/mail-in-a-box/"><img src="https://apis.io/badge/mail-in-a-box/card.svg" alt="Mail-in-a-Box on APIs.io — Kin Score by API Evangelist"></a>Other styles, a README pill and a shields.io endpoint are on the badge page.
- MCP Server +12 pts — deployment.mode + probe verdict on the mcp/ manifest, not the pointer; an unprobed slug falls back to authorship
- Idempotency +9 pts — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented)
- A2A Agent Card +8 pts — a2a/
-a2a.yml manifest, graded on conformance.grade against A2A 1.0.0 - Rate-Limit Signaling +7 pts — OpenAPI responses document X-RateLimit-* / RateLimit headers (verified), else a rate_limits artifact or RateLimits link (documented)
- Delegated User Identity +6 pts — a served discovery document listing authorization_code in grant_types_supported (served), else an oauth2 authorizationCode flow or openIdConnect declared in an OpenAPI (documented)
- Registration Without a Human +6 pts — a `registration_endpoint` in the served RFC 8414 / OIDC discovery document
- Access Clarity scores 0.0 — up to +20.0 composite points
- Developer Ergonomics scores 20.8 — up to +15.8 composite points
- Operational Transparency scores 5.3 — up to +12.3 composite points
APIs 7
Individual APIs this provider publishes, each with its own machine-readable definition.
Mail-in-a-Box DNS API
DNS operations, which include adding custom records, adding a secondary nameserver and viewing all DNS records.
Mail-in-a-Box Mail API
Mail operations, which include getting all users, getting all aliases, adding/updating/removing users and aliases and getting all mail domains.
Mail-in-a-Box MFA API
Manage multi-factor authentication schemes. Currently, only TOTP is supported.
Mail-in-a-Box SSL API
TLS (SSL) Certificates operations, which include checking certificate status and installing custom certificates.
Mail-in-a-Box System API
System operations, which include system status checks, new version checks and reboot status.
Mail-in-a-Box User API
Endpoints related to user authentication.
Mail-in-a-Box Web API
Static web hosting operations, which include getting domain information and updating domain root directories.
Scroll for all 7
Agent Skills 5
Packaged agent skills for driving this provider's APIs from an AI assistant.
mail-in-a-box-add-dns-custom-record
AGENT SKILLmail-in-a-box-add-mail-user
AGENT SKILLmail-in-a-box-check-and-reboot
AGENT SKILLmail-in-a-box-login-logout
AGENT SKILLmail-in-a-box-web-manage-domains
AGENT SKILLSemantic Vocabularies 1
JSON-LD contexts and semantic vocabularies used across these APIs.
Mail In A Box Context
JSON-LDSpectral Rules 1
Spectral governance rulesets for linting and validating these APIs.
Mail-in-a-Box API Rules
SPECTRALJSON Schema 6
Standalone JSON Schema definitions for this provider's data models.
MailAliasUpsertRequest
JSON SCHEMASSLCertificateInstallRequest
JSON SCHEMASSLCSRGenerateResponse
JSON SCHEMASystemBackupConfigResponse
JSON SCHEMASystemUpdatePackagesResponse
JSON SCHEMAWebDomain
JSON SCHEMASecurity Posture 2
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Agentic Access 1
Recommended x-agentic-access execution contracts for AI agents.
Resources
Agent Surfaces 3
MCP servers, agent skills, and machine-readable catalogs
Design & Contract 6
Pagination, idempotency, versioning, errors, and events
Build 3
SDKs, sample code, and the tooling you integrate with
Access & Security 2
Authentication, authorization, and security posture
Company 1
The organization behind the API
Other 1
Properties that don't map to a standard resource type
Source (apis.yml)
Mail-in-a-Box API — frequently asked questions
Does Mail-in-a-Box have an API?
Yes. APIs.io lists 7 APIs from Mail-in-a-Box, including Mail-in-a-Box DNS API, Mail-in-a-Box Mail API and Mail-in-a-Box MFA API, and 4 more.
Is there an OpenAPI specification for the Mail-in-a-Box API?
Yes. APIs.io indexes 7 OpenAPI specifications for Mail-in-a-Box, each linked for download from this page.
How do I authenticate with the Mail-in-a-Box API?
Mail-in-a-Box uses bearer-token authentication (http · 1 scheme). The details are profiled on APIs.io as Mail In A Box Authentication.
Is the Mail-in-a-Box API ready for AI agents?
Mail-in-a-Box has a Kin Score of 29.8 out of 100 (thin) and an Agent Readiness score of 22.6 (agent-aware), scored by API Evangelist on 2026-10-31.
Work with this as data
Every provider here is available over the APIs.io API and to AI agents over MCP.